Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/W4ImfzWeVK5vGjVBzsrjj7skqKo.roa
File: W4ImfzWeVK5vGjVBzsrjj7skqKo.roa (raw, json)
Hash identifier: YL/25FGaLX8dmiCz553D0vvXJw4TygF2HCVxVkDMdJU=
Subject key identifier: 5B:82:26:7F:35:9E:54:AE:6F:1A:35:41:CE:CA:E3:8F:BB:24:A8:AA
Certificate issuer: /CN=f74799f7f1848d13b0ff25f455f7f3776ae5e09e
Certificate serial: 0CDF8A
Authority key identifier: F7:47:99:F7:F1:84:8D:13:B0:FF:25:F4:55:F7:F3:77:6A:E5:E0:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90eZ9_GEjROw_yX0Vffzd2rl4J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/W4ImfzWeVK5vGjVBzsrjj7skqKo.roa
Signing time: Sat 01 Jan 2022 01:01:23 +0000
ROA not before: Sat 01 Jan 2022 01:01:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42209
IP address blocks: 185.216.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843658 (0xcdf8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74799f7f1848d13b0ff25f455f7f3776ae5e09e
Validity
Not Before: Jan 1 01:01:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b82267f359e54ae6f1a3541cecae38fbb24a8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4a:bd:f2:32:d6:9d:2a:51:f8:d9:1d:b6:a6:
de:59:07:16:5d:ce:e7:c5:c3:93:93:50:b8:00:6e:
c3:47:9b:1c:d5:23:15:85:f2:8b:8b:d2:64:94:5e:
2c:81:ac:0b:91:39:61:34:d2:4b:a1:b6:35:3d:ad:
8d:26:ec:e2:ea:f3:2a:6c:ea:d5:98:3c:58:a1:56:
8d:91:aa:20:55:42:4c:51:6e:48:d1:46:16:1e:2d:
3a:69:7f:1f:f9:6b:62:74:68:ee:fa:14:3a:fc:2a:
4d:6b:96:48:7a:5f:53:8b:23:9e:ce:65:5a:be:7f:
ec:ce:f9:10:b6:fd:80:44:dd:41:fa:4e:dd:7b:cb:
bd:e0:2a:0a:5c:f4:71:05:f3:bc:5a:21:e1:fc:0f:
18:b4:9e:c9:1f:75:63:de:40:37:cc:86:2c:4a:2a:
0b:fb:b8:c3:f7:6f:37:06:db:33:e4:2d:27:ba:55:
4f:4e:e3:ae:76:37:f5:d6:73:cb:e9:9f:aa:1a:3b:
41:bd:8d:6e:26:58:8d:32:42:51:7d:83:a5:06:cd:
bf:9e:eb:da:c8:43:d8:02:e8:05:78:ea:37:6a:f7:
59:86:d6:a0:97:d7:42:b8:80:c7:18:d5:f4:58:4c:
6b:ab:db:18:c3:4a:3e:a5:f3:4c:df:fc:59:8f:fc:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:26:7F:35:9E:54:AE:6F:1A:35:41:CE:CA:E3:8F:BB:24:A8:AA
X509v3 Authority Key Identifier:
keyid:F7:47:99:F7:F1:84:8D:13:B0:FF:25:F4:55:F7:F3:77:6A:E5:E0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90eZ9_GEjROw_yX0Vffzd2rl4J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/W4ImfzWeVK5vGjVBzsrjj7skqKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/90eZ9_GEjROw_yX0Vffzd2rl4J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.51.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2f:45:b1:bf:33:b6:b8:79:7c:de:ec:0b:8a:bf:f3:b3:89:
f0:44:ad:f5:80:6c:1d:78:22:61:78:99:a4:e9:09:5d:d0:ec:
ae:c2:ac:bc:c7:ed:b1:af:4b:97:8b:df:07:12:4e:7c:60:0f:
23:3b:b1:a5:ac:6b:8b:d1:bd:88:72:af:15:55:7b:0e:75:f1:
84:01:47:fc:ac:fb:1a:52:c4:79:c4:86:04:aa:c6:f7:30:b4:
8d:10:fa:59:78:cc:c8:62:8f:e3:3a:68:5b:63:a7:0b:f7:5f:
1f:56:08:49:5a:33:4a:20:87:cd:0e:e4:9a:14:f1:3f:43:c4:
9e:86:01:bc:ca:5a:d6:9c:d8:b9:13:bd:d6:74:90:7a:40:8a:
5e:2d:55:dc:a3:c8:e4:1a:63:18:da:ff:71:61:e8:22:61:69:
39:3a:94:5a:15:e5:a1:4e:05:9f:59:b7:50:71:3a:27:e2:27:
ee:38:4b:ab:18:3b:4f:80:c6:8c:fb:bd:13:32:13:37:fe:cf:
1e:12:9c:73:31:ea:e1:5b:a9:3a:de:b7:ea:85:ad:06:09:b3:
cc:28:de:09:ae:fc:04:69:fb:77:4a:74:b3:05:65:89:8b:13:
72:54:10:e1:d1:b5:1a:32:1c:2a:02:9e:4b:35:d1:0f:53:79:
6d:79:1b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:56 2023 by rpki-client on console-ams.rpki-client.org