Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/wSX0lHbmWAiSkYTY6U_wnTFUppQ.roa
File: wSX0lHbmWAiSkYTY6U_wnTFUppQ.roa (raw, json)
Hash identifier: 714k2fExpumsxShBlq9/Cii73fRg934bXU4h6x1cVbI=
Subject key identifier: C1:25:F4:94:76:E6:58:08:92:91:84:D8:E9:4F:F0:9D:31:54:A6:94
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 0183169800BB005B587B6844C32A31097586
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/wSX0lHbmWAiSkYTY6U_wnTFUppQ.roa
Signing time: Wed 07 Sep 2022 06:16:43 +0000
ROA not before: Wed 07 Sep 2022 06:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15461
IP address blocks: 213.174.29.0/24 maxlen: 32
194.44.38.0/23 maxlen: 32
194.44.179.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:98:00:bb:00:5b:58:7b:68:44:c3:2a:31:09:75:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Sep 7 06:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c125f49476e65808929184d8e94ff09d3154a694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:aa:5f:db:3c:00:5e:18:f0:e3:33:0f:4e:
59:73:b7:4c:ca:b7:1e:1f:a0:78:93:02:32:93:df:
b4:27:b8:c0:db:f0:c6:90:f1:47:b1:ed:cc:ac:a6:
5a:7d:d8:38:eb:a3:91:43:76:fb:d9:d4:aa:a2:cc:
c0:9d:91:2f:75:15:db:3a:21:64:11:0b:f3:97:24:
e5:1a:ab:c8:aa:1d:16:a4:ea:e9:4e:42:ef:4d:26:
db:78:a1:ae:5b:7d:be:00:96:e4:03:50:64:9c:9b:
e7:98:d6:3e:b4:b0:83:1d:1a:f8:18:63:6d:4e:df:
f0:f7:f5:c4:66:dd:9c:26:74:d4:c2:fc:3a:4c:44:
d1:ac:40:63:8e:8d:92:67:35:be:5f:7d:cb:61:01:
6b:b7:d7:41:eb:24:9b:40:d2:e8:df:f0:01:59:7e:
61:19:4f:59:10:71:4a:2b:ad:4d:a7:58:ad:b1:08:
b9:a3:08:1d:87:38:0b:95:10:f2:cf:09:8a:75:02:
9b:6c:b5:c5:6f:49:f6:c9:e7:ab:cd:27:d8:3d:30:
10:f9:cd:72:9c:ce:f8:ba:aa:65:13:b6:bc:3f:14:
bf:fb:b7:bf:ba:54:00:d6:04:88:40:a2:06:2c:ad:
0b:b1:cf:2b:d3:eb:45:b6:1d:6e:2a:23:89:c2:30:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:F4:94:76:E6:58:08:92:91:84:D8:E9:4F:F0:9D:31:54:A6:94
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/wSX0lHbmWAiSkYTY6U_wnTFUppQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.38.0/23
194.44.179.0/24
213.174.29.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0b:3b:86:be:62:c0:87:26:25:69:7f:fc:73:d4:d5:1a:2b:
ec:fe:12:1e:24:ad:39:af:0b:e7:8e:e3:35:12:10:27:65:fd:
c4:b5:f6:ff:79:cb:d9:d6:38:0d:f3:94:ae:e9:e8:48:9d:e6:
0b:42:15:e0:e9:12:f3:23:ed:7c:b3:31:28:c6:52:33:7d:9f:
08:83:c6:f3:f7:b7:d0:b8:3e:21:97:6e:f8:d4:65:ca:80:0d:
76:00:9a:d2:ae:5e:66:cd:39:95:e4:33:3f:ed:24:e1:4c:68:
dc:96:ba:30:27:66:ce:4c:95:c2:92:7e:47:f4:c0:fd:d9:59:
b6:c7:9e:ca:b0:3a:79:3e:ff:dc:1c:17:25:8c:98:98:a6:40:
a8:e3:4c:87:d4:e6:e0:47:6d:61:94:2a:64:7f:7d:ca:42:91:
99:d8:f5:74:5a:36:81:bc:56:3d:b2:fd:bb:58:a8:3d:cd:36:
64:7e:f4:8a:9a:20:1d:89:31:0f:d6:1b:0d:94:23:62:e9:44:
80:9f:eb:02:e7:a9:00:19:d9:0d:9d:dc:cd:47:5a:64:25:be:
41:2f:65:6b:11:53:06:8d:22:e8:bc:d7:f5:b4:a7:1b:24:bb:
c6:4d:18:4c:bd:01:96:32:f5:be:00:a6:fa:bb:fc:b0:3f:bf:
b6:af:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:55 2024 by rpki-client on console-ams.rpki-client.org