Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wx-h3VljUhSuxZ-l-6IvJBJn4DM.roa
File: wx-h3VljUhSuxZ-l-6IvJBJn4DM.roa (raw, json)
Hash identifier: 2smAPwX7ofEpxLckf37/WMC89wWBul2qWJ6F4PYKo9g=
Subject key identifier: C3:1F:A1:DD:59:63:52:14:AE:C5:9F:A5:FB:A2:2F:24:12:67:E0:33
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0181FB735FB68E4B4B12C9F17351C39AEEBC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wx-h3VljUhSuxZ-l-6IvJBJn4DM.roa
Signing time: Thu 14 Jul 2022 06:44:11 +0000
ROA not before: Thu 14 Jul 2022 06:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 164.40.185.0/24 maxlen: 24
194.48.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:73:5f:b6:8e:4b:4b:12:c9:f1:73:51:c3:9a:ee:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 14 06:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c31fa1dd59635214aec59fa5fba22f241267e033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:48:b3:96:cf:cc:50:75:28:74:09:71:8a:
d4:ea:6b:d6:26:4c:d7:68:fc:ef:73:9f:e0:f3:79:
c3:19:ef:61:e1:ae:ae:f1:35:46:49:a3:e1:fa:c6:
fd:dc:a3:2d:e8:a2:6f:2a:db:7a:0d:ab:e4:ca:f0:
09:b8:1d:c3:ca:3f:a5:ee:4a:66:2b:cc:79:7a:c2:
65:83:e6:3b:2c:e3:69:2f:31:fe:78:fd:e7:3f:d8:
da:6f:54:be:11:63:92:2c:51:60:a1:24:fd:c4:7d:
49:0f:0d:11:12:9d:4a:80:32:95:6e:de:65:51:9c:
9c:7c:d7:0f:85:f5:bd:60:37:35:6d:fe:ee:5d:74:
ae:14:6c:71:0d:bf:2a:b0:15:13:2f:f3:22:ba:77:
ef:22:71:60:b8:9b:73:9d:9e:ba:b7:8e:6f:a7:ee:
52:24:a1:d9:3d:74:05:f4:b1:73:e3:f2:8f:49:10:
e0:6c:a2:ca:8a:91:62:c8:c8:ca:98:6b:65:0d:be:
68:ee:fb:d4:39:49:47:0c:ca:60:1a:86:46:a5:72:
6d:8e:bd:89:19:42:48:af:9c:72:39:05:03:7e:2a:
98:dd:d3:7f:0d:21:9a:74:49:6d:a3:98:3f:86:4c:
a3:64:a3:e4:66:90:a9:f0:90:c1:53:79:15:e0:95:
d9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1F:A1:DD:59:63:52:14:AE:C5:9F:A5:FB:A2:2F:24:12:67:E0:33
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wx-h3VljUhSuxZ-l-6IvJBJn4DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.40.185.0/24
194.48.248.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b9:e4:fe:65:d8:4e:a4:04:33:7e:11:68:fb:08:b2:42:2e:
1b:1b:79:91:92:7c:fd:42:ad:e3:bf:84:c8:ea:f5:1c:c4:70:
74:f0:30:70:08:0a:07:eb:bb:f3:26:b8:a8:ea:e8:81:74:b2:
77:e2:39:12:39:86:1a:bc:33:4b:dd:26:de:13:bd:3f:4b:17:
3f:56:7c:b9:ae:d2:62:14:f6:94:fe:44:1e:ac:cd:db:2e:f4:
7a:99:bc:4a:89:c5:d7:83:ed:e8:01:90:30:be:4b:b2:1c:b7:
2a:18:8b:08:41:f0:ae:95:17:55:f0:76:9c:a9:f7:f2:66:ac:
de:7b:64:63:13:f3:28:70:35:fa:bb:7b:65:e9:f4:d3:ae:ad:
ac:9b:82:df:6d:6c:e8:00:ad:ad:23:62:09:5d:a2:07:e0:3c:
f2:be:f1:bf:13:59:a6:1d:20:58:65:f1:d1:f1:f2:20:79:23:
85:40:49:e0:54:ec:15:41:38:6c:b8:cf:74:f9:d6:8c:c2:cb:
8c:bd:db:bb:a4:80:de:26:83:84:ea:7b:4c:07:48:48:1c:eb:
65:f0:e5:c6:20:6f:f2:66:09:34:fa:68:35:d1:89:c6:dd:4c:
b8:62:fb:b7:e1:b1:17:a5:93:f4:93:95:2a:88:ab:6c:92:aa:
c5:a0:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org