Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wuWnd-_E4dqGJ6s23aT52MbF1Qg.roa
File: wuWnd-_E4dqGJ6s23aT52MbF1Qg.roa (raw, json)
Hash identifier: ZSh2JJnOnLGT2WM/hcuiI6QX+zd01sz/yuauWIJBn0g=
Subject key identifier: C2:E5:A7:77:EF:C4:E1:DA:86:27:AB:36:DD:A4:F9:D8:C6:C5:D5:08
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 0184BFFD04735D0DD0CCBBBA1B68A57D0695
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wuWnd-_E4dqGJ6s23aT52MbF1Qg.roa
Signing time: Mon 28 Nov 2022 20:45:40 +0000
ROA not before: Mon 28 Nov 2022 20:45:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207114
IP address blocks: 46.33.32.0/21 maxlen: 21
46.33.40.0/22 maxlen: 22
46.33.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:fd:04:73:5d:0d:d0:cc:bb:ba:1b:68:a5:7d:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Nov 28 20:45:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e5a777efc4e1da8627ab36dda4f9d8c6c5d508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:4f:22:db:3b:19:09:d4:98:b5:07:65:19:
6e:96:46:f3:70:71:06:9c:78:17:38:73:b1:5d:61:
cc:0d:dc:ff:75:57:06:3b:d3:4a:71:3f:07:ed:c8:
84:80:2d:72:74:87:8e:f2:f3:34:24:7c:f9:d1:80:
24:7d:dc:52:e5:c1:be:a4:8c:70:5c:3a:60:e3:76:
93:71:0e:18:bb:c9:6f:16:c6:b3:82:a9:91:70:31:
15:9e:2d:fb:b6:a3:e3:bf:3c:57:2d:8e:83:fa:fc:
33:50:c2:a2:c8:4d:e7:7e:8c:bc:1a:81:23:b8:48:
3d:93:a6:90:7f:d3:f2:ac:9b:a0:a9:e7:9e:3d:ea:
f9:88:8a:e3:b2:c1:f2:61:84:31:c4:d7:fb:dd:ff:
68:a2:8a:34:b6:18:05:d3:e9:92:6a:42:f4:03:99:
37:ab:9b:3c:be:d2:10:f9:d7:7f:ee:58:9d:c5:6d:
6c:1c:9e:03:d3:b9:64:3b:63:f4:56:f9:44:3f:ce:
b9:ca:04:a7:c4:98:ea:8c:c1:05:ca:17:c9:5e:0b:
93:c7:1c:f0:cd:32:ea:4b:d2:91:ca:4c:43:6c:57:
0b:4b:d4:c5:7b:8c:33:7e:c5:22:56:d7:25:fd:b8:
d8:3f:bf:eb:a4:1f:5a:f0:f9:59:c6:13:eb:bb:7e:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:A7:77:EF:C4:E1:DA:86:27:AB:36:DD:A4:F9:D8:C6:C5:D5:08
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wuWnd-_E4dqGJ6s23aT52MbF1Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.32.0-46.33.43.255
46.33.56.0/22
Signature Algorithm: sha256WithRSAEncryption
91:04:37:c3:d3:5d:aa:a9:f0:ad:82:6f:e8:15:f6:08:37:70:
4e:e4:9f:8e:02:57:09:0e:af:66:e5:d5:cd:76:c0:5f:2e:7c:
ce:c4:2e:b0:6e:51:73:b2:9b:b0:08:ac:cc:94:cb:68:d1:52:
93:00:37:9a:a4:f9:62:57:fa:f1:98:36:2c:4b:44:96:ae:93:
fb:78:7e:58:a4:67:f2:56:d9:ae:b1:16:0b:97:f6:b6:29:10:
42:d8:06:cd:0b:0b:ee:bb:e0:f3:df:c9:12:72:aa:be:a5:af:
67:3a:b9:e0:2d:63:d7:07:8e:4e:47:bb:11:40:73:38:23:8d:
5b:85:42:79:a4:42:d0:95:0a:c7:85:68:74:f2:3a:57:32:3f:
f0:e0:16:a2:ed:39:ce:1e:ec:a4:19:f7:84:20:e1:af:41:cf:
65:ce:a2:6b:fc:cc:a7:2c:ba:58:d2:86:d6:c3:d6:da:30:19:
79:82:cc:1d:c3:23:67:4a:4f:d8:f6:79:10:03:d7:6f:97:95:
28:ac:35:aa:64:b1:be:f4:ea:9e:c4:3b:44:48:2f:b9:99:da:
71:23:3a:a1:ac:4d:02:85:f6:52:b9:c1:43:ff:90:fd:42:1c:
a0:73:70:a4:2d:bf:fa:a4:21:26:3c:3c:a4:43:a4:db:93:82:
f0:2e:cf:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net