Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/nw8uUERUFJpwATUYgaNXiHLlHus.roa
File: nw8uUERUFJpwATUYgaNXiHLlHus.roa (raw, json)
Hash identifier: V6TUQvkbEJGohfJSnk043+YL5CQO19h9+BP3Ne+uN7Y=
Subject key identifier: 9F:0F:2E:50:44:54:14:9A:70:01:35:18:81:A3:57:88:72:E5:1E:EB
Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial: 1208BE3C
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/nw8uUERUFJpwATUYgaNXiHLlHus.roa
Signing time: Sat 01 Jan 2022 04:04:28 +0000
ROA not before: Sat 01 Jan 2022 04:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48281
IP address blocks: 185.128.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302562876 (0x1208be3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Validity
Not Before: Jan 1 04:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f0f2e504454149a7001351881a3578872e51eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:21:19:ae:ed:7c:e0:28:2e:ce:32:6f:fe:
1c:1d:6a:a6:b7:0a:2c:14:e6:24:b8:8c:67:f2:09:
05:8d:ff:b4:cb:d3:4c:8f:8f:61:f7:08:5a:bb:ca:
77:30:cb:a1:6f:49:55:d7:eb:1b:33:92:cc:88:b5:
f0:ca:21:ba:59:42:2d:b6:44:59:5f:b6:1c:b2:e0:
84:ec:be:2b:7d:ea:ec:ab:32:8e:a0:06:dc:c4:13:
ad:d0:f2:3f:55:94:73:6c:f8:88:89:d2:03:99:3b:
ef:c6:7c:44:1b:f8:a2:41:58:66:26:96:72:69:32:
4c:06:24:41:b8:bd:68:ff:59:e1:97:b6:47:70:dc:
13:35:10:a7:cc:e1:50:d1:44:63:89:28:76:bf:92:
b1:0b:db:df:80:b6:fe:4f:cc:11:31:66:07:b7:db:
92:4d:f8:46:7d:da:b6:07:ec:11:cf:ad:6b:59:00:
6c:c5:30:0b:6c:cd:06:0f:1b:b1:04:c5:2a:17:69:
ba:9f:4c:78:d4:ff:d9:27:f3:93:38:a5:f1:7c:c2:
5c:26:85:b6:94:65:19:e1:96:84:b4:3a:2f:8b:d6:
d0:1d:3d:bd:fe:71:47:2d:6d:67:76:8b:39:bc:34:
de:ce:48:bb:92:79:dc:24:77:5b:55:cf:f5:ef:4f:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:2E:50:44:54:14:9A:70:01:35:18:81:A3:57:88:72:E5:1E:EB
X509v3 Authority Key Identifier:
keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/nw8uUERUFJpwATUYgaNXiHLlHus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.154.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:dd:eb:08:5d:7f:a7:08:37:52:5d:e0:95:f8:eb:0b:6b:c2:
d3:c9:14:bf:11:f8:f5:7b:8e:57:7c:6a:d3:f7:4b:9f:b9:73:
04:73:6d:28:bb:0d:82:88:a1:84:0b:29:80:5d:0a:3e:bd:b2:
e8:1c:f6:09:69:4e:4a:bb:ff:b5:5b:eb:14:d4:9a:be:33:57:
3a:4d:57:24:55:22:44:cc:57:e7:1c:4f:f4:b3:3d:17:66:15:
36:6c:47:95:eb:fe:f2:a4:2c:e5:78:32:c9:3b:a0:75:57:5f:
7a:73:10:67:c2:8d:56:8c:2c:51:31:a7:2c:41:66:89:c4:ee:
b5:63:65:65:1b:b5:32:11:f3:28:00:3f:6a:3f:61:63:a4:00:
b0:54:72:66:4d:77:a8:64:c5:89:2f:0e:de:db:a7:81:61:20:
bf:f2:6b:af:45:5c:f1:29:0b:f6:13:e0:6d:0c:f6:82:6e:a8:
7c:d7:75:c6:07:48:cf:65:10:4c:da:23:80:88:8c:c8:23:bd:
db:93:d2:91:55:5e:d2:dd:78:f1:63:8c:0b:0f:a7:ec:1d:5b:
ee:2a:c4:db:70:b4:b7:21:63:59:0d:92:40:da:69:43:d6:c4:
bf:ea:a0:5d:cc:dc:9c:c7:e6:de:1d:c0:9b:d8:5e:9d:58:6a:
dc:98:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:52 2024 by rpki-client on console-fra.rpki-client.org