Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/Wwc15euAa9DsluJKyDLahfzxDTk.roa
File: Wwc15euAa9DsluJKyDLahfzxDTk.roa (raw, json)
Hash identifier: pzSL8TgA5pXJea4BPYTw4r8S6fHWUEDiWZbWT8A3m+8=
Subject key identifier: 5B:07:35:E5:EB:80:6B:D0:EC:96:E2:4A:C8:32:DA:85:FC:F1:0D:39
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 13AB82B1
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/Wwc15euAa9DsluJKyDLahfzxDTk.roa
Signing time: Sat 22 Jan 2022 21:38:13 +0000
ROA not before: Sat 22 Jan 2022 21:38:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8245
IP address blocks: 195.26.192.0/19 maxlen: 19
212.236.0.0/18 maxlen: 18
212.236.0.0/16 maxlen: 16
195.26.220.0/22 maxlen: 22
212.236.160.0/19 maxlen: 19
212.236.192.0/18 maxlen: 18
2a02:2750::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330007217 (0x13ab82b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 22 21:38:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b0735e5eb806bd0ec96e24ac832da85fcf10d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:58:a3:b4:11:c7:b8:59:21:4e:f4:20:4f:
c7:a6:9d:fb:96:97:76:ef:07:93:eb:7f:19:ce:ec:
24:97:1f:9e:85:8b:ec:fe:87:4d:11:b9:8c:f3:7c:
68:c5:5f:ea:d3:1d:06:20:e9:83:da:2e:fe:56:8e:
8c:b4:d0:de:87:3e:3a:0f:09:fe:49:ba:27:28:48:
05:0a:2f:de:b2:1a:ea:61:48:84:48:b2:36:3e:70:
46:74:9c:56:db:08:0e:c4:bc:54:93:c7:ae:7b:c9:
80:5f:10:77:58:9d:9c:a6:3b:fa:b5:f8:62:7d:d1:
17:58:bd:20:31:30:51:32:de:08:49:cb:52:6f:17:
44:c3:46:82:64:af:58:16:73:30:c8:67:c3:69:6e:
31:a4:5d:9d:21:42:19:20:18:ab:73:67:fd:d6:c4:
0b:c0:2f:2f:f0:b6:d0:52:b9:03:57:8a:0d:1d:d0:
7f:df:51:ad:0e:e5:03:06:d9:f8:a2:f0:4e:00:cc:
3e:9a:10:f6:28:2d:f1:a6:81:1f:84:73:12:33:9e:
31:57:5e:71:e5:91:57:9c:42:68:10:a2:02:a2:ae:
40:5f:2e:f2:04:bf:27:61:7c:b7:60:f9:81:f4:82:
ce:10:cd:ca:b2:ea:a2:f6:dd:27:b5:50:d1:b3:26:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:35:E5:EB:80:6B:D0:EC:96:E2:4A:C8:32:DA:85:FC:F1:0D:39
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/Wwc15euAa9DsluJKyDLahfzxDTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.192.0/19
212.236.0.0/16
IPv6:
2a02:2750::/32
Signature Algorithm: sha256WithRSAEncryption
a3:08:40:70:da:7c:c9:d3:b0:9e:92:eb:af:9a:ed:1c:ed:50:
8a:64:d3:23:d6:b8:e0:d8:6d:68:f1:0c:17:07:89:c2:7c:52:
c9:ad:3c:73:70:65:5b:3f:c3:91:41:2c:d7:ad:50:19:30:14:
4a:81:ca:14:d8:04:ac:48:85:7a:48:75:88:a5:03:d3:08:a9:
64:51:8e:46:7c:0a:45:0a:c8:24:50:e7:be:6e:f5:96:27:0f:
c1:8d:20:8b:46:6b:7d:cb:7d:c7:09:5d:f3:a3:6a:67:44:5c:
03:41:f3:6e:9b:88:6e:19:69:41:fd:41:57:63:14:33:a6:68:
e7:86:d3:d9:c1:68:46:c3:5f:eb:a0:2b:67:94:57:d8:54:9b:
e5:5c:bc:a0:b6:60:52:48:32:eb:7e:ac:bc:6e:5c:99:f1:99:
6c:f2:19:4d:2c:71:01:47:39:0d:7a:f5:e6:f4:39:88:11:06:
02:11:dc:ad:88:d5:cb:19:31:5e:fe:e9:a7:56:35:ee:b4:de:
f4:4f:cc:f7:f7:5e:29:e2:6e:54:08:1a:7f:3c:f5:49:82:f3:
09:13:83:e4:98:a0:d4:5b:14:f4:7b:69:07:18:e5:cd:84:84:
5f:ce:f5:f7:49:75:51:90:a4:42:d5:c3:56:9c:a3:fd:48:d2:
dd:56:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net