Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/W-OeBhpSo1LEdvTvXFejNcIxKtg.roa
File: W-OeBhpSo1LEdvTvXFejNcIxKtg.roa (raw, json)
Hash identifier: U/5mRJdZ0WbpnyGPXIsvufaLv2lOOkTAQGLn/S7MyYE=
Subject key identifier: 5B:E3:9E:06:1A:52:A3:52:C4:76:F4:EF:5C:57:A3:35:C2:31:2A:D8
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01848D141D306B0726DB3D994E1A32C38F75
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/W-OeBhpSo1LEdvTvXFejNcIxKtg.roa
Signing time: Fri 18 Nov 2022 23:30:16 +0000
ROA not before: Fri 18 Nov 2022 23:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.250.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8d:14:1d:30:6b:07:26:db:3d:99:4e:1a:32:c3:8f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Nov 18 23:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5be39e061a52a352c476f4ef5c57a335c2312ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:25:3b:03:b8:61:a0:b9:b6:87:e0:f1:cf:
8d:f8:21:78:a9:02:d0:06:92:31:76:0d:45:65:72:
aa:3b:4d:49:40:0e:20:f4:d6:44:dd:aa:20:48:49:
b9:cf:f9:23:0a:22:09:f0:2f:a6:bb:d6:96:a9:78:
07:fc:20:a6:f4:7d:ba:1c:54:56:78:b4:ed:dc:bd:
ed:e4:66:58:21:79:32:12:33:86:5f:96:4c:51:85:
d1:6c:46:de:b7:7e:c9:04:84:e0:9b:f6:3f:dd:e9:
3b:6e:e0:4b:a3:64:7a:c5:ec:23:14:ae:70:c1:97:
9d:23:ec:15:6b:64:ab:7e:f1:63:f2:c4:b1:a6:28:
cc:07:84:19:9e:88:9c:4f:6f:76:61:6a:70:1b:c9:
6a:0a:5e:fa:b2:df:41:15:df:8f:55:73:92:b0:a8:
a7:2c:81:1f:c5:55:ef:8c:7e:e7:33:3f:64:6f:0e:
ef:06:78:d8:9e:e0:80:0d:d8:fe:3d:3a:3d:46:d7:
a4:82:8e:58:ca:ad:36:27:38:93:da:a3:e8:43:df:
07:02:a8:3b:6c:ae:30:07:c9:29:0e:6c:ef:18:98:
50:5e:02:c2:40:f0:9d:bc:97:8c:c0:5b:67:98:5e:
10:b4:45:fe:65:1f:97:54:5c:e0:51:b5:09:42:fc:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:9E:06:1A:52:A3:52:C4:76:F4:EF:5C:57:A3:35:C2:31:2A:D8
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/W-OeBhpSo1LEdvTvXFejNcIxKtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.187.0/24
Signature Algorithm: sha256WithRSAEncryption
18:52:bc:9b:12:32:60:dc:49:68:e2:a9:fd:ea:74:0d:f7:3f:
52:95:5f:f6:37:e0:52:22:9a:35:e7:9d:82:dd:12:b6:d0:27:
83:a7:a5:a8:16:44:98:58:a3:c9:27:b5:bd:b0:62:d7:15:e2:
ec:64:9c:b2:cc:f7:83:45:f3:8e:dd:e7:a7:44:84:26:f4:8a:
29:4c:58:fb:c0:0d:22:55:4a:93:4a:e0:8c:39:e5:8d:c9:e6:
90:93:73:2c:82:3d:e8:c2:e5:26:b5:25:7a:6e:4d:3e:55:77:
de:93:a5:2a:84:49:7c:c6:52:0e:43:15:50:13:80:28:a8:99:
bc:6f:66:ac:4a:e1:aa:72:c6:0a:77:5a:bc:df:64:20:4f:5a:
63:48:f0:07:70:a9:41:3d:3b:9b:a0:0d:b0:2d:4d:58:18:59:
0d:b1:61:18:44:a6:63:9c:9e:f8:1c:c6:f3:50:af:d7:85:13:
85:db:ec:c4:03:a4:95:f8:d5:9b:15:8b:2c:d5:28:67:e0:cd:
f5:6c:00:73:f7:88:cd:bb:b5:ff:44:a8:91:95:a0:f0:e1:9f:
06:54:3f:49:34:1c:41:62:e7:d1:b6:28:10:82:d0:23:f2:e5:
46:29:70:a3:48:11:d4:a1:6b:be:52:6d:eb:ef:58:7a:5d:d6:
de:59:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:34 2024 by rpki-client on console-ams.rpki-client.org