Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/WidMgJsKumjvuxlszvXJnC8W6RM.roa
File: WidMgJsKumjvuxlszvXJnC8W6RM.roa (raw, json)
Hash identifier: jiVHCrD4j1IZ5993f4DKtx9F2yfAr00d/wUtxlGotXk=
Subject key identifier: 5A:27:4C:80:9B:0A:BA:68:EF:BB:19:6C:CE:F5:C9:9C:2F:16:E9:13
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 14CDE35B
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/WidMgJsKumjvuxlszvXJnC8W6RM.roa
Signing time: Sat 01 Jan 2022 05:51:56 +0000
ROA not before: Sat 01 Jan 2022 05:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204130
IP address blocks: 185.47.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349037403 (0x14cde35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 1 05:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a274c809b0aba68efbb196ccef5c99c2f16e913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:a3:7c:b3:e8:e9:2f:32:14:79:ff:20:8e:
4d:bb:70:cd:d6:e6:32:2e:e4:20:41:65:3c:d9:81:
75:5a:d6:a0:0a:fa:e0:be:cc:b6:06:a1:bb:6b:9d:
30:53:c5:cf:21:8a:14:bd:6c:18:25:d3:6e:45:95:
1a:fc:40:6c:e8:3d:9e:49:91:03:db:52:55:c3:1d:
34:1b:00:44:06:10:cd:85:c2:72:15:f4:9c:13:bd:
5f:43:9f:09:17:d8:f2:a5:95:c0:37:25:78:2c:fd:
6c:dc:4f:94:46:70:22:12:49:50:37:b7:25:89:d9:
73:4a:8d:06:45:2e:a1:df:a7:fa:9b:15:1e:46:d4:
23:aa:f0:7d:50:a7:c4:3d:c3:d3:8f:2e:0f:18:46:
0d:2a:a8:89:fc:86:3c:4f:61:f2:2b:1b:e4:bb:54:
9a:0d:20:12:23:d4:d0:41:46:46:dd:35:a8:76:4c:
51:b2:b4:6d:7e:b6:ad:c1:42:2d:a7:11:55:88:a4:
ad:7b:a9:03:f5:72:27:22:28:0c:a3:5e:a9:a0:45:
66:45:5d:e8:78:28:f6:e0:90:30:22:ba:5a:69:4e:
e4:d3:04:9a:e1:c1:92:5a:43:84:b2:14:83:84:35:
a5:72:4c:36:66:92:66:89:bf:87:0a:59:34:6a:8d:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:27:4C:80:9B:0A:BA:68:EF:BB:19:6C:CE:F5:C9:9C:2F:16:E9:13
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/WidMgJsKumjvuxlszvXJnC8W6RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.8.0/24
Signature Algorithm: sha256WithRSAEncryption
13:74:f4:13:37:54:f1:dd:72:f1:3c:5c:20:e3:15:ee:ce:26:
13:af:11:e7:a9:cb:4c:dc:5a:6d:49:db:c1:55:5b:27:a3:9c:
5a:1e:f5:61:08:2e:51:ee:cd:d9:ef:21:45:be:c1:db:b7:b5:
6f:13:79:3c:53:53:96:d5:0c:c5:97:21:48:1a:16:aa:ec:9c:
ee:14:f9:08:85:b6:ce:63:f5:32:82:0d:24:fa:c4:0c:d2:ff:
3d:d7:54:8f:44:e8:9d:e3:98:54:d2:b5:d2:d8:52:21:74:fc:
73:d5:89:5a:fa:42:9d:d8:86:22:44:a8:6f:6c:e0:73:14:49:
c4:7c:36:ac:b2:ab:2a:29:45:76:cb:a1:9e:ab:a5:54:f4:64:
a1:c5:62:ac:80:52:6c:8c:f7:4c:a4:14:ce:60:3a:0d:9b:d0:
ad:3c:78:5d:b5:89:a6:d6:51:46:c9:2b:61:d4:bc:4d:79:37:
c2:86:94:4c:dd:10:c8:03:16:c5:b6:f7:f2:ee:d9:1a:e5:30:
7e:c1:a8:b4:d3:11:61:a5:09:74:90:3e:52:c3:3d:20:74:82:
23:7b:ca:36:38:bf:15:9a:9b:0c:88:ad:4c:28:44:6e:3a:b4:
b5:95:f1:28:d8:48:2d:15:60:5d:4f:8b:31:e5:78:5c:50:a2:
8c:34:a1:ce
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEFM3jWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
OGFkZDliNjcxZjdhMzZlYjIzNjdlMzRmZWU0YmNiMTNiOGY2NmNjMB4XDTIyMDEw
MTA1NTE1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWEyNzRjODA5YjBh
YmE2OGVmYmIxOTZjY2VmNWM5OWMyZjE2ZTkxMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlYo3yz6OkvMhR5/yCOTbtwzdbmMi7kIEFlPNmBdVrWoAr6
4L7Mtgahu2udMFPFzyGKFL1sGCXTbkWVGvxAbOg9nkmRA9tSVcMdNBsARAYQzYXC
chX0nBO9X0OfCRfY8qWVwDcleCz9bNxPlEZwIhJJUDe3JYnZc0qNBkUuod+n+psV
HkbUI6rwfVCnxD3D048uDxhGDSqoifyGPE9h8isb5LtUmg0gEiPU0EFGRt01qHZM
UbK0bX62rcFCLacRVYikrXupA/VyJyIoDKNeqaBFZkVd6Hgo9uCQMCK6WmlO5NME
muHBklpDhLIUg4Q1pXJMNmaSZom/hwpZNGqNu5MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRaJ0yAmwq6aO+7GWzO9cmcLxbpEzAfBgNVHSMEGDAWgBSIrdm2cfejbrI2
fjT+5LyxO49mzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lLM1p0bkgzbzI2eU5uNDBfdVM4c1R1UFpzdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzMvM2VkMDBhLTE1ZWUtNDY2NC1hN2YxLWExYjk2YjliNzBmOC8x
L1dpZE1nSnNLdW1qdnV4bHN6dlhKbkM4VzZSTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMv
M2VkMDBhLTE1ZWUtNDY2NC1hN2YxLWExYjk2YjliNzBmOC8xL2lLM1p0bkgzbzI2
eU5uNDBfdVM4c1R1UFpzdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALkvCDANBgkqhkiG9w0BAQsFAAOC
AQEAE3T0EzdU8d1y8TxcIOMV7s4mE68R56nLTNxabUnbwVVbJ6OcWh71YQguUe7N
2e8hRb7B27e1bxN5PFNTltUMxZchSBoWquyc7hT5CIW2zmP1MoINJPrEDNL/PddU
j0ToneOYVNK10thSIXT8c9WJWvpCndiGIkSob2zgcxRJxHw2rLKrKilFdsuhnqul
VPRkocVirIBSbIz3TKQUzmA6DZvQrTx4XbWJptZRRskrYdS8TXk3woaUTN0QyAMW
xbb38u7ZGuUwfsGotNMRYaUJdJA+UsM9IHSCI3vKNji/FZqbDIitTChEbjq0tZXx
KNhILRVgXU+LMeV4XFCijDShzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:49 2024 by rpki-client on console-fra.rpki-client.org