Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WYbeUTrfsHKIspF0I6_7e4rC1mU.roa
File: WYbeUTrfsHKIspF0I6_7e4rC1mU.roa (raw, json)
Hash identifier: gBkAE0ilTukY/YXhcVyLQ/Gwj01RVFg5K5kaLWxHfpw=
Subject key identifier: 59:86:DE:51:3A:DF:B0:72:88:B2:91:74:23:AF:FB:7B:8A:C2:D6:65
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0183B14C06E936EC6B765CB509EF6962D5B7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WYbeUTrfsHKIspF0I6_7e4rC1mU.roa
Signing time: Fri 07 Oct 2022 07:14:53 +0000
ROA not before: Fri 07 Oct 2022 07:14:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13687
IP address blocks: 194.87.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:4c:06:e9:36:ec:6b:76:5c:b5:09:ef:69:62:d5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 07:14:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5986de513adfb07288b2917423affb7b8ac2d665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:5c:e8:f4:af:fd:f4:28:03:7b:99:27:2b:
11:2c:ca:f7:f7:a0:ea:90:21:b3:f4:74:6d:b9:a2:
3f:68:6c:1f:45:f7:81:12:5a:dc:15:2c:60:c2:c6:
98:b9:52:85:dd:5f:66:e9:fa:d7:9f:d5:3e:4f:a5:
13:a2:5c:74:21:ea:a6:d2:d3:c2:6d:37:75:61:21:
c6:01:a1:5e:d0:16:1c:bb:3f:33:8b:f3:1c:0c:bc:
f2:d0:6d:f9:90:09:4a:b4:ef:b2:0d:af:71:b4:36:
34:97:3f:5c:dc:02:e9:60:33:0b:a0:ba:c8:df:12:
31:6c:69:3d:87:2a:c5:87:c8:2d:47:e3:5a:69:86:
c7:d0:35:3c:19:4b:78:65:bf:b4:70:bb:60:1c:6b:
33:83:08:ea:92:d8:96:92:e3:72:82:ee:b0:50:79:
22:d9:a2:a7:83:ab:e7:b5:48:40:40:5b:bb:e4:bd:
1d:80:0e:5c:d5:44:bd:18:0e:67:3f:be:f4:f1:f9:
f1:31:62:be:53:23:aa:81:a8:e3:26:b6:77:0d:ae:
29:ad:f2:f9:a0:6d:53:1e:6b:01:ac:43:da:78:14:
7b:a5:d0:f5:7b:41:e6:70:88:cf:97:5a:db:7f:53:
de:de:76:a1:9b:cd:4e:62:5f:9f:69:5e:d3:f6:9f:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:86:DE:51:3A:DF:B0:72:88:B2:91:74:23:AF:FB:7B:8A:C2:D6:65
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WYbeUTrfsHKIspF0I6_7e4rC1mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.180.0/24
Signature Algorithm: sha256WithRSAEncryption
80:36:34:1b:20:2d:19:99:dd:af:df:57:a5:60:8e:fc:8a:e7:
f5:e3:c2:49:40:bf:15:e2:9c:ef:8b:22:df:06:d1:ad:f0:3f:
17:64:dd:e3:02:7a:2b:a1:03:89:fe:c8:71:11:c8:6f:31:99:
e0:ac:6b:75:61:da:06:c9:c3:7c:ac:15:59:86:57:1e:92:6b:
fb:33:8a:c6:3f:11:ec:e7:f8:89:ae:65:c5:e8:62:29:29:da:
4d:7d:c2:df:1a:9a:dd:9c:4c:22:7b:0c:93:4a:a6:c7:6e:27:
ea:ef:31:dd:78:52:31:cb:a5:1b:bf:67:65:b5:12:8f:68:6e:
8a:46:ed:91:de:9d:1f:50:a0:31:68:dc:c4:9a:f1:bf:f2:cd:
d9:cd:01:df:1a:b0:7f:53:25:02:54:ee:27:37:f9:4a:06:7a:
a3:36:09:c6:08:61:56:22:0c:1a:c6:7c:69:52:57:62:92:96:
32:2d:c3:f5:9e:2b:13:fe:4a:bf:8f:e9:c9:b7:bb:7b:29:d4:
e5:51:53:ee:9c:6a:5f:bd:79:17:d1:58:5a:c1:73:3e:21:a7:
ea:41:b7:f8:22:b3:1c:02:f0:d4:04:d0:1b:dc:e0:41:db:b4:
e1:12:93:15:36:fb:61:65:56:5f:5d:8e:a1:ba:db:74:14:84:
de:f0:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org