Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WF0aqTQlAYKWEiuA-D6v51sb0vU.roa
File: WF0aqTQlAYKWEiuA-D6v51sb0vU.roa (raw, json)
Hash identifier: 5KBucQqTn/q3XhQjuRd8Xf9klGXCYGdVdHDJ08kwMgk=
Subject key identifier: 58:5D:1A:A9:34:25:01:82:96:12:2B:80:F8:3E:AF:E7:5B:1B:D2:F5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E9E8FA9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WF0aqTQlAYKWEiuA-D6v51sb0vU.roa
Signing time: Sun 06 Feb 2022 16:07:08 +0000
ROA not before: Sun 06 Feb 2022 16:07:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 195.133.81.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245272489 (0xe9e8fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 6 16:07:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=585d1aa93425018296122b80f83eafe75b1bd2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:fa:95:8c:62:60:c4:2d:e9:a6:74:fc:d4:
93:b8:7d:3c:d5:9c:ba:34:a8:47:79:c2:09:64:70:
0d:94:ea:8c:52:dc:0f:fa:f6:dd:04:12:c0:5d:1a:
cd:f8:14:b4:04:2d:fe:3f:e9:a8:2e:d8:48:c4:2a:
66:27:cc:d9:77:4c:48:d8:83:23:2f:4d:a1:cb:7c:
4f:b2:99:c2:64:11:dc:5a:3e:b6:34:e8:51:0c:82:
25:43:ed:90:2a:82:6b:9d:23:90:d1:bc:7c:45:0c:
58:e9:b9:63:15:85:8e:eb:33:ae:95:1f:ee:4f:72:
51:cc:83:2c:ff:a1:13:34:55:58:92:d5:29:bb:5f:
19:d3:ce:82:bb:69:24:a7:64:29:f7:66:7b:19:06:
83:d7:c1:60:ac:8c:3f:fe:ff:65:43:d7:d0:14:96:
f1:6a:b3:74:87:8d:14:fa:16:01:46:82:03:18:49:
18:51:a9:e2:b5:b2:1e:1e:55:9e:12:e1:dc:af:10:
a4:d9:e3:22:21:31:8f:59:25:11:fe:f5:a6:ae:c4:
b8:99:87:b8:51:91:f1:75:8e:5f:aa:2b:ce:5c:8b:
e6:41:dd:14:8c:a2:be:35:37:d9:70:0b:71:97:53:
9d:e4:af:c8:d3:e2:c4:e4:50:06:19:d5:b9:33:4e:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:1A:A9:34:25:01:82:96:12:2B:80:F8:3E:AF:E7:5B:1B:D2:F5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WF0aqTQlAYKWEiuA-D6v51sb0vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.227.0/24
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
78:93:49:90:84:3c:95:92:6b:96:05:66:be:c8:93:89:8d:8c:
6c:98:78:c4:a6:ed:2c:72:f3:df:3b:cc:23:85:4a:a0:3b:9f:
c9:6f:dc:fe:8c:8e:c0:ef:7c:e0:97:18:3e:6b:fb:d4:da:33:
21:e7:eb:2c:bb:fc:29:e5:f0:b0:2a:7f:e9:09:fb:39:02:2e:
47:51:e1:14:44:63:e3:14:3e:a2:46:f0:ca:e5:5b:96:c9:10:
75:3f:2c:98:68:9b:30:0a:93:83:b2:b7:7a:ad:32:2d:f0:c0:
20:de:e4:af:15:d7:46:04:5b:72:50:59:f8:a1:c8:f9:41:b9:
4d:a5:71:3c:ca:c5:1b:1e:b2:72:69:1f:08:90:f1:f3:d7:39:
c7:ca:23:33:1b:e6:fc:17:e1:24:67:08:b3:36:da:8c:7a:9e:
66:38:54:df:7d:f2:ea:88:09:63:c2:89:dd:ab:98:c0:a2:3a:
fa:01:29:c2:d2:9a:c6:2d:23:c4:6b:17:1b:8c:19:b3:c1:de:
32:3c:e4:54:40:7f:15:5f:a7:0d:54:61:82:25:3e:7b:2d:78:
f9:38:fc:c0:24:5f:78:52:c1:d3:5c:37:6a:c3:fb:29:2f:ad:
83:ec:75:4b:b2:7e:47:c5:8e:64:00:03:c9:08:4c:af:8f:f4:
02:15:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org