Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WgS35N30-3wvq0g0uwlQddheV9M.roa
File: WgS35N30-3wvq0g0uwlQddheV9M.roa (raw, json)
Hash identifier: SRyTDBl9Cy7oEYuqhx2/q9oonA2qLmwrS/kdxv04ZYU=
Subject key identifier: 5A:04:B7:E4:DD:F4:FB:7C:2F:AB:48:34:BB:09:50:75:D8:5E:57:D3
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182B10804F0CF8E54FEF831ED1698FC25B8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WgS35N30-3wvq0g0uwlQddheV9M.roa
Signing time: Thu 18 Aug 2022 12:57:48 +0000
ROA not before: Thu 18 Aug 2022 12:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42864
IP address blocks: 88.209.227.0/24 maxlen: 24
88.209.240.0/22 maxlen: 22
83.137.159.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
88.209.192.0/21 maxlen: 24
88.209.208.0/20 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
178.210.224.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
77.242.144.0/20 maxlen: 20
92.52.219.0/24 maxlen: 24
178.210.248.0/22 maxlen: 22
45.14.10.0/24 maxlen: 24
45.14.9.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:08:04:f0:cf:8e:54:fe:f8:31:ed:16:98:fc:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Aug 18 12:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a04b7e4ddf4fb7c2fab4834bb095075d85e57d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:fb:c5:7d:41:51:08:f4:c7:23:76:b0:b7:
60:60:34:de:62:82:ab:29:eb:f7:74:e2:34:48:0c:
ee:89:d0:ec:d2:74:60:f6:42:42:d4:fa:23:14:a6:
a6:2c:5b:21:51:99:5d:06:f5:39:e6:fe:94:ea:87:
5a:e6:fc:41:4a:ed:15:0d:f4:6e:a5:35:48:ad:5a:
d9:5b:7a:2e:cd:e1:94:4d:72:a7:3e:ea:19:51:b5:
a6:2c:8c:9d:28:4e:b3:50:22:57:05:2b:8c:fe:c1:
8b:3a:22:40:82:3e:cf:12:1b:28:56:32:56:04:fd:
ce:ea:ef:c7:c8:9b:1e:d6:ea:fe:67:05:84:a8:c3:
a2:89:50:0f:65:d6:bd:39:97:cb:6d:d2:f1:a0:fc:
65:3a:c1:3f:b9:8c:74:ec:51:86:53:e4:71:94:a2:
28:1f:aa:86:80:08:06:78:d4:d4:1b:f7:ef:98:9b:
5a:f7:96:ea:6c:52:b4:d1:bf:cc:07:07:bf:a4:e8:
d2:f5:95:37:04:c2:ad:2c:b1:c8:82:66:87:8c:02:
50:5c:33:76:76:8b:ce:d8:22:28:fe:a9:f4:a4:17:
16:77:36:36:58:68:db:07:f0:c1:13:02:1f:9e:e1:
d3:33:26:80:97:8a:e4:f1:a5:94:9e:09:8e:d0:3d:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:B7:E4:DD:F4:FB:7C:2F:AB:48:34:BB:09:50:75:D8:5E:57:D3
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WgS35N30-3wvq0g0uwlQddheV9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0-45.14.10.255
77.242.144.0/20
83.137.159.0/24
88.209.192.0/21
88.209.208.0-88.209.227.255
88.209.240.0/22
92.52.208.0/21
92.52.219.0/24
178.210.224.0/21
178.210.236.0/24
178.210.248.0/22
178.248.200.0/21
193.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f4:ea:35:ef:c2:c8:80:8f:38:2e:4b:c5:80:99:21:1b:36:
49:d1:e9:12:d5:62:fe:b0:56:13:98:6d:9e:75:4c:2d:7a:ac:
b0:fb:db:2b:db:27:9f:75:07:9a:f1:0f:82:42:c6:1e:ae:3a:
26:48:4f:d7:b1:21:54:0d:a4:a9:0c:14:39:e5:63:f7:cd:c4:
a3:f2:9e:b0:8a:70:8c:2c:c2:ce:b0:e2:20:5e:04:75:4a:24:
d5:a8:2e:b7:3d:13:1e:eb:10:29:ee:8d:d8:1d:81:1f:a8:b8:
68:4b:bf:d2:43:37:8e:4b:44:db:74:70:66:e3:14:a9:d8:3f:
9b:a6:dc:31:d4:45:46:fb:15:87:bd:d0:00:2f:ad:ae:28:b9:
fd:8a:38:c7:3c:57:1f:24:c9:e5:f7:6d:be:71:77:a0:82:6c:
63:90:09:5b:54:29:0d:60:7f:69:76:c0:17:09:48:07:89:4d:
0c:76:b1:b6:d1:16:ad:78:66:73:d4:b9:ff:8a:5a:a3:2b:b6:
48:a1:5e:ab:ba:1d:a5:1f:88:9e:b6:54:9a:29:39:23:a8:a4:
7d:21:89:db:d2:93:81:ff:42:47:5a:1a:89:8a:29:44:63:8f:
b2:21:ab:32:63:52:8a:1c:44:83:cf:ad:97:ad:e3:3c:10:a0:
c4:6d:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:01 2023 by rpki-client on console-fra.rpki-client.org