Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/WF0ZYjj699yd-f9ZiYRULYuIy-c.roa
File: WF0ZYjj699yd-f9ZiYRULYuIy-c.roa (raw, json)
Hash identifier: K19DasxX0pz9yriDpp01QSuqgrNNVr+NzCTHgiaEpvg=
Subject key identifier: 58:5D:19:62:38:FA:F7:DC:9D:F9:FF:59:89:84:54:2D:8B:88:CB:E7
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 0183562A85036589ED130C886524002CCC7C
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/WF0ZYjj699yd-f9ZiYRULYuIy-c.roa
Signing time: Mon 19 Sep 2022 14:32:50 +0000
ROA not before: Mon 19 Sep 2022 14:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41039
IP address blocks: 195.184.192.0/19 maxlen: 24
2.57.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:2a:85:03:65:89:ed:13:0c:88:65:24:00:2c:cc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Sep 19 14:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=585d196238faf7dc9df9ff598984542d8b88cbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:f8:ee:aa:25:00:36:ab:7a:83:2a:0a:66:
73:54:53:6e:b6:12:8a:12:2f:e8:f2:c8:f6:3f:17:
0c:fc:99:80:9c:ca:ae:8c:dc:4c:af:ac:48:51:2d:
59:a1:5c:d4:97:56:97:73:5c:71:c0:dd:db:1f:ab:
4c:50:af:51:6c:c8:64:ef:fa:d5:14:d4:15:d7:86:
cf:01:50:cd:06:f4:ef:91:a7:bd:af:94:97:7e:fe:
c8:d1:81:06:cb:5a:5b:f7:15:6d:2f:d1:9a:09:d7:
00:37:2b:9b:20:92:50:12:a0:15:ff:da:e2:c5:a0:
4d:3f:46:42:df:13:d6:a1:f7:ba:2f:ac:49:1e:39:
93:2e:15:df:4f:26:bf:f3:5b:a5:9d:77:56:6b:e2:
2d:37:b9:f9:d8:8e:b5:a7:6e:44:d4:01:35:8d:18:
ed:a2:5b:56:b2:d3:1a:d1:09:36:78:68:7a:d7:5a:
a9:7b:63:9c:d5:52:8d:79:11:4e:87:dd:cb:5b:70:
54:53:57:ad:8a:d4:8f:04:4c:82:26:2f:91:c6:f8:
63:67:90:7e:97:b7:f6:ce:66:79:eb:de:cf:e4:47:
12:d4:49:51:5f:1f:da:61:ea:03:df:39:b0:04:27:
f8:b2:55:2f:c1:05:72:95:d0:75:41:4a:ac:b6:b4:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:19:62:38:FA:F7:DC:9D:F9:FF:59:89:84:54:2D:8B:88:CB:E7
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/WF0ZYjj699yd-f9ZiYRULYuIy-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.112.0/22
195.184.192.0/19
Signature Algorithm: sha256WithRSAEncryption
06:2a:5e:c9:07:ba:3a:57:6a:73:65:96:20:68:27:91:a6:45:
c1:2d:ce:d3:24:1d:43:e4:2b:d2:f0:18:df:b2:73:7b:4b:08:
8f:37:d8:89:77:f3:82:2c:b0:5d:6d:76:6c:67:76:12:76:9c:
e5:88:a2:ab:15:40:58:c7:17:11:de:52:bb:b8:99:c6:90:ee:
99:96:67:13:08:9a:d3:4c:39:d0:94:7e:a4:e1:8a:a9:80:9e:
cf:f9:3e:26:f0:8d:df:c8:20:35:2d:08:76:8b:4f:80:2c:9d:
18:69:c2:a0:0f:c3:96:e5:3c:73:91:15:15:de:ef:f6:94:b4:
00:95:f5:b7:83:6d:e2:0c:30:8e:b2:eb:44:5a:d5:2b:92:44:
c5:9c:63:01:90:77:79:40:66:a7:e6:f5:56:c8:a0:84:a0:67:
e4:75:09:09:09:af:8f:2f:38:73:97:b4:ae:97:f4:6f:c7:0e:
fa:3b:f5:c9:e7:4a:c2:9b:ad:33:c2:66:e6:bf:78:df:b6:d3:
d7:30:b1:37:5b:05:96:e8:f6:c2:d6:0c:90:26:3a:10:cf:7c:
7e:b9:4c:52:5b:4c:3d:9f:59:30:7f:7d:37:d6:2a:47:fc:4a:
2c:00:5c:e8:fc:f8:80:7e:b3:f0:f1:bd:a8:0f:4b:8c:bb:a5:
77:cd:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:46 2024 by rpki-client on console-ams.rpki-client.org