Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/WUB16ZCITsFgJlQiXOcbZd4MpMw.roa
File: WUB16ZCITsFgJlQiXOcbZd4MpMw.roa (raw, json)
Hash identifier: g4bR5crLt+q3EkGCZpm3xnr+XYfpyBQyYbfSw6piNNc=
Subject key identifier: 59:40:75:E9:90:88:4E:C1:60:26:54:22:5C:E7:1B:65:DE:0C:A4:CC
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 10D51D03
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/WUB16ZCITsFgJlQiXOcbZd4MpMw.roa
Signing time: Sat 01 Jan 2022 16:11:02 +0000
ROA not before: Sat 01 Jan 2022 16:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33915
IP address blocks: 85.146.192.0/18 maxlen: 18
83.137.136.0/21 maxlen: 21
93.117.192.0/18 maxlen: 18
80.112.192.0/18 maxlen: 18
85.88.96.0/19 maxlen: 19
213.34.128.0/19 maxlen: 19
212.78.192.0/19 maxlen: 19
37.235.8.0/21 maxlen: 21
83.167.192.0/19 maxlen: 19
2a00:18c8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282402051 (0x10d51d03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: Jan 1 16:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=594075e990884ec1602654225ce71b65de0ca4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:c5:9d:18:bd:bf:b1:78:fa:8e:5e:8b:c0:
16:7c:10:56:ff:7c:08:12:a0:48:6e:76:46:b1:d6:
ad:7b:f6:d3:af:e1:b0:2b:45:a1:d1:96:7c:49:3f:
f0:63:98:c0:19:5b:26:fd:26:8d:c5:81:1f:8c:3b:
1e:57:a7:e8:06:78:96:fc:97:25:d0:e4:26:19:84:
76:98:3d:3f:13:5e:14:d2:7b:c3:0c:55:f9:a8:17:
d5:32:54:64:ae:fe:97:36:0d:40:82:4c:8e:ec:5c:
df:f9:a6:ca:7a:31:e5:cd:7d:17:12:f6:37:04:38:
0f:d8:ad:b8:34:8b:60:79:05:e6:6f:42:31:47:f7:
ba:b4:35:f6:c1:e6:69:81:27:38:62:cf:b1:3f:db:
0f:94:69:67:24:51:e6:3d:6b:a2:ef:52:3d:29:c1:
05:bd:09:80:20:78:4e:7f:2c:0a:70:05:b2:85:8c:
61:61:cc:2c:28:b4:58:8d:7f:b0:2b:08:ef:3a:75:
36:f9:6d:10:69:31:a1:f3:b0:bf:d7:a0:46:a1:35:
a5:d1:d0:3f:2b:19:c9:5f:87:b7:43:47:6d:6e:50:
e4:6b:4f:d2:91:cb:8b:d6:43:39:31:00:42:53:4e:
1f:09:25:1c:96:b6:58:39:a8:0f:4f:37:a2:cd:17:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:75:E9:90:88:4E:C1:60:26:54:22:5C:E7:1B:65:DE:0C:A4:CC
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/WUB16ZCITsFgJlQiXOcbZd4MpMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.8.0/21
80.112.192.0/18
83.137.136.0/21
83.167.192.0/19
85.88.96.0/19
85.146.192.0/18
93.117.192.0/18
212.78.192.0/19
213.34.128.0/19
IPv6:
2a00:18c8::/29
Signature Algorithm: sha256WithRSAEncryption
4f:c2:9d:bf:16:53:02:f2:59:98:f7:8f:96:b1:a2:47:d9:45:
1f:79:ca:02:85:d5:2c:15:17:16:d2:1d:cf:6d:51:4d:25:a3:
13:92:91:48:ac:f2:7e:86:4c:17:9d:a0:e5:b2:8e:ec:6c:6e:
6d:af:f5:94:8c:e7:d8:e9:7a:c8:19:2a:bb:b8:c4:07:cf:a9:
52:7a:e8:2f:9c:c5:fc:9c:3b:ea:49:8a:ba:20:ef:c5:5f:c4:
62:6d:d3:fa:cd:69:3c:98:6d:b5:2d:fc:49:2a:cf:7a:d5:9f:
ba:d0:31:2d:bb:fc:98:a1:8c:8a:1f:98:31:00:56:9e:14:a2:
ae:90:d4:3f:9a:3d:e5:29:80:20:e8:bc:43:f2:e7:c7:fc:32:
a6:08:84:ad:1d:ef:61:a6:2f:33:e8:1e:15:42:7f:fa:da:74:
9a:0e:d5:59:fb:3d:5d:9e:03:c8:1c:4e:f1:1c:8c:bb:13:0b:
dc:0b:49:d1:f6:c3:02:90:9a:f2:51:f7:e6:fa:19:0f:b0:f5:
db:e7:53:ba:60:5a:b6:63:01:56:ce:75:d3:f7:5c:2d:c2:a0:
1d:a5:6d:fc:7d:fd:23:6b:f9:33:50:1f:14:de:b8:9b:9b:ec:
2e:06:58:19:b7:96:bf:43:52:03:37:22:62:ad:40:4b:16:54:
cc:43:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:43 2023 by rpki-client on console.sobornost.net