Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/WE6Gdp_6YGLWs5aXSS-bax5vCEk.roa
File: WE6Gdp_6YGLWs5aXSS-bax5vCEk.roa (raw, json)
Hash identifier: WTfTi7UY+Px2w4q0mAHL1CoW6/+ng2yeMMmFMDYAsQ8=
Subject key identifier: 58:4E:86:76:9F:FA:60:62:D6:B3:96:97:49:2F:9B:6B:1E:6F:08:49
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 077CF492
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/WE6Gdp_6YGLWs5aXSS-bax5vCEk.roa
Signing time: Sat 01 Jan 2022 11:59:44 +0000
ROA not before: Sat 01 Jan 2022 11:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5537
IP address blocks: 89.111.128.0/18 maxlen: 18
89.111.144.0/20 maxlen: 20
89.111.148.0/24 maxlen: 24
89.111.160.0/20 maxlen: 20
89.111.177.0/24 maxlen: 24
89.111.176.0/20 maxlen: 24
2a01:d8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125629586 (0x77cf492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jan 1 11:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=584e86769ffa6062d6b39697492f9b6b1e6f0849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:2f:be:9f:83:1f:1f:5b:66:83:b5:3f:36:
46:85:3e:47:98:03:d9:82:52:8c:a9:62:e7:d8:b9:
cd:00:da:71:4b:04:92:f4:ec:7a:33:5d:d2:61:b8:
a4:a1:b9:8c:41:a7:57:e1:e1:0c:ee:13:2e:22:72:
60:b2:35:59:ea:75:27:36:32:0d:05:02:e6:cf:66:
e0:38:7f:68:43:5d:d3:01:d1:a3:f3:e9:e4:dd:16:
c3:c9:38:05:d3:82:40:05:67:7c:aa:01:60:3b:3b:
04:80:ac:78:52:f4:04:b6:c5:a7:5e:fe:ba:ff:a3:
94:43:ad:ca:34:ea:64:0d:f1:00:93:7c:64:5e:c7:
3e:bc:68:d3:8a:b4:f8:e5:ea:47:6c:c7:6e:0b:65:
c9:a8:e8:f7:96:41:c0:e4:5c:79:66:ae:a7:8f:7a:
06:cc:72:5f:fd:84:f0:30:5a:3c:9d:55:f6:8b:0f:
66:4a:3f:6a:2e:0e:9b:da:e9:19:48:8f:31:38:3d:
3a:31:ab:c3:21:f2:4a:56:05:af:d9:64:98:33:4e:
f0:dd:01:13:ee:35:2b:19:06:ee:33:da:84:4a:a0:
09:8c:31:b4:a3:d2:66:f6:16:46:e2:b9:f4:cd:42:
d4:d6:7f:40:af:37:6f:6c:93:bb:29:49:4c:31:aa:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:86:76:9F:FA:60:62:D6:B3:96:97:49:2F:9B:6B:1E:6F:08:49
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/WE6Gdp_6YGLWs5aXSS-bax5vCEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.128.0/18
IPv6:
2a01:d8::/32
Signature Algorithm: sha256WithRSAEncryption
44:c4:45:65:f1:e3:84:be:1f:29:62:86:40:cf:59:90:0a:0c:
27:83:96:31:9d:27:ec:c3:fe:ef:0f:0e:b1:2e:4b:d6:9f:40:
2e:65:df:ed:17:6e:e6:56:a8:19:8a:0d:d5:70:b4:76:2a:1a:
8d:0f:a9:87:94:9a:a5:5a:16:d6:29:23:35:17:fb:44:eb:43:
4c:db:e1:8f:43:66:8c:a5:b1:d8:a0:23:9e:68:6d:7b:86:4f:
3a:12:e5:76:9d:02:d3:c6:1a:d3:db:68:20:32:b2:30:62:43:
0e:43:a3:a6:47:5b:3a:97:4b:22:d4:fb:e4:20:af:b9:55:a4:
2d:75:ee:a7:59:fb:b7:7f:ad:df:99:cd:31:08:04:5b:f1:16:
ea:40:61:c7:cb:ad:24:67:a6:83:b1:98:01:7d:90:7a:39:fc:
bf:c6:8a:6b:3f:07:e8:b8:9d:cf:34:ad:65:3c:5a:98:bd:98:
0f:81:b1:f7:ea:f7:7e:84:8d:40:9d:2c:a5:f0:ba:c1:01:ef:
16:9c:bd:22:22:fe:90:b9:1a:cd:a3:25:d8:e8:3c:ef:6a:10:
e6:2b:70:64:a6:57:c6:5e:f9:61:3f:32:bf:4a:22:ca:9c:90:
40:79:62:d1:55:da:9b:e8:2c:e5:fd:51:ca:80:34:58:1c:e5:
61:70:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:13 2024 by rpki-client on console-ams.rpki-client.org