Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/wrxRPTsOaOAhhADgv4K98jpM72E.roa
File: wrxRPTsOaOAhhADgv4K98jpM72E.roa (raw, json)
Hash identifier: nFI0OtnSEk/6ZB1709I+I6Fg+nJ+QEnqaLF6yctOP/o=
Subject key identifier: C2:BC:51:3D:3B:0E:68:E0:21:84:00:E0:BF:82:BD:F2:3A:4C:EF:61
Certificate issuer: /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial: 07842EEE
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/wrxRPTsOaOAhhADgv4K98jpM72E.roa
Signing time: Sat 01 Jan 2022 10:04:39 +0000
ROA not before: Sat 01 Jan 2022 10:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50585
IP address blocks: 185.53.84.0/22 maxlen: 22
193.105.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126103278 (0x7842eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Validity
Not Before: Jan 1 10:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2bc513d3b0e68e0218400e0bf82bdf23a4cef61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:f8:d8:c9:b5:d1:86:0c:c2:e4:6c:9b:2a:
45:5d:3d:3a:10:34:de:ed:f4:ec:b4:f9:cf:ce:d0:
9e:94:d0:fd:38:a3:16:df:c8:8c:9f:4c:9f:0f:6f:
bb:60:6b:43:65:60:57:8b:dd:45:77:03:00:34:ef:
84:73:98:c8:36:71:7e:a1:06:44:fc:0a:1c:55:ba:
6f:f4:7b:3d:01:4f:46:e6:25:da:01:00:0f:6d:74:
75:a5:bf:7b:e6:5f:f0:24:62:43:d9:3b:c7:c3:75:
4c:5d:ac:30:7a:41:9a:68:98:0f:51:cc:30:16:84:
02:24:6b:7e:e2:98:30:da:95:6f:98:6d:4d:fe:27:
d1:eb:e9:d4:42:83:7c:87:23:8f:ae:ac:25:2b:e3:
c8:18:a8:8b:4a:14:d4:14:a1:cc:7b:d4:ce:e2:39:
2b:dc:62:11:69:c2:a9:4c:b1:cc:29:86:61:30:1d:
8a:cc:9b:dc:c6:bc:d1:a3:b2:86:df:70:c4:22:2a:
b3:a7:e4:28:f6:0d:c9:31:64:52:e2:ed:11:e2:31:
b3:93:b5:7f:79:87:11:8e:3e:46:2c:96:af:b0:61:
63:06:1e:e9:15:cf:da:c3:99:6c:26:7e:38:c5:6a:
85:64:92:44:e8:eb:30:1f:fd:fa:58:b4:7c:76:c4:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:51:3D:3B:0E:68:E0:21:84:00:E0:BF:82:BD:F2:3A:4C:EF:61
X509v3 Authority Key Identifier:
keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/wrxRPTsOaOAhhADgv4K98jpM72E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.84.0/22
193.105.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:b3:b8:58:c0:e4:a7:3a:0e:72:f6:ff:9c:4c:5c:01:ba:31:
ca:d2:3f:c9:ff:fd:6f:f4:47:bc:06:81:20:e4:57:8b:47:b3:
10:79:c6:00:11:5e:a6:33:e3:e5:c3:16:ad:5b:70:33:3d:9a:
81:2e:77:31:2d:d4:a3:ca:7d:b5:e2:23:76:12:c2:03:fa:58:
27:cf:b8:9e:80:4f:1e:21:3c:6f:c7:6e:2d:f2:6b:8f:79:1a:
82:3e:2e:41:d1:f3:f9:33:61:de:f1:c1:c1:4f:91:68:06:94:
ec:4d:45:5a:26:52:4a:e9:7f:43:87:8c:af:fe:e9:19:be:89:
19:c9:a9:38:41:30:f2:a9:1a:fb:86:81:7a:40:9d:04:a9:b1:
50:bb:4e:c3:39:d3:16:2f:ca:ef:33:d8:1f:c0:5c:cc:91:21:
e2:f0:59:e0:26:47:ad:bd:40:af:51:8a:a1:62:b1:97:9e:5b:
3a:14:84:e6:d0:49:c1:7c:c8:99:a1:e2:b2:c3:72:ba:87:37:
f8:20:5f:f6:5b:b3:4a:77:14:fa:cd:cf:32:88:f4:a3:17:1e:
fc:69:16:2c:d1:5e:ad:d7:78:11:b2:59:2c:a7:7e:64:6b:7f:
bd:b3:c7:3f:e9:69:06:38:5c:87:c8:f1:f8:b4:b8:fe:c6:2e:
72:f1:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-fra.rpki-client.org