Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/pWCWsq2qjTb9EQxCwoEJazeiaXo.roa
File: pWCWsq2qjTb9EQxCwoEJazeiaXo.roa (raw, json)
Hash identifier: 4XefBw8ZFEv3xS8SjoN9Y5hUTnBiq6ZS9+y1W4bcNmc=
Subject key identifier: A5:60:96:B2:AD:AA:8D:36:FD:11:0C:42:C2:81:09:6B:37:A2:69:7A
Certificate issuer: /CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Certificate serial: 08933594
Authority key identifier: 39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/pWCWsq2qjTb9EQxCwoEJazeiaXo.roa
Signing time: Sat 01 Jan 2022 09:56:36 +0000
ROA not before: Sat 01 Jan 2022 09:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 185.243.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143865236 (0x8933594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391975ad57ceb765ad948be5eb4c382dc74844c0
Validity
Not Before: Jan 1 09:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a56096b2adaa8d36fd110c42c281096b37a2697a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:94:93:48:70:57:b8:e6:65:aa:58:6d:bf:
03:aa:a1:88:0f:ea:1b:38:e1:00:87:4c:e3:6a:00:
4b:ce:3f:4c:dd:2a:60:8c:8e:b8:87:0f:06:f0:cc:
c3:4b:52:50:39:db:00:f8:bc:39:39:2b:25:5e:39:
e9:09:45:d6:5c:f5:c6:6a:36:3e:d3:68:2a:e4:7b:
4c:d5:be:71:85:e6:43:a6:6d:4f:a4:da:92:5a:a5:
ff:4f:e2:57:43:1c:d9:9e:4b:0b:f2:8b:fd:c9:c0:
c9:30:16:f8:ce:15:e2:19:86:3f:d7:82:09:77:58:
e9:76:7b:29:ac:bc:79:3b:76:e9:1a:52:a4:8f:7f:
63:73:50:54:8e:23:34:e0:78:2a:95:c3:49:96:53:
82:b9:ed:75:12:22:ad:ea:ce:99:33:14:7c:06:bd:
23:f4:5d:4e:9d:79:4c:5e:74:e7:82:bd:17:97:5e:
f8:17:8e:ff:c9:b3:ad:9a:f6:31:a1:48:95:71:bf:
7a:7d:e3:1f:e3:18:0e:88:c6:a7:55:a5:1b:e1:43:
75:26:35:64:a2:e0:58:49:de:95:ec:ff:b3:1e:e9:
97:de:28:2d:97:3a:68:0d:98:7f:13:64:33:8e:12:
48:56:1b:b2:b5:1d:0b:ab:2b:35:dd:ed:f6:20:f4:
07:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:60:96:B2:AD:AA:8D:36:FD:11:0C:42:C2:81:09:6B:37:A2:69:7A
X509v3 Authority Key Identifier:
keyid:39:19:75:AD:57:CE:B7:65:AD:94:8B:E5:EB:4C:38:2D:C7:48:44:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORl1rVfOt2WtlIvl60w4LcdIRMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/pWCWsq2qjTb9EQxCwoEJazeiaXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6b5064-8d5e-4c94-b5bd-050204532286/1/ORl1rVfOt2WtlIvl60w4LcdIRMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.24.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a9:6d:03:a4:c7:e8:25:d5:c0:ae:f2:a9:d4:f6:11:98:ba:
65:2f:9f:86:6c:02:23:9c:ee:cd:91:51:ef:19:ae:33:41:82:
dd:cb:4c:4e:ec:c7:a4:6a:4a:fe:46:08:9f:6c:5e:11:9f:2e:
e7:45:7c:e6:bb:37:ad:cd:29:ba:8c:7a:01:70:1e:f6:12:31:
2c:a3:83:76:07:07:b8:d9:ef:5e:d6:cd:48:cd:3d:4a:0f:9f:
dd:ae:63:e8:5b:f0:5c:a9:c7:98:7a:5a:36:6b:29:01:d3:20:
c2:be:bd:29:78:42:55:1d:40:a5:b6:27:68:5f:cf:86:ac:85:
8c:07:9f:1f:e5:7c:6a:87:aa:65:f1:e2:2d:d1:eb:b5:48:e9:
58:0f:40:96:32:6e:63:a9:14:bf:cb:9e:c3:34:8d:38:c6:df:
c6:d7:0d:9c:b2:8e:dd:df:cb:bb:ff:1d:f4:82:88:6a:7b:ba:
dd:5c:e7:2d:68:d1:0c:d0:4b:48:7b:2f:6d:46:d5:06:b8:0c:
ab:33:a0:df:c7:ac:54:4f:ed:f0:a6:18:2b:ed:2a:2d:5f:a7:
5d:14:ae:71:0c:7e:2d:e5:32:e8:29:81:7d:58:73:94:e0:ea:
df:1b:25:80:cb:91:65:fa:db:48:d2:f0:c6:e5:55:75:bb:09:
1d:8e:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:00 2024 by rpki-client on console-ams.rpki-client.org