Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/wYW09eFbecanIA-OoKO3nYRq_S8.roa
File: wYW09eFbecanIA-OoKO3nYRq_S8.roa (raw, json)
Hash identifier: 9gfHQyp7rqZsEHKZBwDaL6Lbx8q1jaE1YTsTztpL4YA=
Subject key identifier: C1:85:B4:F5:E1:5B:79:C6:A7:20:0F:8E:A0:A3:B7:9D:84:6A:FD:2F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 0A380F6A
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/wYW09eFbecanIA-OoKO3nYRq_S8.roa
Signing time: Sat 01 Jan 2022 03:54:22 +0000
ROA not before: Sat 01 Jan 2022 03:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2200
IP address blocks: 192.54.176.0/24 maxlen: 24
192.54.175.0/24 maxlen: 24
192.54.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171446122 (0xa380f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Jan 1 03:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c185b4f5e15b79c6a7200f8ea0a3b79d846afd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:cd:6b:ff:12:d9:0f:30:53:9a:f0:06:06:
a4:ad:ae:73:d7:c3:1b:2d:3d:4a:2a:dd:7a:6f:bc:
83:01:8d:d7:c4:54:fb:34:19:b6:f8:ab:83:c9:10:
ec:d6:e2:55:43:95:c2:4d:1d:52:5f:46:6a:9b:f4:
33:fa:dd:9a:dd:12:fd:f1:5a:5d:04:37:e1:8c:3a:
4c:4b:a1:8f:6e:32:7c:a2:c7:df:88:7b:02:f6:be:
d8:53:1d:3f:24:ae:6d:a9:ae:af:74:c8:c1:1e:aa:
02:bf:a5:a5:97:f0:3f:a4:49:84:7e:1a:06:97:51:
d0:5f:72:cb:45:37:d6:b4:1e:79:fe:6f:ea:d0:4c:
0d:98:6f:b4:20:3e:7a:b7:eb:f6:9d:9c:d0:6a:f5:
d2:74:6e:02:d4:6d:40:45:57:b5:07:e5:74:e4:76:
d6:f0:6c:34:78:9d:83:05:72:59:9d:10:d0:a9:bf:
0a:f5:94:10:c2:f0:a4:45:87:27:84:32:07:ce:b5:
e7:23:69:bd:4e:24:56:c6:17:2c:f0:64:8b:bb:0d:
9e:b1:17:57:05:9d:d8:ff:48:89:c5:a3:d5:72:38:
a5:7c:63:60:0e:fa:88:78:c6:c7:63:38:63:81:b4:
1a:82:ac:41:44:8b:4a:87:8e:1f:eb:05:2e:07:a7:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:85:B4:F5:E1:5B:79:C6:A7:20:0F:8E:A0:A3:B7:9D:84:6A:FD:2F
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/wYW09eFbecanIA-OoKO3nYRq_S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.54.174.0-192.54.176.255
Signature Algorithm: sha256WithRSAEncryption
42:3c:ec:17:81:05:5d:eb:be:77:e0:29:1a:33:ca:25:b6:3b:
2d:5f:ca:1a:4a:f6:0b:24:31:71:d3:2e:a5:f8:15:d2:f7:d2:
21:f1:84:fe:1c:4f:b7:b4:0c:f6:7c:1e:a8:a7:52:c0:fb:82:
1a:de:3c:16:90:37:ba:05:2b:51:26:0d:1f:8b:49:25:dd:c8:
40:ba:db:b2:d1:dd:73:6a:2c:cb:56:aa:fd:10:9e:84:22:00:
e7:12:fb:08:bd:1c:94:2e:41:5e:e9:86:b5:2b:d4:12:84:eb:
df:a9:bb:67:ab:97:2d:99:21:68:a8:60:67:e8:d9:44:2c:aa:
f4:66:7f:3d:f0:e2:1c:a6:78:bf:49:eb:30:15:f1:fb:24:1a:
c7:b4:3d:aa:6d:36:07:36:7c:0f:12:2e:5a:9e:85:0a:0a:64:
0f:50:d0:b2:6f:8c:06:7d:d6:16:b1:b8:29:a5:51:a5:1b:ee:
d4:0c:68:97:a3:d6:45:40:ff:0b:10:1f:b5:44:2c:1f:d9:72:
10:77:f3:6e:1f:73:da:4d:36:95:38:99:5a:77:c5:bd:ac:f6:
bd:11:0a:fa:91:7b:05:47:d4:60:43:80:53:7d:b7:12:2b:a6:
6e:7a:36:a9:e3:60:19:53:e0:7f:29:bf:61:c0:4c:85:a4:77:
6f:6e:28:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:12 2024 by rpki-client on console-fra.rpki-client.org