Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/W3DN4xRUI0imB_OX5JDP5SoMz1I.roa
File: W3DN4xRUI0imB_OX5JDP5SoMz1I.roa (raw, json)
Hash identifier: k8dPXOnmGRF3DDouGQDFw2L7uJI4ahK1sEcX4ZMg/iY=
Subject key identifier: 5B:70:CD:E3:14:54:23:48:A6:07:F3:97:E4:90:CF:E5:2A:0C:CF:52
Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Certificate serial: 0A7CD99B
Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/W3DN4xRUI0imB_OX5JDP5SoMz1I.roa
Signing time: Sat 01 Jan 2022 04:55:02 +0000
ROA not before: Sat 01 Jan 2022 04:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 53550
IP address blocks: 77.111.208.0/22 maxlen: 24
185.37.220.0/22 maxlen: 24
2a00:fa60::/32 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175954331 (0xa7cd99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a
Validity
Not Before: Jan 1 04:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b70cde314542348a607f397e490cfe52a0ccf52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:dd:34:55:19:6e:b9:f9:3a:c1:a7:e6:0e:
59:4f:53:ee:cc:12:cb:dd:60:0a:35:2c:74:02:f7:
78:47:1d:ab:8a:6a:d6:bb:69:f6:68:6e:db:42:56:
c5:62:db:3f:48:03:23:3c:5f:34:2c:7a:7b:06:18:
4d:a0:2d:53:76:3b:81:c9:37:0e:1b:70:b5:f5:c5:
5f:3f:22:91:a0:8f:fb:08:10:28:86:9e:82:f0:b6:
fd:16:ca:b0:25:e9:9d:6b:9f:1b:25:3e:8e:06:a7:
9a:42:ae:76:b3:57:f7:22:2f:b0:e5:b5:e2:4b:81:
9b:cd:e5:51:fe:e5:16:02:68:f3:16:bb:fa:a5:21:
2b:5d:cb:0b:12:d6:bc:58:26:16:aa:ed:87:f2:2d:
d0:47:2d:29:2e:9c:2d:fe:fe:a0:0f:52:60:10:e6:
8b:62:4e:20:33:b1:47:f4:60:75:ae:bd:a5:75:9c:
86:3f:96:37:8b:03:6b:2b:b6:5d:17:42:ca:5c:24:
af:d6:10:9f:b0:1e:fe:eb:50:07:c2:8a:72:ae:cb:
7e:0a:d6:82:4c:21:54:ed:96:a5:51:8f:17:b8:4b:
38:ff:b7:fa:7a:9f:c7:4b:f1:47:1c:09:0d:31:5a:
c3:37:96:97:78:3a:c2:db:82:e0:e5:52:2e:78:a7:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:CD:E3:14:54:23:48:A6:07:F3:97:E4:90:CF:E5:2A:0C:CF:52
X509v3 Authority Key Identifier:
keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/W3DN4xRUI0imB_OX5JDP5SoMz1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.208.0/22
185.37.220.0/22
IPv6:
2a00:fa60::/32
Signature Algorithm: sha256WithRSAEncryption
75:3b:49:db:e9:1d:56:de:ac:05:70:f7:5a:b4:74:1b:53:e6:
c5:74:79:b3:dc:87:bf:8a:db:53:56:dc:ac:ee:5b:b4:f8:05:
7d:03:ae:02:5c:16:83:33:f8:12:29:9d:e6:59:40:3e:72:89:
49:89:3a:19:20:d9:f9:5d:18:85:94:11:e5:eb:00:ba:dc:64:
9c:9b:9d:be:0c:51:49:4f:65:12:cc:1e:b7:12:93:4f:78:52:
2b:e2:4f:04:42:be:52:86:11:14:3b:68:3e:d8:4d:4a:98:34:
a8:6d:c6:3a:c0:16:21:6e:37:26:f6:99:6a:68:b2:68:18:51:
9e:f4:22:3b:41:c5:8f:98:fc:4c:f1:25:0b:ab:5c:10:db:b8:
4a:e9:6d:9d:66:a5:ec:eb:c3:46:a0:d8:ec:2c:43:80:12:3f:
5a:9e:17:3c:ea:e3:ea:2e:dd:01:aa:9e:cf:fc:b9:78:85:1a:
b9:e8:6e:82:e8:45:42:1e:a4:b7:2a:05:5f:cd:d9:99:61:61:
7c:99:1c:53:f0:ad:1c:4d:a5:48:ff:a8:67:52:fa:c8:16:71:
e3:e1:a2:7d:8f:e0:bc:28:08:1f:83:0a:19:cc:18:6c:85:83:
7f:c2:0d:26:6a:cb:44:02:73:81:f1:d7:a4:57:c2:11:c1:62:
f0:aa:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:27 2023 by rpki-client on console-ams.rpki-client.org