Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/wlcOmoV2N8hVrg93079olnYog2g.roa
File: wlcOmoV2N8hVrg93079olnYog2g.roa (raw, json)
Hash identifier: QZsOD9fjmUHqzSFCMoEd/KhtuTDEdTgNimiyw+X9j3Q=
Subject key identifier: C2:57:0E:9A:85:76:37:C8:55:AE:0F:77:D3:BF:68:96:76:28:83:68
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 35478A40
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/wlcOmoV2N8hVrg93079olnYog2g.roa
Signing time: Mon 10 Jan 2022 11:25:27 +0000
ROA not before: Mon 10 Jan 2022 11:25:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43447
IP address blocks: 217.116.110.0/24 maxlen: 24
37.47.0.0/16 maxlen: 24
217.116.104.0/24 maxlen: 24
2a00:f46::/32 maxlen: 32
2a00:f46::/44 maxlen: 44
2a00:f40:2::/48 maxlen: 48
2a00:f42::/32 maxlen: 32
2a00:f40:f000::/48 maxlen: 48
2a00:f47::/32 maxlen: 32
2a00:f40:1::/48 maxlen: 48
2a00:f41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893880896 (0x35478a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 10 11:25:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2570e9a857637c855ae0f77d3bf689676288368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:c4:dd:ed:df:76:e4:20:6e:6d:85:c6:93:
c9:e2:31:50:28:e6:8a:94:a0:88:51:7a:40:22:77:
01:cd:c1:29:63:25:62:b8:f5:d1:54:42:e4:8c:51:
3f:32:b5:57:fc:ab:0d:79:66:1b:70:66:d8:00:29:
e3:87:29:11:7b:ad:34:f2:a6:ca:87:6d:01:92:0a:
d8:b0:a4:53:da:c2:74:d0:af:e2:f5:83:88:51:ae:
93:7b:ec:20:27:67:ce:ac:7f:98:3d:ec:de:e7:95:
9d:b6:92:2c:51:ce:5e:f9:bc:4e:86:f6:4e:ab:f5:
28:c0:3e:64:20:b0:ef:f9:5b:d6:9d:34:0b:81:35:
7f:d0:34:73:0d:fd:b7:10:f5:22:be:da:25:43:9d:
eb:b5:21:72:4f:04:5d:fb:c4:d2:b4:5e:c7:de:1c:
9d:38:c5:e6:ad:e9:9d:12:94:11:45:d4:8e:5f:ef:
65:25:f2:9d:2a:de:f2:3d:d6:84:c2:9a:2e:be:b9:
d0:49:10:b4:8a:ba:f7:3a:b3:4d:b7:5a:af:85:4d:
4f:54:8f:4b:85:c3:8e:b3:96:6d:bb:e4:d3:0c:79:
ee:87:f4:c8:1b:83:91:cc:a5:96:77:49:95:9d:06:
a9:53:39:9d:98:ae:78:82:02:41:de:25:02:1e:33:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:0E:9A:85:76:37:C8:55:AE:0F:77:D3:BF:68:96:76:28:83:68
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/wlcOmoV2N8hVrg93079olnYog2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.47.0.0/16
217.116.104.0/24
217.116.110.0/24
IPv6:
2a00:f40:1::-2a00:f40:2:ffff:ffff:ffff:ffff:ffff
2a00:f40:f000::/48
2a00:f41::-2a00:f42:ffff:ffff:ffff:ffff:ffff:ffff
2a00:f46::/31
Signature Algorithm: sha256WithRSAEncryption
65:c6:6d:20:0f:c8:3b:84:13:9a:64:18:11:42:42:ec:c2:b8:
c1:c7:68:32:1b:55:0c:fe:8e:f4:e1:0e:6c:d1:2c:6b:e9:1e:
50:3a:34:7d:36:b4:a2:14:08:8b:61:57:6a:ed:94:1c:0d:24:
6c:b9:4a:48:d3:a8:f3:8e:e5:0b:d7:e9:d3:f7:ff:c7:ab:35:
fe:e9:ac:d9:62:e5:c8:92:54:7c:b5:0e:8c:a7:7a:3e:29:5e:
aa:6b:2b:65:f5:55:64:59:d7:ad:d2:6f:ee:85:61:dc:43:7c:
4a:44:ae:4d:11:da:96:57:02:13:db:69:7d:14:c2:a0:21:a9:
d5:f3:aa:6c:de:79:ba:17:fd:e9:8b:85:7e:ca:4e:d5:a7:30:
6d:c4:08:d1:75:15:db:9c:16:41:98:9b:c0:5d:c9:38:52:6a:
de:24:b9:95:ec:19:23:99:46:8c:68:c2:d8:39:0c:bb:a4:04:
b4:98:f3:78:98:db:2d:84:02:1e:4f:20:e8:c7:aa:fd:00:8f:
87:0d:11:cd:5c:0c:48:73:f1:48:5e:37:33:74:eb:51:00:70:
75:7b:3d:c2:78:72:d1:68:06:70:17:8b:27:d0:6b:2d:f5:71:
42:29:09:34:5d:02:fb:2a:32:58:6f:37:d3:1d:2c:e7:33:4f:
57:99:48:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:16 2024 by rpki-client on console-ams.rpki-client.org