Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WFUJqj-fhDdgfRbZliu7DXRXLNE.roa
File: WFUJqj-fhDdgfRbZliu7DXRXLNE.roa (raw, json)
Hash identifier: FKOhJH1JadgVsxgFozv8LJ1q+B3F03TZNmF/riophpc=
Subject key identifier: 58:55:09:AA:3F:9F:84:37:60:7D:16:D9:96:2B:BB:0D:74:57:2C:D1
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 04740F62
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WFUJqj-fhDdgfRbZliu7DXRXLNE.roa
Signing time: Wed 02 Mar 2022 10:06:10 +0000
ROA not before: Wed 02 Mar 2022 10:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202854
IP address blocks: 194.181.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74714978 (0x4740f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 2 10:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=585509aa3f9f8437607d16d9962bbb0d74572cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:f0:cf:9f:fa:bf:f4:9a:21:d1:cd:51:90:
a4:db:5b:82:78:88:6b:ce:00:03:9c:0c:27:35:50:
15:ce:d7:37:c6:d2:72:29:0f:07:47:93:ec:f9:24:
c6:24:03:47:57:4a:76:ff:7b:d2:24:8c:be:e0:86:
76:8c:36:ef:7e:72:b4:cd:09:91:bb:67:e2:f4:a3:
3c:ec:fa:94:9c:ea:79:b9:2b:e3:8c:d4:80:9a:fe:
b0:a6:6f:b4:50:a5:c3:92:b2:d7:e4:20:7d:a1:be:
c0:33:56:16:79:bf:49:cb:c0:35:0e:14:ff:f6:c0:
cd:c4:77:1c:15:87:7e:ae:be:fa:0d:44:c2:46:e3:
31:f6:5c:99:22:e0:b8:8f:e1:18:37:58:c7:04:e5:
59:3d:66:bc:6f:a0:51:83:2f:21:df:fd:76:a5:a5:
18:f5:64:ed:56:e7:09:57:b1:f3:e6:9b:1a:62:0d:
d5:93:fa:7b:3d:42:4a:4e:60:67:57:d1:60:b2:98:
fd:fc:02:01:d8:e7:0e:93:3b:85:a9:07:ce:32:b2:
85:50:b2:b3:bd:a0:a8:d1:e0:ff:07:6e:9c:aa:bd:
c6:06:37:2c:1e:53:b7:65:40:c2:6b:e5:7d:0b:aa:
84:d2:85:61:49:44:76:79:87:3f:eb:aa:f9:1d:e4:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:09:AA:3F:9F:84:37:60:7D:16:D9:96:2B:BB:0D:74:57:2C:D1
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WFUJqj-fhDdgfRbZliu7DXRXLNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.67.0/24
Signature Algorithm: sha256WithRSAEncryption
01:0a:1b:db:6a:26:db:23:73:6e:03:ec:ab:7b:a6:0e:86:9d:
7d:0a:be:bc:be:60:4d:0e:e0:12:9c:df:64:06:61:78:25:e9:
58:9b:ff:c6:ac:ad:eb:85:44:38:43:1a:a3:48:fa:ef:11:d3:
29:9d:e2:fd:83:07:a4:cd:2d:4c:15:c3:cf:83:04:7c:34:24:
84:9a:a4:5d:07:38:ce:d2:9b:09:7b:b7:f4:b5:ac:8c:e5:d6:
43:a4:61:9a:87:91:00:f9:f0:67:70:ae:93:a9:be:94:0c:65:
8c:dd:f4:eb:13:15:ba:cc:c4:61:c1:82:af:81:d5:ef:25:c3:
83:d5:cb:60:1c:32:42:29:75:e1:b5:82:04:66:cf:be:f2:da:
0f:ee:40:6b:44:8c:e0:e5:18:15:12:46:bf:2d:ad:e3:e4:35:
79:ed:66:e6:73:e9:0e:9a:7b:44:6e:ae:91:ac:53:c0:16:f1:
ce:e5:dc:ff:88:e9:b7:ad:fa:a8:1b:ac:5f:83:68:ff:5c:33:
36:e9:48:4d:93:ec:6e:2e:ff:6e:33:0c:b5:7a:6b:55:fc:9a:
c1:f7:e4:95:0d:e7:5e:ec:17:9c:f8:be:c5:82:3d:a7:8d:d9:
15:de:e4:4a:8a:aa:d8:28:9e:fb:50:ac:d8:cf:c0:7c:d2:c7:
96:15:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org