Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WRMVTV3zVDRVg20FBJCHe5vH8aA.roa
File: WRMVTV3zVDRVg20FBJCHe5vH8aA.roa (raw, json)
Hash identifier: s6Y6nPdxdvZ/Ayl/J2UM93hhwgAk0yru+Hnmx/dw7xE=
Subject key identifier: 59:13:15:4D:5D:F3:54:34:55:83:6D:05:04:90:87:7B:9B:C7:F1:A0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1F0BEA65
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WRMVTV3zVDRVg20FBJCHe5vH8aA.roa
Signing time: Thu 16 Jun 2022 20:42:44 +0000
ROA not before: Thu 16 Jun 2022 20:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 94.156.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520874597 (0x1f0bea65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 16 20:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5913154d5df3543455836d050490877b9bc7f1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:27:c7:39:78:cc:22:31:e7:19:d9:5f:b8:
77:3f:74:57:c7:95:23:9d:ff:3f:02:98:49:8f:9d:
fb:f8:a6:ce:9a:c2:62:95:f9:62:10:e2:84:9b:d9:
b2:b8:79:81:1d:4b:58:c6:25:4d:f5:9f:64:05:cc:
1f:5d:a7:c8:50:75:50:36:e1:04:a7:e1:69:20:6c:
a6:60:0b:84:79:a7:ab:ce:bc:a5:54:ce:7d:69:c6:
83:78:71:20:4d:39:4c:3e:c2:50:f9:4e:ad:ed:b2:
b8:a3:01:ce:a2:31:7c:30:f6:87:7e:e5:52:50:07:
df:0d:61:9c:10:5e:05:a8:a4:e4:7f:79:c9:2b:5f:
aa:a8:79:af:44:1c:17:db:2b:bb:e0:c4:66:59:b9:
d4:9e:1b:d1:70:f2:aa:f9:54:da:c9:03:87:fa:2f:
4a:df:f5:14:f0:4e:f2:16:91:0e:1a:55:c5:da:f4:
7d:82:89:a2:51:f7:6c:cc:73:b0:d8:38:cc:71:95:
4d:69:e2:10:d9:d4:d5:fa:21:2b:7c:0b:ea:e9:4d:
a5:23:8b:44:3c:01:2d:2d:75:17:9a:c1:e1:ec:c3:
e2:1d:b9:6c:21:7e:23:48:0f:35:6c:af:b4:87:ef:
b3:72:ce:39:2c:04:94:7d:c4:ab:23:7d:cb:de:01:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:15:4D:5D:F3:54:34:55:83:6D:05:04:90:87:7B:9B:C7:F1:A0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WRMVTV3zVDRVg20FBJCHe5vH8aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ca:dc:c9:3d:4a:74:3c:a0:96:ab:57:cf:01:8c:d2:6a:17:
28:4e:cf:b5:3d:44:ba:33:eb:ec:d0:16:d1:2c:8b:ad:02:3c:
1d:23:4d:e5:43:e9:1e:99:c9:3d:e6:f0:a2:4a:01:d2:49:97:
64:87:28:7b:e9:af:5f:79:3e:31:94:f4:86:8a:3f:a7:e4:04:
d8:6f:60:4a:ec:7d:e3:81:8b:ae:0d:61:60:0d:13:bf:31:c3:
ce:e8:f5:da:e9:2d:33:bf:d1:11:6c:3b:34:62:7c:d3:4c:81:
7b:a4:35:13:1c:12:4c:b5:fc:f4:5c:ef:22:53:bc:5c:55:30:
e6:a4:b1:40:64:57:36:dc:e5:27:a7:6b:6d:49:ff:cb:71:7d:
30:90:f9:ae:b2:9d:d5:d3:53:95:6f:f6:d0:ac:62:e1:37:80:
dc:b0:dc:fc:e9:56:61:47:82:69:e2:d5:d1:b8:4c:14:35:4d:
47:18:f3:a2:fc:7b:ab:d6:00:d2:80:7c:f4:7e:ae:1f:fa:6e:
a8:a3:63:ab:d5:84:e2:83:8c:33:81:e2:8e:ff:e7:71:d2:c5:
9d:35:28:01:40:47:4b:6e:4b:af:09:f4:2d:54:a7:e7:c1:35:
09:ed:16:02:c7:61:84:fe:81:70:9b:ac:7d:db:1b:1b:c5:34:
5a:ae:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org