Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/wqmNhO0AoZtZCuFAhEyeWT951r8.roa
File: wqmNhO0AoZtZCuFAhEyeWT951r8.roa (raw, json)
Hash identifier: nRraN+NXeZ+NHoP7/14hI0MtUqr2KlygYI+8q5YrHnA=
Subject key identifier: C2:A9:8D:84:ED:00:A1:9B:59:0A:E1:40:84:4C:9E:59:3F:79:D6:BF
Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Certificate serial: 01834318191FE59D87B69A46C4F0170B314E
Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/wqmNhO0AoZtZCuFAhEyeWT951r8.roa
Signing time: Thu 15 Sep 2022 21:39:56 +0000
ROA not before: Thu 15 Sep 2022 21:39:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.235.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:43:18:19:1f:e5:9d:87:b6:9a:46:c4:f0:17:0b:31:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Validity
Not Before: Sep 15 21:39:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2a98d84ed00a19b590ae140844c9e593f79d6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:68:db:2a:40:e5:bc:1d:c6:b7:b1:ab:8b:
30:f6:7c:c9:52:91:3c:68:53:20:74:a4:1d:e5:21:
7e:14:3b:35:89:b3:e8:cf:35:d2:8d:ad:42:69:a0:
3e:c7:b3:bd:9e:10:6f:c3:a3:67:94:c1:97:49:14:
f8:60:a7:e6:61:39:c4:07:d4:28:8b:0a:40:7c:4a:
3e:b1:54:c9:09:9e:0e:a2:28:f0:c9:55:87:0d:46:
fd:55:2a:5c:c1:fc:ad:31:80:13:47:36:d6:1c:50:
16:66:80:34:b9:b8:88:a5:25:48:bf:52:95:8a:c6:
ae:f0:04:2b:e5:6c:27:27:6c:82:4a:7d:a7:41:f1:
c1:6f:ad:38:18:ad:d6:f3:f4:98:d1:f1:48:1c:14:
83:d7:d1:bd:0d:0e:a6:5b:5c:bb:56:af:58:ac:2e:
34:b4:4a:1a:30:8e:30:f9:32:ed:f6:b0:c0:2b:5f:
54:c4:c3:54:e9:38:a2:e7:39:f0:e5:d1:46:67:6c:
f2:f4:1a:69:c9:1c:ff:23:dc:96:52:7c:31:bd:e4:
3c:73:f6:1c:2a:d9:fb:dc:59:9e:96:eb:d8:4b:33:
9c:7f:cc:bd:9e:4f:b8:61:30:2e:a6:e3:3e:b6:6b:
00:15:19:c0:4b:73:c8:40:74:0a:ff:65:cb:ec:aa:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A9:8D:84:ED:00:A1:9B:59:0A:E1:40:84:4C:9E:59:3F:79:D6:BF
X509v3 Authority Key Identifier:
keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/wqmNhO0AoZtZCuFAhEyeWT951r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:5b:4c:da:06:b2:d1:fa:91:6a:b1:70:78:a2:3e:3d:ca:08:
41:e3:a2:d4:40:7a:1c:f7:e3:8c:c0:46:56:11:92:f6:04:e0:
07:84:89:60:10:e2:07:fd:34:d9:61:88:02:a4:8d:29:4d:40:
d4:ec:ed:1a:48:45:53:81:4e:77:c5:be:f1:f8:1b:95:6d:d0:
65:b8:5d:2f:14:56:92:a5:f4:e3:f7:37:50:00:d4:ee:d0:87:
74:da:41:43:89:d5:5f:06:b3:11:ac:8e:ed:e1:fe:92:b3:53:
09:d5:66:45:91:e0:6f:f0:2d:6d:94:5a:f6:a9:0a:62:f0:eb:
17:b1:d7:50:f2:ed:1a:a1:00:ae:c2:95:9f:75:76:2c:64:32:
4d:06:4f:c8:fc:b2:57:f2:00:44:b2:d2:a9:b2:41:f3:9e:d5:
63:e0:53:33:70:6a:6c:e4:e9:66:e2:4a:c3:4c:26:d9:f5:39:
4c:ef:c4:e1:fa:5b:a8:1a:f4:b0:82:b6:b1:03:74:f0:7c:af:
80:aa:80:a6:77:01:cf:e3:d5:93:b7:08:33:f1:3b:83:53:98:
de:19:78:cd:d6:9b:69:e7:4d:f6:6b:f7:08:09:38:ac:7b:29:
00:4c:b9:98:b8:5d:67:82:82:6a:cc:6d:0a:01:39:8c:dd:36:
1a:f1:b9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-fra.rpki-client.org