Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/wSDPakX-2bPG5RX8UgnpNr1n-hk.roa
File: wSDPakX-2bPG5RX8UgnpNr1n-hk.roa (raw, json)
Hash identifier: WYrq8C9jz2aLlIAm2/B5KJKwW8zQ8xfPSoPOuKj5+vU=
Subject key identifier: C1:20:CF:6A:45:FE:D9:B3:C6:E5:15:FC:52:09:E9:36:BD:67:FA:19
Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Certificate serial: 01E825
Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/wSDPakX-2bPG5RX8UgnpNr1n-hk.roa
Signing time: Fri 04 Mar 2022 18:18:18 +0000
ROA not before: Fri 04 Mar 2022 18:18:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205564
IP address blocks: 185.213.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124965 (0x1e825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc
Validity
Not Before: Mar 4 18:18:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c120cf6a45fed9b3c6e515fc5209e936bd67fa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:19:82:3e:4b:b0:f9:b3:6e:64:92:28:f0:
cd:74:b0:9e:ac:c6:e0:d6:6f:aa:3c:99:be:41:28:
92:7c:4a:59:f6:2f:71:18:d1:12:ca:97:dc:8d:1f:
5f:33:e3:8f:b0:c4:b6:7c:42:76:fe:f6:ee:37:23:
ab:4d:c4:98:4c:ad:ad:5d:0d:f8:f1:5c:9b:29:a5:
6c:c7:ab:0d:35:91:5d:c7:8b:f6:25:fa:5c:d6:b2:
61:f8:73:cb:19:af:c9:5d:eb:84:da:dc:27:e8:4e:
f0:3d:0c:52:f8:9c:ac:b0:33:17:b5:04:d9:3e:f1:
2b:89:98:cb:c4:af:30:e8:38:cb:bc:b5:43:fb:89:
4f:f6:5d:a4:8f:a7:10:04:3c:eb:6a:81:76:43:a5:
ee:2a:0d:1a:80:2a:cf:b8:0f:e1:10:2d:3f:5d:88:
ce:94:13:68:09:05:3e:9d:8a:7e:7e:4c:9f:ff:06:
6b:e8:c2:c4:72:f6:65:01:cf:c6:e8:fa:34:92:9d:
7b:e1:fe:84:6a:52:c9:87:c7:4e:c9:c8:4f:94:f5:
10:bf:ab:1f:07:36:af:88:4f:ef:01:6b:d5:57:6b:
d7:94:ed:55:18:6a:04:9a:35:f8:12:a0:cb:3d:c2:
88:63:fd:98:02:ec:89:c0:46:91:80:2f:b7:4f:08:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:CF:6A:45:FE:D9:B3:C6:E5:15:FC:52:09:E9:36:BD:67:FA:19
X509v3 Authority Key Identifier:
keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/wSDPakX-2bPG5RX8UgnpNr1n-hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.252.0/22
Signature Algorithm: sha256WithRSAEncryption
25:55:a4:aa:3a:ef:31:8f:80:4d:a3:d7:d2:f6:2a:f6:f9:b9:
bb:83:43:a8:e5:4d:65:76:c2:96:8f:4c:86:f5:25:cc:b7:08:
ad:4e:15:b6:36:47:21:85:3b:2e:c3:99:3e:2b:b5:07:a9:a6:
73:ff:04:10:35:13:ad:a4:84:22:5b:b3:6c:5d:30:69:3f:2c:
b4:ac:83:16:5d:66:8c:be:06:36:7b:95:66:54:d9:6f:88:59:
43:ae:4b:6e:5b:c2:8a:22:c8:94:1b:ff:4c:51:13:a6:f7:2a:
4a:b3:83:b1:82:53:70:91:05:bc:e2:59:97:00:ca:9d:b0:15:
9a:36:d5:c3:00:21:5f:87:a4:5d:8c:48:35:f8:94:31:31:29:
9c:6c:a7:1e:9c:af:4d:e7:c3:fd:07:49:59:d2:29:61:89:92:
d6:ec:f0:ea:c6:10:90:0e:71:de:b5:9b:6e:97:9f:f9:5f:54:
79:9d:7d:53:62:b6:7e:64:8a:70:b7:e9:c5:13:dc:7c:3d:49:
1d:df:9b:9c:76:81:c0:df:fc:31:f5:68:2c:f7:9e:9a:45:c5:
3a:c2:26:f9:6f:03:1d:da:f8:5d:b9:54:f2:83:b8:09:e7:c1:
22:69:07:14:31:63:18:06:61:22:05:c5:21:f8:32:14:99:66:
c4:c3:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:45 2024 by rpki-client on console-fra.rpki-client.org