Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/WgrNVTsQNb_GGG9pTdI6OrLZS1k.roa
File: WgrNVTsQNb_GGG9pTdI6OrLZS1k.roa (raw, json)
Hash identifier: VkPjVlnaoqX5kaxrvy+HbOWC50QhnFlDFCQVZTCsrq0=
Subject key identifier: 5A:0A:CD:55:3B:10:35:BF:C6:18:6F:69:4D:D2:3A:3A:B2:D9:4B:59
Certificate issuer: /CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Certificate serial: C3FDE3
Authority key identifier: 75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/WgrNVTsQNb_GGG9pTdI6OrLZS1k.roa
Signing time: Sat 01 Jan 2022 00:56:13 +0000
ROA not before: Sat 01 Jan 2022 00:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 213.109.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12844515 (0xc3fde3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Validity
Not Before: Jan 1 00:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a0acd553b1035bfc6186f694dd23a3ab2d94b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:7d:28:39:87:ac:79:ab:cd:96:26:de:b5:
0e:eb:9a:7e:bf:6a:d7:38:52:ed:90:c7:f0:47:0f:
a0:a7:9e:3e:02:df:a9:14:ee:1a:7b:a8:d3:be:8b:
14:65:8d:7b:7b:f3:ad:c8:db:dd:6e:41:d2:58:a3:
57:8b:49:05:f4:3b:ef:9a:2d:77:bb:90:10:e3:5a:
d9:00:ac:24:95:fe:89:de:b8:f0:11:9c:d7:4c:e9:
81:61:4e:05:5c:e5:b4:3a:72:fe:b4:44:62:63:3d:
6a:03:37:4b:26:43:f7:48:e5:85:a9:08:ba:4a:02:
84:90:46:4b:08:f3:9d:22:78:01:3e:c5:25:d3:fa:
51:8c:b5:ed:7b:a7:b9:8b:31:6d:f2:37:b6:04:3a:
24:dd:bc:5f:0f:81:b7:58:31:35:5c:1c:6c:35:74:
d2:ee:e6:06:df:bc:04:d9:a9:f0:19:18:f9:63:fd:
c3:36:38:a6:a4:d7:c3:e8:fb:19:a0:c9:b6:7f:6b:
c9:b8:13:8b:35:f7:e0:58:12:33:e1:a2:c5:bb:bc:
11:1c:c9:3a:8c:58:d4:97:a6:25:c3:da:d4:bc:bb:
e2:64:c6:0b:af:9f:42:73:7e:83:ef:56:52:bf:89:
cc:01:88:4e:a1:2f:f3:59:5a:cb:66:a3:d5:01:24:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:CD:55:3B:10:35:BF:C6:18:6F:69:4D:D2:3A:3A:B2:D9:4B:59
X509v3 Authority Key Identifier:
keyid:75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/WgrNVTsQNb_GGG9pTdI6OrLZS1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/deiysou6PcToYdXL9bwcyYyJ5XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.207.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d8:da:0d:c3:a4:23:b0:d9:c5:a4:af:d5:83:4e:aa:d5:1a:
17:f1:32:e3:43:75:ea:72:1d:61:ff:d6:4f:e5:26:3d:4f:38:
fb:e9:48:5e:23:cf:71:bc:a3:9f:46:64:02:e2:a7:b8:7a:de:
f4:e4:f4:4f:b7:ff:8c:ac:ac:5e:b6:12:cb:88:9e:9e:10:16:
10:8b:1d:9a:7f:5a:ab:09:7a:79:52:34:83:df:6a:fd:2a:39:
ac:b3:26:79:79:13:e5:90:c9:54:66:42:d0:b5:36:b6:33:ee:
87:f7:3d:6e:1f:b1:27:77:57:7c:19:7c:cc:a4:3c:16:5d:97:
f3:47:ba:56:d6:1d:0a:f8:4a:37:b4:1a:ef:b2:2c:9d:36:db:
d7:2d:c8:80:2f:58:f1:e2:3d:e0:40:ec:14:26:24:9b:09:d4:
17:e3:8e:e9:f4:e3:23:a2:83:b8:7e:8a:0f:75:c4:53:e0:d9:
e1:68:ec:bf:aa:04:7a:90:f9:6d:d4:d3:e5:7c:e8:8c:77:6e:
3e:70:6d:b0:b4:9e:ea:e1:7f:4e:72:e5:68:d9:a2:19:a9:a8:
8a:af:10:aa:9f:be:1b:a1:26:05:de:02:07:b7:40:ad:59:a2:
ff:9e:10:69:25:15:23:27:de:56:00:9a:59:32:ea:9d:ac:62:
93:9d:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:21 2023 by rpki-client on console.sobornost.net