Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/WY7tVa_vNLvzpTVke5I2fllmezw.roa
File: WY7tVa_vNLvzpTVke5I2fllmezw.roa (raw, json)
Hash identifier: bYY8htq71yPfSPqrE6ayaPcajXrYx7YfJKsS4j+80is=
Subject key identifier: 59:8E:ED:55:AF:EF:34:BB:F3:A5:35:64:7B:92:36:7E:59:66:7B:3C
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 0183E56A0C5BF45D90E55D73211C69106777
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/WY7tVa_vNLvzpTVke5I2fllmezw.roa
Signing time: Mon 17 Oct 2022 10:07:55 +0000
ROA not before: Mon 17 Oct 2022 10:07:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58289
IP address blocks: 185.162.234.0/24 maxlen: 24
193.43.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:6a:0c:5b:f4:5d:90:e5:5d:73:21:1c:69:10:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Oct 17 10:07:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=598eed55afef34bbf3a535647b92367e59667b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:36:62:aa:51:c0:52:fe:51:6d:b8:b1:41:4e:
28:23:9c:07:1a:16:d7:5d:0f:b5:ff:38:b8:95:99:
79:52:b7:b9:74:f6:01:da:5f:6e:7a:4e:dd:77:8f:
4e:90:77:b6:99:fa:45:6d:ec:9b:4d:cc:95:a7:07:
a2:25:8f:65:e1:24:7e:60:f8:21:fd:80:e1:99:a3:
67:3e:eb:29:26:3e:92:2c:af:35:9a:1c:1b:f0:fa:
0e:f3:e5:3d:c2:77:23:6f:d8:fc:86:da:11:00:3c:
66:91:93:3c:68:86:15:f5:1d:55:d2:95:60:be:93:
fb:00:35:83:ca:3a:34:d8:32:e8:e6:e2:aa:db:c9:
a2:44:6c:57:05:f1:96:57:12:55:ba:e3:54:67:a6:
32:4f:00:14:74:a8:e0:80:09:6a:70:55:aa:5f:bf:
92:9c:61:a8:4d:e8:92:78:a4:5f:e8:63:2b:4f:49:
1d:dc:07:f0:fb:5c:ea:b1:3b:cf:87:4a:bf:f7:89:
80:ca:75:38:67:76:46:61:09:cc:bd:e9:09:a2:8d:
ed:b0:fc:f9:e9:09:77:23:f4:ea:f3:cf:6a:e3:dd:
b3:92:37:20:c4:44:42:20:ec:ef:d7:4f:aa:c3:ca:
de:9f:68:44:50:df:d1:fe:6d:79:9e:5e:bc:26:02:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8E:ED:55:AF:EF:34:BB:F3:A5:35:64:7B:92:36:7E:59:66:7B:3C
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/WY7tVa_vNLvzpTVke5I2fllmezw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.234.0/24
193.43.251.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cf:3e:fe:27:76:fa:68:9e:63:09:26:a3:bd:ba:71:05:70:
7c:b2:25:41:9c:b3:ec:47:bf:d6:0c:c0:61:85:6c:b3:5a:35:
c6:ee:e8:19:4b:c0:39:a2:89:05:0e:ab:01:ce:0c:4b:b9:a0:
ec:f2:33:7d:fe:6e:3c:26:c9:f6:75:85:60:80:4b:af:a9:66:
7d:89:2d:37:4c:de:32:3d:91:cc:02:bb:8b:2d:c8:03:5d:91:
00:ae:d1:d7:55:eb:b4:09:a5:f1:28:13:4d:71:88:7b:97:a9:
a7:52:c0:87:83:c8:2a:cd:63:bb:23:6d:2d:1d:18:df:6d:27:
dc:97:6b:92:00:78:f5:c9:9a:95:da:4f:d6:fc:80:02:62:ff:
f2:9b:e5:a4:71:91:59:bb:b2:01:08:0c:90:62:19:c9:1b:42:
f9:c3:be:16:e6:b6:c1:d6:ab:60:ae:a6:74:b8:53:f6:c1:ab:
cc:14:de:0e:ca:e5:05:e4:07:68:d0:24:ae:fe:04:d2:00:db:
79:e6:ff:b9:2f:3e:bb:f6:e7:b4:14:31:ee:09:24:9e:41:ed:
cd:34:f2:8a:35:2a:c9:4c:5d:d9:39:0e:25:a3:88:86:6b:37:
b4:f6:c0:23:f2:65:47:e3:55:6d:f1:54:f2:fc:02:78:c2:40:
0f:7d:08:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:06 2024 by rpki-client on console-ams.rpki-client.org