Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/wZBWv8iw9sgiYgAiDTBZTCwKjFs.roa
File: wZBWv8iw9sgiYgAiDTBZTCwKjFs.roa (raw, json)
Hash identifier: 2yf7Y0QWNXEcxEP1GidoriRgKxLJESulte2J78CKFIE=
Subject key identifier: C1:90:56:BF:C8:B0:F6:C8:22:62:00:22:0D:30:59:4C:2C:0A:8C:5B
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 331EE28C
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/wZBWv8iw9sgiYgAiDTBZTCwKjFs.roa
Signing time: Sat 01 Jan 2022 10:59:05 +0000
ROA not before: Sat 01 Jan 2022 10:59:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20523
IP address blocks: 217.150.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 857662092 (0x331ee28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 10:59:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c19056bfc8b0f6c8226200220d30594c2c0a8c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:6e:57:6e:05:c0:40:ad:af:d2:8c:ef:62:
17:92:d8:0c:3a:6c:a0:76:59:f5:9b:cc:9c:84:d6:
4a:4e:8e:a9:b4:79:12:65:65:96:20:72:2a:95:a9:
df:4e:20:f0:4a:cd:ae:b4:f9:90:0d:11:44:c5:8d:
12:83:c8:1a:4c:28:13:a9:d7:b5:bd:ad:e5:82:93:
23:5b:e2:65:33:29:b2:93:fb:7c:36:96:67:06:6f:
53:1b:e2:43:64:a2:2a:27:18:f7:7f:e1:e4:49:85:
cc:3a:c3:0c:1a:61:a7:78:0d:e3:6b:59:e4:13:0d:
77:08:e3:c4:61:c9:78:2f:81:0d:b6:ad:d4:95:f9:
57:a7:d6:91:9a:a4:f0:9b:3d:91:cd:c6:8b:b4:c9:
be:1a:62:ad:cc:a5:5e:57:48:76:d0:f4:4b:c3:c4:
bf:57:c1:57:52:e7:f3:42:34:81:b0:79:c2:c8:08:
d1:b2:e2:5e:78:f4:5e:ed:03:10:39:bb:5c:6e:d8:
e2:9d:fb:8b:99:51:dc:15:76:c6:d3:8c:a5:a8:5b:
fa:94:a5:15:d9:ca:1d:ed:48:6b:e3:0a:a4:26:e7:
dd:51:8f:cf:d6:f6:21:07:d6:9d:a6:a9:01:28:dd:
a5:e5:dd:bb:6d:86:94:6e:8a:e1:a9:9c:19:1f:59:
67:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:90:56:BF:C8:B0:F6:C8:22:62:00:22:0D:30:59:4C:2C:0A:8C:5B
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/wZBWv8iw9sgiYgAiDTBZTCwKjFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.128.0/20
Signature Algorithm: sha256WithRSAEncryption
62:68:81:c3:45:b4:0d:9d:19:36:82:74:6a:57:53:db:de:71:
66:55:ad:5b:08:78:b4:1a:a4:3c:5a:39:f7:f4:56:e1:20:f5:
f7:fd:68:e0:88:a1:0a:66:21:3c:a2:f0:47:cd:a2:68:21:93:
e5:aa:99:66:a5:a9:fa:9c:cf:46:cb:3e:1d:cc:9e:c1:4d:36:
5a:e4:15:44:22:48:ed:e0:2f:dc:ce:6d:82:6f:d9:6d:70:97:
65:36:6d:52:9c:f3:96:34:35:03:42:25:da:70:50:2f:a9:d5:
23:ad:0f:05:9e:50:ab:7e:89:fc:58:71:8d:13:c4:be:18:a7:
d8:1f:64:5f:ef:28:8f:e0:97:8f:29:e5:56:70:c5:39:28:00:
a5:bf:7c:81:6a:e5:bc:db:d4:f3:4f:e2:38:a8:aa:01:1d:7a:
bd:42:77:e4:b4:94:41:2f:25:6c:b9:04:d4:58:df:40:8c:11:
90:2c:e7:7f:1b:2d:97:38:3d:fb:ba:98:02:bd:06:cf:d8:07:
56:d5:fa:34:aa:97:e5:c8:84:b3:58:03:26:b7:e6:51:8c:28:
21:a1:9c:af:3a:11:7c:7e:05:c4:61:3c:1d:08:73:e8:62:11:
6a:a0:e3:9f:87:80:2f:c7:d1:bc:ac:bb:20:93:a9:44:5f:f9:
f9:cb:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:02 2024 by rpki-client on console-fra.rpki-client.org