Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wfBO0_sUvtXvH63_ZTVnLP7VXS8.roa
File: wfBO0_sUvtXvH63_ZTVnLP7VXS8.roa (raw, json)
Hash identifier: b2hYx3zEya0EgIiBcRKvh9O/IOiJ5jft3SdlaA2wm98=
Subject key identifier: C1:F0:4E:D3:FB:14:BE:D5:EF:1F:AD:FF:65:35:67:2C:FE:D5:5D:2F
Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial: 04628882
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wfBO0_sUvtXvH63_ZTVnLP7VXS8.roa
Signing time: Fri 28 Jan 2022 08:01:40 +0000
ROA not before: Fri 28 Jan 2022 08:01:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212714
IP address blocks: 185.152.172.0/22 maxlen: 24
2a11:180::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73566338 (0x4628882)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
Validity
Not Before: Jan 28 08:01:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1f04ed3fb14bed5ef1fadff6535672cfed55d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:d9:2d:95:ab:58:2e:d8:12:51:d9:56:23:
36:ad:3a:dc:61:70:05:b6:2c:5d:5f:9f:0d:ac:f1:
3b:c7:83:f3:cf:6e:62:a4:6f:ae:43:89:85:f1:1f:
d3:81:ad:4c:80:7b:ac:68:b7:41:19:80:12:eb:87:
f7:01:29:f1:e1:4b:47:6b:88:e7:93:67:64:6c:66:
af:01:4e:88:23:3c:63:b1:72:c1:79:3f:c7:4d:48:
05:82:bf:9b:5a:b7:ae:05:8e:d8:6e:b0:fe:20:9c:
4a:5d:1c:50:4f:18:0f:0a:af:a2:52:0b:f2:48:2f:
28:56:4c:87:84:ca:08:9c:4e:6a:39:89:9e:35:22:
25:3e:43:ab:8d:f2:5a:88:fc:e2:a5:16:f3:6d:87:
a2:e3:e3:b2:ca:98:d2:63:2c:53:74:1d:40:07:45:
e5:56:b9:7e:46:b6:92:8f:32:86:bb:85:aa:4b:d2:
1a:b3:03:13:ae:c1:6c:e9:6e:7e:47:51:7d:58:34:
7c:30:32:3c:8c:2e:a5:47:94:93:7a:08:50:fd:fd:
fa:60:37:2b:bf:61:b7:90:5f:fa:5b:45:55:f7:fc:
98:8a:e6:07:67:82:ab:9e:c0:db:bd:c0:db:f5:43:
9f:0b:61:aa:32:fc:e6:f3:e8:6e:a5:e3:04:0f:5a:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:4E:D3:FB:14:BE:D5:EF:1F:AD:FF:65:35:67:2C:FE:D5:5D:2F
X509v3 Authority Key Identifier:
keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wfBO0_sUvtXvH63_ZTVnLP7VXS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.172.0/22
IPv6:
2a11:180::/29
Signature Algorithm: sha256WithRSAEncryption
7f:7d:87:64:41:37:1b:69:77:f5:c1:33:1b:0a:54:ca:38:d0:
82:e5:62:69:2e:4c:f9:d3:95:18:40:c9:ee:d8:28:cd:ae:fc:
5f:bb:86:f5:f6:c1:ac:76:3a:c8:71:78:a2:48:68:41:5b:36:
e5:bb:be:be:cc:2a:bf:13:7b:9a:66:a0:77:da:87:3c:3d:d1:
9b:4a:a9:db:f2:10:a8:66:d6:19:1b:d8:04:5c:7a:2d:bf:59:
ca:d2:36:b1:02:b8:09:40:51:cf:4c:ea:2f:94:f4:07:93:ed:
75:03:38:49:04:13:9c:2d:f4:1a:15:47:1f:6f:ad:37:a3:3f:
77:55:cc:21:a6:ec:a9:0d:6d:c1:fe:5d:b5:3a:d5:75:da:da:
4c:30:15:fd:ef:c0:2a:fe:f3:c1:87:c5:03:31:7a:5c:e7:cf:
31:cc:d3:10:81:7e:4e:3a:6f:03:bb:bd:be:14:2b:31:f6:1f:
29:e6:13:14:e8:e7:c1:3a:ce:74:27:24:28:d4:ab:ff:52:47:
7f:f0:b2:24:4e:f5:e4:6e:67:c8:cc:f2:97:03:06:ac:c0:0b:
fc:b3:ed:fd:69:93:a3:ce:90:7f:25:71:93:c8:b1:b6:86:d1:
df:0a:44:da:4f:dc:ea:62:8e:67:d0:82:fa:04:4a:c5:80:06:
4b:e7:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:03 2024 by rpki-client on console-fra.rpki-client.org