Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wl0mkP1ADfCtPJAZ-7dQkYt-WZQ.roa
File: wl0mkP1ADfCtPJAZ-7dQkYt-WZQ.roa (raw, json)
Hash identifier: zkWRgKFqXJu9Prq/82ZnbvsWhUs4KCcb9DLLODLEegs=
Subject key identifier: C2:5D:26:90:FD:40:0D:F0:AD:3C:90:19:FB:B7:50:91:8B:7E:59:94
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 08C983BD
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wl0mkP1ADfCtPJAZ-7dQkYt-WZQ.roa
Signing time: Sat 01 Jan 2022 14:02:04 +0000
ROA not before: Sat 01 Jan 2022 14:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212983
IP address blocks: 2a0e:8f02:f005::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147424189 (0x8c983bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 14:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c25d2690fd400df0ad3c9019fbb750918b7e5994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e6:60:39:ab:cf:97:19:64:36:fa:05:ed:5d:
5d:79:85:08:cd:3d:4d:56:ef:51:bd:cf:19:c2:ba:
37:23:85:4d:61:e8:64:2e:a9:1a:df:ab:63:7e:94:
6e:e8:12:1e:9d:a4:07:1d:fa:52:af:b4:e6:e0:c7:
a3:f2:18:54:12:c5:25:b1:f1:1d:45:71:c5:52:55:
86:f1:92:4a:f2:1d:38:2b:7f:c7:3d:a2:41:42:bb:
32:0d:01:a8:3d:db:f2:91:29:f6:40:c9:45:0a:a4:
a8:c3:e3:39:17:8b:b6:a5:83:24:d1:02:3e:fd:47:
cb:22:37:24:ae:9b:2e:80:11:fd:c6:91:07:9a:2a:
bb:4d:d8:78:70:9a:ec:e8:b0:47:54:52:cf:29:5b:
af:23:01:b0:46:6f:c8:89:39:1e:74:87:66:45:dc:
73:4b:2a:7a:67:43:0f:77:e3:5e:e6:ac:18:70:76:
50:66:44:33:65:3f:0e:b4:ed:13:0f:41:ea:0b:55:
46:72:5f:79:13:2c:5d:6e:da:51:60:76:af:b3:f8:
d4:b0:25:b1:49:fe:04:df:af:b0:fa:c6:d9:69:a4:
e8:b8:3c:7c:8e:2a:e3:a3:58:ed:a4:27:2f:b2:cb:
78:b9:d5:df:c1:2a:01:1b:3f:aa:63:81:75:ab:ad:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5D:26:90:FD:40:0D:F0:AD:3C:90:19:FB:B7:50:91:8B:7E:59:94
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wl0mkP1ADfCtPJAZ-7dQkYt-WZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f005::/48
Signature Algorithm: sha256WithRSAEncryption
a8:05:a3:1c:65:0f:33:33:5c:e8:5e:c5:37:c8:e7:fd:13:45:
b2:71:5e:38:d0:2d:d2:a9:e8:44:38:8a:56:f4:50:15:bb:fd:
ab:84:5b:ad:b2:77:43:5a:d5:72:ec:72:54:c1:2a:04:8e:2b:
74:5a:2c:50:2c:07:99:46:d0:a4:e8:34:5e:05:78:9b:a1:da:
b5:f3:46:d8:63:8d:01:34:42:a8:65:ed:18:a4:05:b1:45:5b:
96:9c:01:d5:02:0f:5b:e6:7c:0b:6d:e6:08:9a:4c:e4:47:72:
44:fa:7f:70:71:da:da:de:ec:ca:fd:7f:4e:95:ae:cd:9e:1d:
4d:69:e7:90:4d:93:2b:ae:03:14:bf:56:9e:34:c2:15:66:a3:
73:72:28:53:3e:7d:26:7e:5f:cc:98:af:da:86:cd:64:ac:7e:
ea:22:77:94:21:32:32:33:b7:a4:08:9f:64:df:98:86:3b:dd:
83:fc:8a:f2:aa:9c:b1:50:01:1f:bc:ad:16:8a:e3:ee:b3:aa:
8a:ed:e4:79:ed:71:75:40:8d:9b:f4:16:6f:26:73:df:0d:fe:
ae:b1:72:df:e6:91:ff:52:9b:e1:43:56:3b:92:fc:ff:a8:f2:
d4:7c:80:3d:64:db:66:b7:1f:bc:3e:ad:a6:a7:79:c6:ed:0b:
0a:17:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:36 2024 by rpki-client on console-ams.rpki-client.org