Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/WgfBdwfFGQ3y0v_QVgugEcHejI8.roa
File: WgfBdwfFGQ3y0v_QVgugEcHejI8.roa (raw, json)
Hash identifier: HVWQSn3c2LCD9C0lv99M6FjFIYSBoCb5jBaakZek488=
Subject key identifier: 5A:07:C1:77:07:C5:19:0D:F2:D2:FF:D0:56:0B:A0:11:C1:DE:8C:8F
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 05EA62A0
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/WgfBdwfFGQ3y0v_QVgugEcHejI8.roa
Signing time: Sat 01 Jan 2022 06:02:14 +0000
ROA not before: Sat 01 Jan 2022 06:02:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12732
IP address blocks: 212.21.71.0/24 maxlen: 24
2001:bf1::/32 maxlen: 32
2001:bf0::/29 maxlen: 32
2001:bf0::/32 maxlen: 32
2001:bf0:40::/48 maxlen: 48
2001:bf0:69::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99246752 (0x5ea62a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 1 06:02:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a07c17707c5190df2d2ffd0560ba011c1de8c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:d6:e9:f4:84:7a:a3:7a:d7:3a:68:f4:7d:
1b:51:c0:3f:5e:12:bd:05:6c:65:0d:44:a0:41:4a:
34:00:83:b9:3e:c6:73:38:c3:6e:4d:a8:a6:bb:51:
20:84:f7:77:12:3c:b4:a1:76:87:90:6f:30:43:11:
10:c2:39:20:94:e1:89:4e:6f:d1:63:39:33:c0:34:
38:d2:69:b6:d9:95:cf:a1:6a:06:6d:49:79:13:2f:
f6:71:30:54:70:23:69:a8:c6:d6:f9:8b:35:5b:04:
cc:c1:03:30:8f:f2:7f:2a:9c:a8:a7:72:9b:8e:1f:
cb:3b:67:d4:88:ec:de:48:e1:8e:0a:c5:fb:ae:4b:
73:07:9d:de:17:d6:43:8c:a3:c0:38:f1:0b:e9:09:
bb:2b:0a:34:af:a9:90:b2:57:54:f0:72:0f:38:8c:
8c:47:29:5d:46:35:fe:44:08:cc:dc:60:84:d7:d0:
76:37:fc:a1:b9:d0:7e:98:2f:5d:22:47:80:c3:b3:
c7:0c:c6:58:0c:70:f7:78:fc:ca:99:be:d8:f2:37:
9a:48:23:29:1e:9e:3d:91:ce:37:80:b6:9e:ed:b4:
c0:f7:8c:d2:4c:82:14:d2:2e:67:48:88:c5:61:5e:
d5:ac:67:05:a6:e6:2d:7b:fb:0d:b3:34:2f:a5:b0:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:C1:77:07:C5:19:0D:F2:D2:FF:D0:56:0B:A0:11:C1:DE:8C:8F
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/WgfBdwfFGQ3y0v_QVgugEcHejI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.21.71.0/24
IPv6:
2001:bf0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:ef:9b:69:08:96:9c:33:34:de:35:5e:f9:ad:11:07:ba:75:
71:8c:47:33:49:9a:39:a4:f3:82:f0:a8:eb:d8:05:1f:4f:3c:
d3:da:3c:00:a4:93:07:3f:15:83:0f:9e:0e:fa:03:02:b6:68:
64:53:fe:bb:37:45:e6:f4:73:fc:f5:60:24:b6:16:75:37:e2:
ed:c1:6d:8c:91:e7:11:24:90:be:26:32:35:15:dd:c2:e9:29:
45:eb:95:6e:55:d9:33:fc:8d:ee:fa:df:8b:bf:e9:0c:03:3d:
77:a3:b3:3d:71:cd:bd:49:b8:d6:40:a6:91:ba:65:32:0a:e1:
b0:b6:ab:a8:55:63:09:e8:86:83:84:e1:ae:c2:1b:fa:f1:d8:
b1:1a:d1:4f:18:d2:1e:b8:10:fe:58:c0:1b:82:55:aa:3a:51:
9d:48:0e:27:74:fe:66:ee:a2:df:a8:23:09:01:98:78:30:e9:
9b:03:0f:52:07:d2:91:15:5c:49:4a:69:06:02:b4:d4:f1:69:
e9:f3:13:84:35:f8:47:49:7c:e6:f2:a4:ba:07:2c:f4:38:a0:
4d:1c:da:33:78:ac:10:ce:dd:31:80:d8:80:00:bc:63:ae:29:
e7:1f:5b:b4:05:4b:00:c8:93:d1:4d:80:fb:63:5b:9e:bc:ad:
db:1e:4a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:40 2024 by rpki-client on console-ams.rpki-client.org