Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/wigMNHyrUO0OcIXBDKWVg-I3jqg.roa
File: wigMNHyrUO0OcIXBDKWVg-I3jqg.roa (raw, json)
Hash identifier: GuVBFehgimUUJh9yF/SYoxxQUpMBfOItaRa4KAwOPyw=
Subject key identifier: C2:28:0C:34:7C:AB:50:ED:0E:70:85:C1:0C:A5:95:83:E2:37:8E:A8
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 18E4D4D4
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/wigMNHyrUO0OcIXBDKWVg-I3jqg.roa
Signing time: Fri 10 Jun 2022 14:39:04 +0000
ROA not before: Fri 10 Jun 2022 14:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209640
IP address blocks: 149.3.189.0/24 maxlen: 24
149.3.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417649876 (0x18e4d4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jun 10 14:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2280c347cab50ed0e7085c10ca59583e2378ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:de:f8:6f:a9:64:74:d9:aa:78:31:1d:f1:
77:4f:a7:0c:7f:f1:4e:f3:e6:79:d9:fa:31:86:b4:
3d:45:92:42:cf:df:e9:f0:f4:b0:5a:bc:20:13:4f:
c3:96:c8:06:bf:0c:0e:2a:02:7e:4f:04:cc:e9:97:
20:f1:00:c5:0e:0a:35:fa:c2:81:b9:31:23:83:69:
73:d8:09:42:ba:01:d4:db:b4:36:7b:74:fa:4b:08:
18:bc:c1:23:d3:b9:fd:06:6e:a2:22:6b:88:cb:18:
62:08:dc:37:e3:0d:da:9f:9e:56:7f:0f:c0:d4:14:
0b:0e:b8:2d:c8:94:af:68:19:37:d0:cc:d6:83:fe:
45:6b:93:bf:a3:95:1a:3a:b5:98:22:34:1e:90:ab:
54:b5:e0:64:ec:be:17:4e:b7:c9:3b:f4:b9:4a:a5:
3e:3c:a4:fe:59:5e:4e:90:60:55:d7:de:c4:54:6c:
e2:79:ef:1f:60:3c:76:30:42:55:52:b0:d9:fd:d3:
5f:99:cc:5e:e6:66:83:64:03:cf:dc:be:96:8f:ff:
79:75:bd:8d:87:6a:30:3a:6f:60:af:df:bc:a4:88:
48:2a:ac:0e:e8:16:75:78:b8:0e:96:d6:13:70:9e:
30:03:a7:cb:b3:ae:89:47:2c:95:48:78:9a:55:59:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:28:0C:34:7C:AB:50:ED:0E:70:85:C1:0C:A5:95:83:E2:37:8E:A8
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/wigMNHyrUO0OcIXBDKWVg-I3jqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.189.0/24
149.3.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a7:4c:42:31:db:08:58:f7:bb:ed:4a:02:6b:ed:26:46:fc:
6b:83:0d:27:ca:82:73:65:45:17:e0:59:19:05:f1:e1:19:c3:
e0:a1:ee:99:79:2a:ad:c0:be:e6:3f:2a:b8:28:11:66:5f:e4:
2c:0a:a2:35:50:0f:13:f2:80:64:63:f6:88:49:1b:00:9a:9f:
40:43:46:6a:4a:60:25:4d:40:ac:42:79:e8:ea:2a:fd:08:c6:
a4:89:b7:ae:18:46:e3:ea:ae:f8:44:0f:ca:a5:ac:04:07:df:
2a:4f:52:43:93:32:08:1c:67:96:13:27:f3:37:66:55:88:28:
72:0a:16:d3:6d:da:14:f1:91:39:47:18:71:22:b5:6c:10:9b:
4f:fc:a0:c9:a2:dd:bd:b9:98:5b:5d:de:ed:37:ba:61:90:3d:
b0:51:84:4c:ba:40:39:0b:82:24:58:55:e6:4a:9a:7e:ce:20:
6b:a4:91:32:99:54:67:18:6e:94:b9:09:91:43:34:5c:e5:98:
de:de:bf:23:9a:0a:af:80:f4:3f:fa:d7:76:60:e7:95:19:6f:
6d:a1:b9:67:c1:0d:84:27:a4:71:c7:2e:c9:04:76:f7:19:af:
88:4a:35:99:d6:d7:a2:53:70:8e:4d:e6:f2:df:86:82:cd:19:
6b:1e:e5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:40 2023 by rpki-client on console-fra.rpki-client.org