Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wlfuE7ic1tScsh5CV-fWvqZPBrY.roa
File: wlfuE7ic1tScsh5CV-fWvqZPBrY.roa (raw, json)
Hash identifier: 0VQS2/w/+boTZiGagl46vzr/l0YJfRbkNlV0/ZL9P2c=
Subject key identifier: C2:57:EE:13:B8:9C:D6:D4:9C:B2:1E:42:57:E7:D6:BE:A6:4F:06:B6
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0988C1B4
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wlfuE7ic1tScsh5CV-fWvqZPBrY.roa
Signing time: Sat 01 Jan 2022 05:04:01 +0000
ROA not before: Sat 01 Jan 2022 05:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.150.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159957428 (0x988c1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c257ee13b89cd6d49cb21e4257e7d6bea64f06b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5d:99:26:8d:cb:75:c3:1b:aa:bb:0f:2f:a7:
81:81:29:03:fd:c1:19:1f:8f:f9:a3:aa:16:a8:67:
8b:22:7c:44:b0:24:2a:4e:25:50:ce:41:ae:8c:8a:
d8:03:4e:0e:c6:65:4a:07:d5:d9:da:4d:4a:ef:f1:
8d:48:37:e6:13:07:1c:d9:b5:44:16:d8:ef:48:18:
28:23:a5:16:f3:bf:46:ae:a1:05:ed:c0:f5:04:7d:
5e:8e:3e:aa:7e:41:7c:19:98:97:f0:eb:2e:7d:22:
00:79:92:58:74:85:b5:6d:30:db:17:6d:03:4f:b7:
71:ef:52:80:02:f9:77:d0:5b:f8:7b:a4:7b:9a:84:
da:5f:b2:ef:99:e5:78:f7:74:48:eb:cc:1f:35:ea:
1d:6f:d6:0a:75:6d:0b:df:d6:a3:95:3c:7f:2a:a4:
4e:b1:6a:f8:81:49:f6:24:a1:73:f4:ab:88:83:53:
fa:34:4c:1b:db:8a:c3:e8:86:08:4f:1b:c6:72:23:
24:62:0b:93:50:af:d0:94:3a:ce:f8:cc:0e:ce:b6:
96:cc:92:ce:7a:dc:e8:da:8a:cf:3b:56:53:06:8a:
b1:06:62:45:b5:1f:9b:79:d3:54:6d:c7:a7:1c:6e:
12:ea:c7:ee:ba:71:66:b2:8e:e9:7b:42:54:52:5d:
6a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:57:EE:13:B8:9C:D6:D4:9C:B2:1E:42:57:E7:D6:BE:A6:4F:06:B6
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wlfuE7ic1tScsh5CV-fWvqZPBrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.204.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9d:4e:e1:17:29:c8:d8:33:41:d0:24:c6:4a:7f:1d:f8:7b:
0e:07:50:ba:ef:e7:c0:ea:46:70:b1:cf:8e:47:ea:78:ce:f2:
85:33:65:62:cb:f9:b8:dc:0b:d7:c0:3e:93:36:6b:53:1f:ca:
69:0e:eb:a7:0e:95:d8:35:19:e5:8f:f4:be:be:62:ad:b3:79:
75:98:25:c6:90:77:f4:41:26:eb:71:e9:47:cd:53:9d:5d:fd:
78:f2:da:d4:2d:fb:b5:94:53:03:03:90:56:02:b2:26:d7:e1:
54:7e:5a:00:5c:3c:f6:19:d8:9c:44:2a:b5:07:8c:bd:57:ef:
d4:8f:23:7a:5d:5b:15:61:fd:97:e9:67:73:2a:4b:c6:de:c5:
ee:a8:19:04:46:c3:87:58:c1:57:3f:72:e5:7a:64:0a:15:8b:
95:84:dd:fc:5f:7a:13:a2:89:21:22:e5:89:2b:ce:a3:f3:55:
c6:2c:45:0a:3c:a5:fc:7a:fa:f3:7b:e8:88:b7:fb:9f:e4:19:
d9:13:b4:8f:c7:75:6d:6f:e6:9b:2b:57:a6:81:f4:c1:05:fa:
87:34:02:11:ea:60:8a:19:36:3e:29:e3:fe:be:77:aa:dc:3e:
10:8c:d3:ae:54:81:e3:a9:ea:f1:4b:4e:b2:c1:c3:32:bd:08:
90:bf:74:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org