Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/WNe8l66upCx5gxIvDqaTCoxM0XA.roa
File: WNe8l66upCx5gxIvDqaTCoxM0XA.roa (raw, json)
Hash identifier: qt6VnW9bAo+mhEzztISPuvBQB/0H4hXjVr9ofvPyh14=
Subject key identifier: 58:D7:BC:97:AE:AE:A4:2C:79:83:12:2F:0E:A6:93:0A:8C:4C:D1:70
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0BC02BA1
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/WNe8l66upCx5gxIvDqaTCoxM0XA.roa
Signing time: Mon 16 May 2022 23:30:12 +0000
ROA not before: Mon 16 May 2022 23:30:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 213.142.149.0/24 maxlen: 24
213.142.150.0/24 maxlen: 24
213.142.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197143457 (0xbc02ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: May 16 23:30:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58d7bc97aeaea42c7983122f0ea6930a8c4cd170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:62:45:b7:93:32:de:97:88:8d:2f:f2:63:
88:aa:a7:40:10:65:10:d9:f3:37:1b:bf:d5:0f:77:
93:8c:8f:d4:c7:de:b2:e2:4b:37:20:f5:86:1b:68:
5a:3e:aa:7b:75:1c:fb:d1:85:cd:be:a5:08:8c:2b:
d4:77:64:0e:db:d1:e3:90:10:58:53:14:92:b7:a0:
1a:b6:27:3a:26:10:07:e8:7c:c9:36:1c:ba:ff:9b:
f1:10:7a:b4:c6:f6:e7:ac:ba:b8:20:b7:3c:34:90:
36:21:66:da:6d:f2:a1:ab:94:3e:40:9b:22:13:ba:
b6:7f:08:7c:6d:8d:c9:dd:1d:98:96:f5:b2:17:56:
21:f8:05:e2:b2:d4:11:b2:a1:5d:1b:93:ed:e9:19:
49:25:bc:18:96:90:6e:a5:7f:1d:bf:e0:4d:ba:b4:
bd:72:c4:bd:88:36:a2:9a:35:17:3b:38:1d:d2:7b:
93:9b:d6:58:10:bd:13:a8:ad:23:95:c6:8a:53:b4:
ee:7d:ff:b4:0b:ed:72:02:26:4d:52:99:29:e0:3a:
4b:a3:0c:00:1a:d0:e2:a0:46:3a:39:64:49:17:06:
03:c2:a5:12:80:0f:fe:fd:4b:c4:2b:a3:55:5d:c4:
f5:e6:86:3a:d7:fd:04:d6:66:9f:bf:96:bf:60:85:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:BC:97:AE:AE:A4:2C:79:83:12:2F:0E:A6:93:0A:8C:4C:D1:70
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/WNe8l66upCx5gxIvDqaTCoxM0XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.142.149.0-213.142.150.255
213.142.156.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c1:b0:45:57:1a:dc:40:b5:e0:2b:51:e4:c4:9b:7b:58:9e:
93:59:8f:74:58:f7:ba:cb:5a:e6:33:c9:65:4f:9f:ed:f0:7f:
d5:0a:89:bc:a6:48:29:76:03:ec:83:78:2a:29:a1:d3:3d:3c:
53:2b:27:41:f2:c6:1e:d9:be:fe:06:ee:a3:4e:c9:15:0d:9d:
bb:08:9b:84:e8:ac:e3:3d:19:99:21:6a:e3:ea:2f:21:fa:c1:
05:eb:a7:b6:57:05:4d:83:3a:10:0b:a1:e6:44:ae:ce:4b:ab:
1c:0b:04:e3:27:1a:7b:87:b7:a7:2f:66:cd:98:f6:13:44:a3:
2d:22:dc:35:9c:8c:64:1d:1a:29:e7:9b:9e:21:ab:32:5f:82:
56:47:81:2a:86:3e:8a:65:80:8c:14:4f:fd:e8:c6:04:b1:e4:
62:82:0d:2c:9e:78:52:d6:4a:7a:0a:83:5d:44:07:ab:fc:0f:
e7:85:40:2a:bb:68:6f:c5:33:de:2d:1e:eb:7a:e8:5c:a8:d2:
e3:47:cc:0c:be:68:32:f5:1b:b9:bf:19:41:58:9a:d1:cb:f7:
82:df:ec:78:b5:a8:95:8f:4e:7f:73:9a:c6:a4:0e:39:34:b6:
9a:af:f1:08:50:94:54:bc:42:e2:5e:6a:13:13:06:32:24:96:
37:a4:c2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-ams.rpki-client.org