Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/WlpjleKjhK-Ct9tE2tC4XxMI23U.roa
File: WlpjleKjhK-Ct9tE2tC4XxMI23U.roa (raw, json)
Hash identifier: fX1sHMAeJYhA2rMSU1+p+w9aK2LeraFNIEo2QmNMSKg=
Subject key identifier: 5A:5A:63:95:E2:A3:84:AF:82:B7:DB:44:DA:D0:B8:5F:13:08:DB:75
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 19A5E8DD
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/WlpjleKjhK-Ct9tE2tC4XxMI23U.roa
Signing time: Sat 01 Jan 2022 05:52:39 +0000
ROA not before: Sat 01 Jan 2022 05:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203004
IP address blocks: 92.255.99.0/24 maxlen: 24
89.223.100.0/24 maxlen: 24
2a04:ac00:9::/48 maxlen: 48
2a04:ac00:2::/48 maxlen: 48
2a04:ac00:a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430303453 (0x19a5e8dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 05:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a5a6395e2a384af82b7db44dad0b85f1308db75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:ec:f2:78:20:1b:3f:17:29:62:de:23:79:
00:60:72:02:1b:d2:69:2a:45:68:81:a0:22:6a:48:
33:eb:21:f7:2c:f1:33:45:5d:d5:49:6f:ba:4b:62:
6f:65:b1:d8:f3:07:aa:2e:71:97:5d:7f:c0:c8:70:
a1:3f:a4:ba:c7:5a:4c:fa:77:3f:09:f7:ab:c1:d7:
30:ba:a6:e3:b4:39:60:0b:6f:67:8b:c1:e4:3b:8e:
8a:28:99:d4:aa:90:3f:6a:ae:bb:de:6a:ce:95:a9:
a5:3b:61:0b:2d:e1:8f:8e:71:8d:3f:d1:86:b3:d0:
16:96:ff:78:d9:51:3b:16:05:ba:28:a6:04:11:fe:
98:2e:34:15:76:d9:b3:51:ea:cd:ed:f7:76:92:51:
e6:a3:43:8d:16:c0:de:19:99:29:96:7b:89:df:99:
a1:73:58:f6:2b:b8:61:36:eb:df:7c:5e:b9:99:cd:
3c:5b:f8:69:27:7f:64:16:52:c5:40:a1:1d:74:71:
8b:ee:0f:ea:86:a4:79:aa:a7:25:c6:ea:2c:c9:80:
6c:f6:67:cc:86:c7:49:05:1a:64:c8:ab:13:ce:f5:
f2:5d:76:a4:b0:61:4a:ca:d9:57:1d:b5:43:4d:2d:
c0:dc:f4:f7:14:91:02:9d:aa:94:d6:f7:1f:b1:a0:
63:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5A:63:95:E2:A3:84:AF:82:B7:DB:44:DA:D0:B8:5F:13:08:DB:75
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/WlpjleKjhK-Ct9tE2tC4XxMI23U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.100.0/24
92.255.99.0/24
IPv6:
2a04:ac00:2::/48
2a04:ac00:9::-2a04:ac00:a:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4d:13:f6:db:81:ac:08:e5:b6:bc:f9:60:f6:e4:cb:69:1e:00:
cb:a1:8d:fe:27:2c:1a:e9:f9:a9:ee:35:29:d7:1b:64:95:12:
c4:6a:93:f4:ad:fc:6c:1a:65:dd:4e:a1:1e:b8:74:7b:76:11:
42:77:42:74:8c:40:88:3e:75:25:91:ef:49:2b:e5:f7:dd:cc:
