Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/wyrK-_n66ChCPXxE-Adr-iLuJPg.roa
File: wyrK-_n66ChCPXxE-Adr-iLuJPg.roa (raw, json)
Hash identifier: 4JK3geJeY4abjYMbRuByGZDdI76UkTUE5ldTsTAzkqU=
Subject key identifier: C3:2A:CA:FB:F9:FA:E8:28:42:3D:7C:44:F8:07:6B:FA:22:EE:24:F8
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 0184DD042A8162868451D67BE26D0D913574
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/wyrK-_n66ChCPXxE-Adr-iLuJPg.roa
Signing time: Sun 04 Dec 2022 12:02:28 +0000
ROA not before: Sun 04 Dec 2022 12:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60558
IP address blocks: 185.219.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:04:2a:81:62:86:84:51:d6:7b:e2:6d:0d:91:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Dec 4 12:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c32acafbf9fae828423d7c44f8076bfa22ee24f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9a:a1:a6:0e:2e:97:da:af:23:e5:b9:28:68:
60:19:d1:d2:7d:8a:1c:0b:0b:80:f6:d1:55:b2:15:
01:ea:23:49:5c:c5:b2:24:b1:0d:33:94:01:a1:63:
c1:30:c8:fd:ef:25:d6:cf:76:80:d6:39:72:b9:8c:
dd:b4:4e:59:48:fd:88:a4:59:14:ec:ac:f3:34:f2:
a8:f8:bd:f6:73:d5:50:94:a4:a2:e6:59:f9:eb:79:
af:ed:4f:4a:7a:73:33:85:0c:76:31:35:bf:90:34:
c6:47:d4:ca:56:d3:96:0e:2c:22:8c:d7:e0:81:9e:
f8:3c:cc:54:bb:6b:d9:91:68:3c:83:16:8f:8d:2f:
8c:10:28:07:a1:73:81:12:fc:27:34:aa:7c:d5:44:
11:f2:d2:de:48:75:4a:be:5f:c6:80:d7:8d:d8:dc:
2d:bc:d6:b3:ff:f2:81:2e:06:2f:0d:01:8c:e0:40:
ec:56:24:2a:4c:89:b2:0d:bf:db:e6:ad:1a:13:c8:
4a:28:07:ba:0e:54:78:7d:fb:64:4b:14:10:cc:fe:
70:b3:cc:63:d2:25:c7:1f:de:c4:e3:f1:4f:26:47:
2f:15:9c:59:cf:8f:b1:d0:ad:83:0f:11:58:71:b2:
df:d0:e0:10:65:66:75:fb:b1:c6:bf:38:df:16:d8:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:CA:FB:F9:FA:E8:28:42:3D:7C:44:F8:07:6B:FA:22:EE:24:F8
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/wyrK-_n66ChCPXxE-Adr-iLuJPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:73:b9:30:c0:2c:25:0c:75:34:69:61:4b:cb:9f:30:46:a7:
67:43:4f:ac:38:c5:0e:ab:4a:68:08:f4:f3:c5:7e:e3:19:44:
e0:41:fe:94:d2:4c:b6:88:aa:9e:10:e4:c7:f2:5e:6d:36:df:
3a:43:8a:20:65:e0:94:26:18:1d:59:d4:99:e5:28:4c:49:5c:
fc:fa:d1:cc:8b:78:91:49:73:d5:a3:e8:13:d2:a5:1e:f6:72:
ea:2b:db:11:e3:5d:dc:bb:65:b8:2f:1d:2c:df:1c:bf:f9:da:
31:cc:60:0d:c5:87:bf:45:53:9c:39:17:ef:b8:8d:7a:32:84:
25:26:bd:a5:91:46:97:e7:a1:53:41:7a:b5:74:2d:81:1e:b0:
d0:f7:80:e8:b1:32:27:8d:3e:8e:b5:a5:2f:27:9a:06:f7:b6:
3b:12:c2:0d:dd:de:b5:b0:b2:00:3d:b6:b0:fd:eb:99:a6:68:
a5:37:f0:ba:86:b2:65:8b:1b:60:4e:be:83:70:c4:19:c5:16:
d3:80:c9:01:0d:3b:c1:dc:e2:ae:04:71:f2:0c:35:00:00:a9:
51:55:72:28:2e:b9:c2:61:4a:6e:51:4e:2b:91:7c:45:25:ea:
57:f3:85:f7:ff:77:f9:d5:09:00:87:44:4f:39:c6:48:ab:29:
50:d0:23:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-fra.rpki-client.org