Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wlfMXAdC0S33TZbc8moDWgvnlos.roa
File: wlfMXAdC0S33TZbc8moDWgvnlos.roa (raw, json)
Hash identifier: fIHLl3aLre9shbWRRXHb9V3ABj4Q1re5zjskV2HX7AM=
Subject key identifier: C2:57:CC:5C:07:42:D1:2D:F7:4D:96:DC:F2:6A:03:5A:0B:E7:96:8B
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 1182EE3A
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wlfMXAdC0S33TZbc8moDWgvnlos.roa
Signing time: Tue 19 Apr 2022 11:39:34 +0000
ROA not before: Tue 19 Apr 2022 11:39:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213252
IP address blocks: 89.252.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293793338 (0x1182ee3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Apr 19 11:39:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c257cc5c0742d12df74d96dcf26a035a0be7968b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:cd:07:0d:20:a4:d5:58:36:58:5e:84:41:
72:c2:84:36:f8:db:ca:66:92:c8:39:38:74:b9:38:
fc:a0:d2:58:b8:e0:3a:99:3c:47:c8:4b:a8:b3:c7:
35:d2:8d:a4:c7:1c:de:0a:da:dd:00:7d:18:d5:42:
ac:21:32:ed:61:af:dc:87:09:28:03:6b:4c:c2:79:
b0:50:cd:57:5f:56:46:cd:d6:e8:04:12:18:3d:3f:
1b:16:67:69:7a:5e:c7:03:9c:f2:38:5f:fe:1b:11:
a4:e9:76:ce:ac:7a:be:c4:0e:03:94:df:0d:cf:a8:
58:0e:b1:34:af:35:07:c9:8d:43:1a:83:3b:cb:46:
c2:8e:e9:47:e1:60:91:84:a7:f4:1e:14:78:52:71:
02:59:79:a3:f1:58:97:34:7c:dc:3b:26:3b:63:2f:
dc:34:49:08:42:41:20:25:75:d0:a5:b2:2c:1b:7d:
6b:53:9e:c5:04:1a:93:09:1e:81:7c:d7:aa:29:38:
e7:19:99:d3:6e:a5:85:20:11:38:75:71:6e:39:98:
5b:4d:43:89:c6:9b:5a:14:f3:7c:ab:f0:df:0a:0f:
8b:8f:51:62:e1:21:3e:80:19:6d:3a:7d:e1:db:9f:
27:7e:29:24:23:a5:8a:d6:1c:bc:56:1a:3d:84:d2:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:CC:5C:07:42:D1:2D:F7:4D:96:DC:F2:6A:03:5A:0B:E7:96:8B
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wlfMXAdC0S33TZbc8moDWgvnlos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.252.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b1:c5:82:71:02:48:21:13:74:10:b9:36:f6:a1:55:e5:78:
b9:1f:97:42:9c:18:4e:e7:3f:68:78:9e:7e:c8:f5:ea:8b:85:
df:17:6c:df:5f:bb:72:cd:35:45:42:e4:f9:f1:70:fe:e3:e4:
2d:4a:98:c0:2f:6e:25:19:65:9c:84:84:f0:1b:ce:49:0e:b1:
5e:ab:ec:83:2c:3d:fc:89:1b:ef:9a:00:6e:c5:bb:9f:84:11:
80:c2:03:68:2e:64:b4:e5:60:c5:1e:54:e3:fb:f5:17:1c:1d:
45:fb:bf:ad:a8:a3:c1:b1:7d:2b:e0:03:20:ca:10:cc:5a:d6:
e2:b3:bc:02:e0:25:d4:4f:ce:c2:74:ee:f4:6a:2b:3d:70:67:
bb:2a:bc:69:cd:dc:de:4c:4a:98:f0:f0:f9:64:4a:32:b1:ea:
a1:f8:b1:96:2b:81:ca:50:eb:72:d9:a7:2c:f2:94:ed:1e:88:
7c:ff:6c:18:54:79:01:b2:e3:2b:b0:bc:1a:95:90:02:00:bc:
55:10:50:1b:7c:f1:97:31:5d:d8:ec:ed:97:df:7a:bd:9f:bf:
e5:3a:de:93:77:35:28:6d:a8:6d:46:07:00:27:9d:7a:74:11:
e4:9f:4f:13:ed:c1:da:18:39:6d:7f:16:7a:c5:20:d6:b2:13:
9c:0a:75:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:52 2024 by rpki-client on console-fra.rpki-client.org