Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/wphveP-I7LMelYP9n51r6uj1GoU.roa
File: wphveP-I7LMelYP9n51r6uj1GoU.roa (raw, json)
Hash identifier: 0vKcXgN0bx0FTd1GQyuVcGjLgtKz7fqQgi31z8WkoKs=
Subject key identifier: C2:98:6F:78:FF:88:EC:B3:1E:95:83:FD:9F:9D:6B:EA:E8:F5:1A:85
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 01838928FEC0AD72065A57122DD1F6AAF585
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/wphveP-I7LMelYP9n51r6uj1GoU.roa
Signing time: Thu 29 Sep 2022 12:11:48 +0000
ROA not before: Thu 29 Sep 2022 12:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 31.186.168.0/23 maxlen: 23
2a02:40c0::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:28:fe:c0:ad:72:06:5a:57:12:2d:d1:f6:aa:f5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Sep 29 12:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2986f78ff88ecb31e9583fd9f9d6beae8f51a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:be:e6:87:6a:53:54:16:a4:cf:48:f2:ac:
57:9e:83:ea:cd:2d:0f:a8:f4:f2:10:58:80:4d:6d:
2c:af:c4:e4:ad:3a:83:28:c2:b6:80:76:46:e3:4e:
ba:98:f7:b6:6a:34:b0:ce:f9:3b:71:d9:89:be:9f:
bb:0c:0a:e6:8c:4b:42:47:42:02:64:e3:9e:2f:af:
fb:fe:58:e7:a6:b0:78:69:4a:ed:ce:7b:49:01:a0:
f7:83:fa:03:28:4f:62:1c:21:e1:65:b3:01:e0:74:
ea:0f:61:4c:fa:82:de:a5:cf:fd:dc:dd:09:be:57:
91:b5:09:19:a8:de:6f:c5:92:b7:08:a5:73:6b:22:
70:36:6c:dd:f5:2b:12:75:a3:4e:73:f6:ab:fa:ae:
bb:6d:12:e3:ad:28:e0:36:cd:37:86:c7:a2:7b:0d:
99:5c:34:68:28:8b:7c:56:41:ee:d8:22:8e:4b:cb:
b5:b4:48:96:51:72:f9:44:65:24:7e:0d:12:4e:84:
6a:56:44:a3:89:e7:06:5c:fc:18:e2:b5:93:d6:fe:
5a:de:08:61:91:c7:9d:70:3e:92:31:b5:e6:84:f4:
b5:51:18:dc:df:2d:da:d8:4f:fb:04:ba:36:c4:c4:
7a:3f:25:8c:80:4e:74:bc:5a:39:88:e0:8b:a8:93:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:98:6F:78:FF:88:EC:B3:1E:95:83:FD:9F:9D:6B:EA:E8:F5:1A:85
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/wphveP-I7LMelYP9n51r6uj1GoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.168.0/23
IPv6:
2a02:40c0::/36
Signature Algorithm: sha256WithRSAEncryption
1a:07:58:bf:4c:c8:4c:c0:00:cf:14:57:23:be:5c:e7:83:59:
36:be:ad:e9:5a:92:c4:fb:9d:ec:2c:57:5c:cb:7d:c4:99:fa:
f6:ea:e2:98:cd:20:77:42:0b:af:1f:f6:6c:02:ed:db:f8:b7:
e0:10:4c:c8:bf:15:13:09:3b:58:49:f3:2e:88:1d:81:82:2e:
ce:10:62:9c:b3:50:e1:50:7b:3d:e6:10:f0:f1:25:bf:be:94:
34:9e:e4:d6:d4:10:62:5f:4d:1d:50:4d:5e:d9:30:ac:ed:e5:
d1:b6:cd:b5:98:af:34:36:22:9f:62:b2:58:3d:dd:5a:8b:96:
b0:5c:cc:31:5f:8c:0f:e7:2c:14:4b:e3:75:46:2c:08:0a:07:
1b:c2:59:c2:4e:d9:27:26:ab:80:12:7c:97:63:e5:20:48:5f:
98:f1:fd:7d:8f:cd:85:96:a3:e7:25:1c:cd:97:73:47:26:b1:
91:9b:9a:5c:0c:bd:e6:47:c2:60:8a:fd:8b:59:92:70:a8:3d:
30:03:48:b1:b5:42:de:4d:0f:6c:09:82:91:5c:97:6e:a6:4e:
26:06:62:a7:d0:37:2e:9d:2f:fd:f8:90:b1:dd:d5:93:0a:83:
02:74:90:b7:1f:a0:33:d9:4e:5d:bd:5b:df:c7:0d:b1:e5:55:
2e:d0:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:15 2024 by rpki-client on console-fra.rpki-client.org