Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WVQWixcOT-NiJkX_iZ87Aa0t8xs.roa
File: WVQWixcOT-NiJkX_iZ87Aa0t8xs.roa (raw, json)
Hash identifier: Bzu40qatJXBS5N7hCQEgX+WRSrXBNxVIJ0GEwS2Rrvw=
Subject key identifier: 59:54:16:8B:17:0E:4F:E3:62:26:45:FF:89:9F:3B:01:AD:2D:F3:1B
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0184E16F794A0E5A27A60DB506A2392011B8
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WVQWixcOT-NiJkX_iZ87Aa0t8xs.roa
Signing time: Mon 05 Dec 2022 08:38:09 +0000
ROA not before: Mon 05 Dec 2022 08:38:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208046
IP address blocks: 46.23.110.0/24 maxlen: 24
109.205.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:6f:79:4a:0e:5a:27:a6:0d:b5:06:a2:39:20:11:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 5 08:38:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5954168b170e4fe3622645ff899f3b01ad2df31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:3c:8d:43:21:a0:7b:e8:43:75:db:1b:9e:
be:02:11:a1:ad:be:81:51:69:cb:1e:03:e6:cc:91:
2d:48:90:c0:4c:6a:ab:7d:72:d0:c2:6f:85:f2:72:
e7:c4:7f:44:11:af:69:18:2f:67:e9:7f:05:cd:5d:
60:2c:1f:0c:34:63:98:f4:aa:5c:2e:05:f2:e8:70:
12:be:9e:a3:a2:42:82:10:58:fa:80:24:d5:d1:4f:
5d:68:40:70:9b:ae:7b:0b:04:b3:8d:3c:04:e2:9c:
6b:64:91:f2:b1:30:3f:2c:61:45:59:b0:eb:a2:cc:
4f:15:ec:d9:ae:6e:2a:6b:26:43:14:e2:2e:55:9c:
c6:71:cd:ae:a0:35:2a:5e:42:2d:d2:ed:8c:3b:d4:
7a:14:71:58:a1:19:11:a4:d0:37:f4:79:fc:73:c7:
21:27:46:23:55:45:0a:cd:45:b4:f9:d1:0a:4b:c4:
a4:0f:cd:dd:66:e8:69:7e:0f:22:e7:b2:64:e3:f0:
c7:36:c9:c5:cf:27:b1:a0:fd:bf:f7:88:5b:16:ec:
37:a8:a2:1c:e5:52:af:46:95:20:08:77:b2:71:7a:
cd:f5:a5:e1:6f:d3:77:c8:80:df:89:2b:85:fa:9a:
33:9d:0f:e5:51:8d:e5:b8:ce:4c:d3:32:12:88:32:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:16:8B:17:0E:4F:E3:62:26:45:FF:89:9F:3B:01:AD:2D:F3:1B
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WVQWixcOT-NiJkX_iZ87Aa0t8xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:6d:6d:dd:5b:e4:80:7a:21:d6:85:0b:4e:fd:2e:5a:94:68:
26:40:04:f6:a6:13:d6:30:68:54:2c:73:f4:05:09:37:14:44:
81:d2:b9:51:81:5c:79:04:9d:a5:9b:e8:f5:6b:85:ea:aa:e0:
d5:25:ce:14:42:69:41:24:df:f5:c9:3f:62:13:bc:60:73:02:
70:40:47:9c:d2:e9:80:c9:c1:6f:9f:ce:03:05:92:94:f6:a7:
98:61:7c:e8:22:fb:cc:6f:34:ba:5e:b7:9f:31:fe:6e:2e:ef:
4d:bd:83:29:21:a4:9e:b9:2e:ef:e2:31:2f:71:bb:eb:60:d1:
df:93:cd:75:d0:90:73:c9:ec:c2:99:73:91:b5:05:81:44:b2:
f1:c5:f7:d8:f6:e7:08:3f:b5:33:ef:05:65:49:1e:64:b8:b8:
03:1c:1c:97:cc:33:4c:e2:b5:c4:b4:58:f4:54:82:74:35:f1:
cd:25:7d:44:cd:c4:8e:ef:2b:f4:25:e4:a1:fa:b6:d7:f1:b8:
27:72:e4:c2:f2:4b:a1:13:7c:13:36:04:8e:c2:e0:9a:a1:36:
02:ba:67:79:44:3a:5c:7c:90:8d:e1:36:74:ed:a8:e9:50:6c:
bb:7a:2a:d0:bc:2a:21:93:1d:81:12:cf:57:b9:6b:01:36:a4:
4d:4f:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org