Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/wbSmEghvJfZWpM8rGK4H6roAyOk.roa
File: wbSmEghvJfZWpM8rGK4H6roAyOk.roa (raw, json)
Hash identifier: TOK1bPsaSD9xXml/1mEj2i6BlFeXISivCfsH6oygvTE=
Subject key identifier: C1:B4:A6:12:08:6F:25:F6:56:A4:CF:2B:18:AE:07:EA:BA:00:C8:E9
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 0183E1A7895ED83ED8091E098E117C8418C2
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/wbSmEghvJfZWpM8rGK4H6roAyOk.roa
Signing time: Sun 16 Oct 2022 16:36:36 +0000
ROA not before: Sun 16 Oct 2022 16:36:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 79.132.194.0/24 maxlen: 24
31.223.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e1:a7:89:5e:d8:3e:d8:09:1e:09:8e:11:7c:84:18:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Oct 16 16:36:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1b4a612086f25f656a4cf2b18ae07eaba00c8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:72:dd:83:ce:42:3f:3d:4a:8e:e6:37:71:b1:
59:29:b7:7e:9a:42:78:4f:3d:0b:63:1b:7b:03:57:
81:2a:92:ac:bc:bc:dc:2a:fa:a9:f8:45:7e:d8:79:
2e:f2:ee:4b:39:31:a0:89:10:3e:fc:d1:8e:4d:15:
15:81:d8:9e:0d:aa:45:2c:d3:d3:e7:23:cd:de:8f:
42:f8:48:8c:a2:4a:86:34:88:eb:03:b7:14:b7:6c:
7e:3c:2a:a9:50:a9:16:d7:61:ea:69:f5:e2:7f:e8:
5e:14:39:52:8b:da:e1:ca:c8:5d:6d:50:ce:5d:68:
76:d6:37:2b:e5:e5:67:5e:d0:e3:8a:3f:fc:1f:5b:
07:25:9c:06:25:a3:09:37:68:05:a3:4d:1f:bc:e4:
53:1b:96:fd:14:74:f3:76:89:c4:2a:c5:04:9f:f6:
e1:ee:d8:8a:9f:03:b5:7b:92:86:88:7e:84:31:f9:
29:7f:db:21:b0:bb:16:f2:d1:72:d5:46:db:43:6f:
63:3c:41:e3:81:8e:c7:bf:08:20:f6:9b:42:71:44:
2d:c9:19:15:81:2d:85:90:a8:b8:ae:b3:df:ff:a3:
c9:7d:58:98:ef:14:29:f8:49:39:3a:ae:47:38:3b:
a9:ac:82:07:56:33:8a:72:da:6a:45:c5:cd:1a:93:
3b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B4:A6:12:08:6F:25:F6:56:A4:CF:2B:18:AE:07:EA:BA:00:C8:E9
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/wbSmEghvJfZWpM8rGK4H6roAyOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.185.0/24
79.132.194.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f7:05:ff:8d:20:5f:38:88:c7:2c:84:37:a8:3b:b4:ea:02:
8f:63:bd:2a:ac:05:79:6e:a7:e6:84:e5:07:64:ce:0e:4b:c5:
ac:fc:ba:d2:fd:b2:c1:81:c6:26:5a:c4:fd:48:4a:09:db:96:
48:72:8b:d7:ce:f4:1d:37:26:2f:be:27:92:91:44:67:37:f7:
7b:3b:0d:64:ca:52:9f:c4:d0:92:8f:e2:f5:3a:04:30:c4:76:
a5:e2:cb:8f:ba:57:f6:26:fd:3c:84:41:d4:bd:57:76:da:5d:
67:da:18:57:fa:e8:58:53:b8:48:cb:9b:07:ab:b1:8a:a5:6c:
2d:cc:40:e5:76:26:47:6d:eb:7f:11:6d:27:e7:42:90:e0:4f:
e9:51:95:b6:e1:29:ee:93:09:27:e4:dd:2c:d2:08:0a:ef:95:
e5:f1:07:d8:d7:c9:6d:d8:b3:0c:d8:28:eb:a5:47:50:76:11:
50:ea:d1:18:b9:6f:6e:51:6d:bd:2f:77:e3:d5:bc:92:81:62:
82:a9:b1:51:26:58:f0:45:4d:93:ff:f7:c0:67:81:a6:24:87:
76:3b:95:71:f7:76:c0:39:05:84:21:c4:72:9e:f9:ef:db:b5:
c0:ad:87:9b:68:06:32:a9:d2:08:b1:84:f0:12:32:4b:2b:7a:
da:fe:1d:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPhp4le2D7YCR4JjhF8hBjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk
ODVjZDYwHhcNMjIxMDE2MTYzNjM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWI0YTYxMjA4NmYyNWY2NTZhNGNmMmIxOGFlMDdlYWJhMDBjOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HLdg85CPz1KjuY3cbFZKbd+mkJ4
Tz0LYxt7A1eBKpKsvLzcKvqp+EV+2Hku8u5LOTGgiRA+/NGOTRUVgdieDapFLNPT
5yPN3o9C+EiMokqGNIjrA7cUt2x+PCqpUKkW12HqafXif+heFDlSi9rhyshdbVDO
XWh21jcr5eVnXtDjij/8H1sHJZwGJaMJN2gFo00fvORTG5b9FHTzdonEKsUEn/bh
7tiKnwO1e5KGiH6EMfkpf9shsLsW8tFy1UbbQ29jPEHjgY7Hvwgg9ptCcUQtyRkV
gS2FkKi4rrPf/6PJfViY7xQp+Ek5Oq5HODuprIIHVjOKctpqRcXNGpM7QQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMG0phIIbyX2VqTPKxiuB+q6AMjpMB8GA1UdIwQY
MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct
NjQ5NDVhNGY4ZTEyLzEvd2JTbUVnaHZKZlpXcE04ckdLNEg2cm9BeU9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy
LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH9+5AwQA
T4TCMA0GCSqGSIb3DQEBCwUAA4IBAQCH9wX/jSBfOIjHLIQ3qDu06gKPY70qrAV5
bqfmhOUHZM4OS8Ws/LrS/bLBgcYmWsT9SEoJ25ZIcovXzvQdNyYvvieSkURnN/d7
Ow1kylKfxNCSj+L1OgQwxHal4suPulf2Jv08hEHUvVd22l1n2hhX+uhYU7hIy5sH
q7GKpWwtzEDldiZHbet/EW0n50KQ4E/pUZW24Snukwkn5N0s0ggK75Xl8QfY18lt
2LMM2CjrpUdQdhFQ6tEYuW9uUW29L3fj1bySgWKCqbFRJljwRU2T//fAZ4GmJId2
O5Vx93bAOQWEIcRynvnv27XArYebaAYyqdIIsYTwEjJLK3ra/h0h
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:08 2024 by rpki-client on console-fra.rpki-client.org