Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Ww34zYs6-vEAOrmLoD6rQyGC3Zs.roa
File: Ww34zYs6-vEAOrmLoD6rQyGC3Zs.roa (raw, json)
Hash identifier: f44yvmxr9DStMf8z4ikIssep6Ku49NWh6E+IbYuOdkw=
Subject key identifier: 5B:0D:F8:CD:8B:3A:FA:F1:00:3A:B9:8B:A0:3E:AB:43:21:82:DD:9B
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 0184CCB0F75BB8715CC33952BFC9BB69425C
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Ww34zYs6-vEAOrmLoD6rQyGC3Zs.roa
Signing time: Thu 01 Dec 2022 07:57:40 +0000
ROA not before: Thu 01 Dec 2022 07:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48763
IP address blocks: 194.28.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:b0:f7:5b:b8:71:5c:c3:39:52:bf:c9:bb:69:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Dec 1 07:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b0df8cd8b3afaf1003ab98ba03eab432182dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:23:00:2a:2a:50:f2:5e:e3:45:aa:69:60:
bb:97:b5:4d:2d:cf:63:33:69:61:87:24:40:d4:57:
48:48:10:ae:58:b0:1a:a4:78:95:4e:cf:18:3d:d5:
1c:c6:ab:52:2a:a8:c1:ed:ae:ce:19:e6:77:1e:5a:
ef:54:0c:88:6e:52:c1:7a:93:a9:33:ec:86:fe:9d:
ed:94:8d:05:11:d0:f7:3d:aa:ac:7a:6a:93:03:3f:
29:e6:9e:c7:5e:59:01:fb:ea:90:52:d4:70:33:58:
ab:ff:6b:7d:1c:72:23:68:41:00:52:24:0a:70:90:
32:26:59:62:4e:82:a3:aa:a3:a7:10:15:e5:96:97:
90:62:ee:b9:30:26:3b:77:a3:ef:c8:3a:09:b8:a8:
88:b5:66:27:65:fb:0f:d8:25:8a:81:2a:22:50:2c:
f3:65:85:cf:a9:fa:24:f1:ba:f4:51:3c:b5:e9:77:
01:28:3e:81:5f:0b:22:b7:ec:87:07:c0:37:33:0c:
6c:a0:ff:17:1a:75:f9:a3:10:8f:67:cd:60:ad:df:
bf:d0:3c:81:69:b7:56:c5:85:a2:dd:ed:30:85:93:
b1:f2:cd:b2:3b:4a:14:82:0e:92:32:d4:e4:d8:27:
16:ee:2d:94:d4:51:b1:10:dc:87:57:16:6d:cb:1f:
e8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:F8:CD:8B:3A:FA:F1:00:3A:B9:8B:A0:3E:AB:43:21:82:DD:9B
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Ww34zYs6-vEAOrmLoD6rQyGC3Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a7:b4:b7:9b:b7:83:21:a3:23:8f:57:6d:39:c3:13:71:0f:
75:cf:ff:4f:34:02:6f:f0:09:ad:1d:78:b3:c0:c2:db:02:77:
2c:b4:b1:d3:49:f7:7e:d1:d8:46:25:f8:0c:6f:ec:6a:fe:dd:
79:45:4e:19:c3:bb:0c:7f:9b:df:bf:2d:af:68:e6:9e:4d:09:
00:f6:86:56:44:b8:28:88:9a:ca:2d:7b:27:06:fc:fd:05:76:
2e:33:79:a9:b9:e9:aa:8d:e0:9f:94:d9:96:08:91:aa:0c:d4:
01:51:16:55:fe:cc:f6:e7:d3:a1:46:e2:7e:14:a9:f6:66:07:
d8:b5:6d:94:08:c6:9c:d8:77:5f:c4:49:06:44:64:a8:e3:49:
66:be:61:79:e5:08:4d:01:4f:1c:75:a3:1d:28:82:d2:19:be:
34:3f:a0:5a:94:23:12:b0:fc:b6:80:0f:70:1a:8a:20:5a:2c:
6c:76:c2:26:3c:85:fe:21:62:eb:9a:ff:08:9a:53:6b:8b:38:
3d:f0:e0:b4:d2:13:ea:1f:0f:87:f6:fb:95:e1:c0:18:5f:58:
a0:7b:d9:f3:3b:de:0c:5a:1d:7a:c1:bb:21:57:ff:4f:1f:f1:
16:b5:b2:0f:ab:bb:95:98:31:53:9f:87:b9:4f:c0:81:b4:5c:
2f:8a:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org