d3:71:9e:e8:d2:b7:e5:97:c3:d1:13:d4:9b:29:e7:62:ec:3e:
ab:6d:45:f6:71:19:5a:cf:da:a8:f3:07:f7:e6:2a:2b:8e:06:
fe:70:5a:b4:fd:51:b5:19:2c:12:9b:84:74:77:8d:3e:34:d7:
f3:e5:94:ad:ef:3c:f1:e2:2c:8b:c1:b5:c3:44:80:60:27:a6:
cf:0f:e2:05:7a:1a:25:53:58:ea:7f:40:0c:4d:9e:fb:d5:3e:
6a:a4:ce:93:d0:0f:3b:32:25:ea:b8:05:44:48:6e:1b:1f:19:
29:a8:f4:83:41:54:3b:bb:d6:5a:5d:cb:48:8f:15:6e:81:69:
5d:5e:c3:68:ba:5c:0f:e3:89:bc:fb:ed:eb:c7:6f:8a:30:04:
b7:5d:cd:9a:b6:20:de:ff:b9:e7:6d:11:b4:c6:4c:29:c5:ac:
56:06:d1:f5:d2:53:b0:e8:8d:47:c7:8a:d5:6c:45:2e:6b:c8:
a5:84:7d:b7
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIEGaXo3TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZDgzMTNlNDFlNjQ2YTA5Y2QwMWUyZTZmNDczOWQzYmQyMzZjNGZmMB4XDTIyMDEw
MTA1NTIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWE1YTYzOTVlMmEz
ODRhZjgyYjdkYjQ0ZGFkMGI4NWYxMzA4ZGI3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKjd7PJ4IBs/Fyli3iN5AGByAhvSaSpFaIGgImpIM+sh9yzx
M0Vd1Ulvuktib2Wx2PMHqi5xl11/wMhwoT+kusdaTPp3Pwn3q8HXMLqm47Q5YAtv
Z4vB5DuOiiiZ1KqQP2quu95qzpWppTthCy3hj45xjT/RhrPQFpb/eNlROxYFuiim
BBH+mC40FXbZs1Hqze33dpJR5qNDjRbA3hmZKZZ7id+ZoXNY9iu4YTbr33xeuZnN
PFv4aSd/ZBZSxUChHXRxi+4P6oakeaqnJcbqLMmAbPZnzIbHSQUaZMirE8718l12
pLBhSsrZVx21Q00twNz09xSRAp2qlNb3H7GgY78CAwEAAaOCAjQwggIwMB0GA1Ud
DgQWBBRaWmOV4qOEr4K320Ta0LhfEwjbdTAfBgNVHSMEGDAWgBTNgxPkHmRqCc0B
4ub0c5070jbE/zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pZTVQ1QjVrYWduTkFlTG05SE9kTzlJMnhQOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvMzQ2NWYzLTAzYzItNGVhYS1hNjc0LTg4NjJiNTE3MzE3Yy8x
L1dscGpsZUtqaEstQ3Q5dEUydEM0WHhNSTIzVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
MzQ2NWYzLTAzYzItNGVhYS1hNjc0LTg4NjJiNTE3MzE3Yy8xL3pZTVQ1QjVrYWdu
TkFlTG05SE9kTzlJMnhQOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBK
BggrBgEFBQcBBwEB/wQ7MDkwEgQCAAEwDAMEAFnfZAMEAFz/YzAjBAIAAjAdAwcA
KgSsAAACMBIDBwAqBKwAAAkDBwAqBKwAAAowDQYJKoZIhvcNAQELBQADggEBAE0T
9tuBrAjltrz5YPbky2keAMuhjf4nLBrp+anuNSnXG2SVEsRqk/St/GwaZd1OoR64
dHt2EUJ3QnSMQIg+dSWR70kr5ffdzNNxnujSt+WXw9ET1Jsp52LsPqttRfZxGVrP
2qjzB/fmKiuOBv5wWrT9UbUZLBKbhHR3jT401/PllK3vPPHiLIvBtcNEgGAnps8P
4gV6GiVTWOp/QAxNnvvVPmqkzpPQDzsyJeq4BURIbhsfGSmo9INBVDu71lpdy0iP
FW6BaV1ew2i6XA/jibz77evHb4owBLddzZq2IN7/uedtEbTGTCnFrFYG0fXSU7Do
jUfHitVsRS5ryKWEfbc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:02 2024 by rpki-client on console-fra.rpki-client.org