Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/w-we752LXga7U6g4_nr5W2ZdAYY.roa
File: w-we752LXga7U6g4_nr5W2ZdAYY.roa (raw, json)
Hash identifier: FjGbVz01ZpyfJcd3JHSoXBx3nnjgqrk4TOMNYjDH8MQ=
Subject key identifier: C3:EC:1E:EF:9D:8B:5E:06:BB:53:A8:38:FE:7A:F9:5B:66:5D:01:86
Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial: 057E0AE0
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/w-we752LXga7U6g4_nr5W2ZdAYY.roa
Signing time: Thu 10 Mar 2022 13:55:54 +0000
ROA not before: Thu 10 Mar 2022 13:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201500
IP address blocks: 185.137.69.0/24 maxlen: 24
185.174.213.0/24 maxlen: 24
185.174.214.0/24 maxlen: 24
185.174.214.0/23 maxlen: 23
185.174.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92146400 (0x57e0ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Validity
Not Before: Mar 10 13:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3ec1eef9d8b5e06bb53a838fe7af95b665d0186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:41:41:95:71:af:d4:59:6e:2c:f6:3a:54:9a:
9b:9e:95:e2:8b:32:c3:e1:5d:ff:8d:a4:cc:77:61:
8e:27:be:55:3f:fc:ce:5d:a1:f2:3f:38:3b:3d:ad:
33:93:05:c5:77:4d:ac:28:50:55:87:26:29:8d:62:
b5:38:5e:3d:9e:5b:25:cb:bf:e1:f7:62:a6:e7:2f:
41:8a:56:5e:7c:a4:66:81:ec:63:0e:6e:e3:ee:e0:
d9:36:d7:86:c3:ce:c0:de:3d:ed:42:b4:a3:5d:ae:
40:f7:e7:17:00:b7:7d:6d:d6:b2:35:38:01:92:d3:
d9:c2:e2:5e:d5:76:b8:c1:e8:ad:8b:28:fb:f7:d5:
d8:ad:1c:2b:43:98:39:28:46:09:48:54:f0:f5:27:
92:c0:0a:50:91:57:39:35:ca:66:a8:00:cf:27:5b:
01:ac:ea:68:98:49:c2:2c:4f:6d:00:8e:65:f4:b6:
f8:38:3a:15:60:84:5b:f9:08:a1:95:50:77:42:ec:
d9:f1:02:e3:fe:5a:b7:1d:35:ec:41:11:1c:97:d0:
4f:03:8e:3a:97:23:37:2a:4d:fc:5d:16:4e:1d:20:
0a:e4:22:a3:ea:5b:0a:1c:aa:44:51:eb:fa:60:78:
e1:e2:5f:50:c6:a8:da:aa:9f:bf:fe:e2:34:16:a7:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EC:1E:EF:9D:8B:5E:06:BB:53:A8:38:FE:7A:F9:5B:66:5D:01:86
X509v3 Authority Key Identifier:
keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/w-we752LXga7U6g4_nr5W2ZdAYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.69.0/24
185.174.213.0-185.174.215.255
Signature Algorithm: sha256WithRSAEncryption
46:8d:da:b7:23:5d:a6:b4:06:87:c1:c9:bc:af:39:b5:76:bb:
a4:a0:67:46:73:1f:5c:8c:d9:28:1d:2f:92:aa:8d:2f:13:90:
ed:46:d2:ae:7d:17:e7:c5:2a:75:1c:1c:3a:89:a5:0c:46:d3:
19:73:25:a4:e9:57:78:05:c4:e3:8d:f0:47:89:d2:db:6e:38:
84:a9:5c:b5:56:14:c0:dc:48:27:bd:7e:91:a4:ff:62:d8:f9:
ce:79:88:57:26:be:ad:9f:99:ef:41:b4:e7:a0:44:70:21:20:
75:96:70:99:76:a1:4f:1c:e8:8c:ab:25:6c:a7:d6:68:ce:56:
1f:88:87:41:30:80:ce:f7:0b:f8:6e:23:0e:f7:2b:97:58:d5:
11:fe:ea:0e:bd:4b:bc:57:e3:33:76:f2:9a:16:91:74:b1:92:
40:12:df:37:69:72:01:2e:9f:04:08:20:14:a7:74:29:92:66:
64:9e:f5:17:64:19:cd:f4:07:f7:ab:94:75:59:1c:5d:59:3d:
95:d1:a9:9a:a2:9b:f6:1d:bf:9d:74:32:ff:4c:bd:28:dd:3b:
6b:3c:87:74:63:67:b5:d6:d1:33:38:dd:7c:9a:21:2a:ba:ff:
d9:22:14:2f:a3:ae:bf:ce:a1:7f:29:a5:21:89:0d:3c:22:a3:
6e:22:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:27 2024 by rpki-client on console-fra.rpki-client.org