Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/wIbULAkqVXyFJ9zS1v7WoMCdijg.roa
File: wIbULAkqVXyFJ9zS1v7WoMCdijg.roa (raw, json)
Hash identifier: HSs1uJA4NhcXDlBb6aCN5W3hnmY6MslYbpcyo3Qkvec=
Subject key identifier: C0:86:D4:2C:09:2A:55:7C:85:27:DC:D2:D6:FE:D6:A0:C0:9D:8A:38
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 04800C7F
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/wIbULAkqVXyFJ9zS1v7WoMCdijg.roa
Signing time: Thu 02 Jun 2022 13:26:21 +0000
ROA not before: Thu 02 Jun 2022 13:26:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 92.51.39.0/24 maxlen: 24
92.51.20.0/24 maxlen: 24
92.51.22.0/24 maxlen: 24
92.51.23.0/24 maxlen: 24
92.51.21.0/24 maxlen: 24
92.51.38.0/24 maxlen: 24
92.51.36.0/24 maxlen: 24
92.51.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75500671 (0x4800c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jun 2 13:26:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c086d42c092a557c8527dcd2d6fed6a0c09d8a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:1e:cb:73:22:34:fb:f2:e8:7c:38:c7:d6:
c6:10:a5:2a:34:f0:34:39:46:d2:cc:e3:62:08:8e:
ac:79:dc:76:df:8e:be:dd:4b:8e:0c:4d:aa:27:0f:
f6:95:ab:2c:f7:1d:c4:4f:89:44:82:b3:55:9b:f9:
20:8f:e8:98:74:59:58:cd:74:fb:fd:be:5f:90:87:
f4:99:57:84:82:55:df:32:4f:1f:d0:2e:4c:e1:50:
ed:61:b8:79:40:78:fb:d7:0f:78:75:6b:12:9a:b3:
18:6a:fa:4a:dc:c2:4d:53:0b:9e:eb:33:5d:ff:42:
ea:93:de:f0:dc:34:73:cb:19:62:65:f3:15:a6:10:
61:1c:47:4c:9e:68:4f:0a:c2:4b:e5:32:5b:37:84:
eb:4b:cc:06:66:df:0e:ae:d4:95:a1:23:cc:3b:0e:
5b:9c:83:eb:e9:72:9b:f1:47:da:28:32:bc:87:d0:
96:63:d7:31:8c:19:b6:7b:21:4b:91:bb:8d:d4:c6:
62:a5:c4:ea:94:74:e5:bf:80:a8:66:c0:66:33:c2:
ea:a0:70:20:75:26:06:00:34:cc:d2:51:04:29:22:
8a:4e:02:e0:28:05:6c:21:7e:db:f6:26:80:4c:3d:
5a:96:0a:b2:de:70:2f:23:1b:ee:97:78:04:72:7d:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:86:D4:2C:09:2A:55:7C:85:27:DC:D2:D6:FE:D6:A0:C0:9D:8A:38
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/wIbULAkqVXyFJ9zS1v7WoMCdijg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.20.0/22
92.51.36.0/22
Signature Algorithm: sha256WithRSAEncryption
98:0d:47:1b:69:7f:b3:09:3a:90:e5:aa:2e:14:9f:1e:05:b9:
2c:15:b4:fa:76:d6:0c:65:db:e7:6d:f1:f1:bb:52:84:8a:56:
97:6a:3f:27:ec:97:92:d2:dc:0d:aa:f3:73:de:4e:3a:d4:5b:
d0:1e:4c:25:68:83:ac:95:d1:9b:75:0e:4e:e6:f3:38:ca:62:
a2:61:95:3d:f4:3e:d8:b4:6a:3f:fb:35:f6:13:b5:59:64:ab:
0a:68:a6:94:c5:23:a8:b4:0a:a2:3f:00:f1:c0:d8:77:a5:46:
c6:76:a6:7d:02:46:08:60:6e:6b:d5:21:eb:0a:30:bd:7e:c5:
53:0b:89:ca:51:fd:f5:47:aa:9e:93:47:56:22:65:78:96:ef:
73:58:36:e4:ea:37:dc:51:bc:90:f3:5b:e8:51:53:60:70:b9:
f2:5a:cf:ea:8b:ec:b3:03:45:b1:67:43:c4:b1:28:cf:71:86:
a0:86:28:90:5e:9e:49:7b:7e:01:87:ea:c3:23:d3:df:d6:71:
b6:d1:d9:1b:74:e6:3b:70:ad:f3:94:61:a4:72:4d:5e:8e:ee:
46:b9:89:1a:50:9f:f2:07:cf:e7:5d:cb:88:e7:72:c5:f9:07:
91:54:21:b4:4f:c8:f1:5b:37:08:c5:d9:47:7f:eb:6b:9e:99:
34:ac:ec:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:14 2023 by rpki-client on console-fra.rpki-client.org