Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/w5mYdR-RpyENWXuQtgueo23dDKc.roa
File: w5mYdR-RpyENWXuQtgueo23dDKc.roa (raw, json)
Hash identifier: i9bdCffwLLYGRdofBSN/3EIW3Uky98yKjg1FrjGlklA=
Subject key identifier: C3:99:98:75:1F:91:A7:21:0D:59:7B:90:B6:0B:9E:A3:6D:DD:0C:A7
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 018543501E10DE2E4BCF7B3CF64EC2370C16
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/w5mYdR-RpyENWXuQtgueo23dDKc.roa
Signing time: Sat 24 Dec 2022 08:46:41 +0000
ROA not before: Sat 24 Dec 2022 08:46:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.103.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:50:1e:10:de:2e:4b:cf:7b:3c:f6:4e:c2:37:0c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Dec 24 08:46:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c39998751f91a7210d597b90b60b9ea36ddd0ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:b4:30:58:88:b1:90:65:67:6e:dd:41:a6:
16:24:0c:eb:d8:a6:9c:76:81:fe:d7:c3:58:77:a5:
51:b9:bb:56:6a:e5:4e:7c:7c:ec:4f:0f:04:36:a8:
61:b9:4a:47:14:0b:87:0f:03:52:da:16:4d:ba:45:
4a:e3:dc:28:52:d5:f4:d4:f1:02:5e:af:9f:73:d8:
46:83:90:68:34:01:b4:70:92:45:97:d0:5c:f2:c5:
6e:4b:d2:36:78:7b:c6:6f:47:ce:1a:b2:90:63:a8:
73:bf:cf:a6:fb:d7:ab:93:1f:72:97:27:4c:69:32:
81:2c:46:6f:77:7b:3b:fa:5b:3f:68:91:eb:07:7f:
41:e0:be:43:98:39:64:e8:43:4e:ca:38:b5:10:12:
e3:55:99:30:8f:5e:a5:91:70:c0:20:67:da:43:bf:
5f:21:df:97:7e:08:5b:d1:c0:ed:e9:d8:26:c4:34:
6c:0a:83:a9:32:b5:dd:32:c5:d1:dd:eb:0b:66:23:
47:2f:99:2c:76:f3:3d:ab:f3:66:b2:a4:52:6d:3f:
08:82:fe:94:4d:aa:7a:87:c9:06:44:15:a3:07:62:
47:9a:5a:aa:82:70:b9:f6:43:3f:db:40:5e:4f:0b:
4f:ed:32:91:49:44:35:a0:b4:7e:19:40:da:4b:52:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:98:75:1F:91:A7:21:0D:59:7B:90:B6:0B:9E:A3:6D:DD:0C:A7
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/w5mYdR-RpyENWXuQtgueo23dDKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.4.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:f7:b4:15:d6:e9:ea:93:6c:9a:88:c4:52:65:b8:db:c3:e0:
1e:b7:a0:70:ff:e8:4a:82:35:29:ab:1d:55:79:74:de:9f:0c:
2a:d2:f0:cc:28:0f:38:31:5a:4b:f7:a2:de:36:3e:24:bd:13:
81:04:70:3a:78:9c:4d:e9:d8:70:63:33:dd:05:5d:ad:14:83:
5a:1e:a5:0f:cd:68:bb:ed:38:99:f6:21:3d:25:38:91:25:de:
4e:a5:07:71:80:f2:3d:77:ee:3f:6e:b8:3d:be:13:4f:6e:98:
a2:11:27:37:03:3c:f2:d8:9b:d8:62:74:53:62:90:2d:5b:73:
4f:d9:88:0e:0d:44:94:e5:46:1f:09:09:7b:48:8a:42:1a:56:
9c:7f:f4:67:a8:61:69:ec:02:0e:85:2c:00:b2:9c:35:13:f1:
fa:8c:b7:6a:21:01:45:69:65:39:a0:4e:5a:0b:d8:8d:d2:45:
85:c1:ad:d9:e0:6e:19:15:0d:84:cd:a9:5d:40:bf:d3:2a:4b:
5f:16:a4:d0:97:fd:76:c1:15:e9:f8:b5:3b:35:c9:3d:a0:bc:
25:12:0f:b7:a0:a9:11:e2:7a:0c:eb:68:c2:9c:c8:06:d2:56:
4b:a7:8d:bc:b4:be:d2:ec:6e:30:b5:c7:f5:18:39:7a:0c:25:
44:0b:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-ams.rpki-client.org