Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/WwWXDt3VD4XIL1ty7C_pUSXuNhk.roa
File: WwWXDt3VD4XIL1ty7C_pUSXuNhk.roa (raw, json)
Hash identifier: sukdIqJg5jDm2VnaeV1P3+vWNDpG7QpvRbYCFcZpF5s=
Subject key identifier: 5B:05:97:0E:DD:D5:0F:85:C8:2F:5B:72:EC:2F:E9:51:25:EE:36:19
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 386128C7
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/WwWXDt3VD4XIL1ty7C_pUSXuNhk.roa
Signing time: Sat 01 Jan 2022 04:03:58 +0000
ROA not before: Sat 01 Jan 2022 04:03:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33843
IP address blocks: 45.150.68.0/24 maxlen: 24
46.231.136.0/21 maxlen: 21
85.236.192.0/19 maxlen: 19
2a01:1ee::/32 maxlen: 32
2a01:1e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945891527 (0x386128c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Jan 1 04:03:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b05970eddd50f85c82f5b72ec2fe95125ee3619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:b5:fa:1b:ea:a5:05:d6:d3:f4:40:f4:08:
7b:5c:7c:79:66:54:50:1f:49:33:7e:26:73:c1:2f:
f0:96:13:40:72:31:94:ab:7e:61:ec:22:34:e8:59:
e2:bd:c0:62:3f:b7:89:7d:17:4e:3a:16:77:7f:ee:
b0:08:5f:a4:06:a0:3b:5e:be:e0:3d:fe:de:45:39:
01:fc:4c:27:53:a1:f4:99:23:5d:f7:a4:63:10:37:
a0:1d:8f:64:6a:9f:13:50:df:f5:85:44:43:de:eb:
80:3c:72:12:b9:91:3c:75:3d:ef:78:15:1d:70:19:
c7:ff:3b:e0:93:20:18:51:3a:28:54:1c:27:fe:ce:
3b:db:11:30:38:12:31:8c:98:08:8c:ad:ac:64:59:
fe:aa:c9:30:d4:29:26:d4:80:17:41:d2:9d:15:ca:
32:c1:47:e6:cc:9d:4f:56:d4:22:68:51:66:c3:17:
21:e1:06:7e:2f:16:8b:13:36:de:81:b8:5c:79:36:
7e:a2:59:25:cf:1b:09:f8:20:31:fb:f6:37:d3:60:
bf:f3:42:70:9a:87:d5:ca:5c:a7:fd:71:6c:96:f9:
8c:ff:31:fa:f2:71:ce:0d:1c:fd:b0:ab:91:b7:e3:
c0:da:09:75:91:57:24:77:48:a2:8f:10:f5:86:0f:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:97:0E:DD:D5:0F:85:C8:2F:5B:72:EC:2F:E9:51:25:EE:36:19
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/WwWXDt3VD4XIL1ty7C_pUSXuNhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.68.0/24
46.231.136.0/21
85.236.192.0/19
IPv6:
2a01:1e8::/32
2a01:1ee::/32
Signature Algorithm: sha256WithRSAEncryption
2a:56:5c:9d:c3:29:8e:e0:c3:a0:89:5c:60:59:8a:85:88:90:
e1:95:6d:b7:f6:f3:40:a1:10:cd:cb:9d:c9:78:c9:b1:47:d5:
e9:85:79:9c:d9:39:b4:f9:f5:df:30:89:91:82:df:ea:d3:73:
3f:24:c3:eb:0a:61:a0:aa:11:bf:3d:ee:3a:ff:4d:55:9f:1d:
22:7e:74:0a:8d:c5:89:12:d6:13:df:52:60:ec:30:a7:c0:f1:
88:70:17:af:ff:09:6a:c1:11:a9:d0:5f:32:e0:47:c9:90:46:
93:4d:4d:cd:b4:ed:80:12:96:04:32:d4:93:be:f5:35:b3:e6:
42:7b:3c:4f:cb:04:f2:de:5f:15:54:e3:a0:23:cb:94:12:95:
8c:ff:c4:b2:37:3b:ec:ff:5f:84:a6:03:2f:f3:d1:29:84:b4:
22:5c:1d:36:7b:8d:86:4e:09:1d:da:a9:e7:e4:72:d9:72:ec:
e8:07:14:cb:4b:05:42:9b:67:bb:65:3f:bf:15:5f:9a:51:64:
ca:0c:f9:13:43:26:c9:a2:43:7d:3b:eb:70:7d:b8:71:f4:53:
b3:1b:e1:60:99:ee:7c:7c:73:7e:a4:a7:b6:66:03:93:75:78:
66:2a:95:7e:15:ca:43:80:bb:df:5d:10:32:16:60:88:80:59:
ad:b3:2e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:15:26 2025 by rpki-client