Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/wwyUL03pQMR5vc7RKvRvRO6wChM.roa
File: wwyUL03pQMR5vc7RKvRvRO6wChM.roa (raw, json)
Hash identifier: IZPQW7zUtyb66RdshUAQa2j4Pz1/3zYhb2H2mIY5NOI=
Subject key identifier: C3:0C:94:2F:4D:E9:40:C4:79:BD:CE:D1:2A:F4:6F:44:EE:B0:0A:13
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 0A1FE0
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/wwyUL03pQMR5vc7RKvRvRO6wChM.roa
Signing time: Tue 01 Mar 2022 15:55:35 +0000
ROA not before: Tue 01 Mar 2022 15:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.122.0/24 maxlen: 24
185.164.121.0/24 maxlen: 24
185.164.120.0/24 maxlen: 24
185.221.96.0/24 maxlen: 24
185.221.97.0/24 maxlen: 24
185.221.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663520 (0xa1fe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Mar 1 15:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c30c942f4de940c479bdced12af46f44eeb00a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:1c:bd:c7:42:96:80:4e:3b:99:44:97:bd:
75:7e:6e:7e:78:05:a2:e6:d4:03:6d:77:96:bb:c3:
a9:7d:5b:54:51:12:bf:b1:3f:ca:0a:3e:c9:24:aa:
60:1f:3c:25:8f:4b:a0:7d:f8:06:36:45:0c:8a:fd:
ba:db:b3:22:54:7c:bc:99:63:cd:d2:ab:0d:8b:8b:
f1:15:f8:26:23:07:2a:24:93:7c:d2:7d:1b:cc:b9:
06:cf:fb:bd:14:7c:d6:eb:9d:6e:93:d9:5c:55:dc:
25:e9:06:4b:9b:55:69:8e:87:bf:58:27:84:ec:b9:
38:31:31:cf:a8:7b:9d:47:85:3f:18:c6:14:f5:fd:
53:31:6a:32:44:a6:79:70:ce:89:27:cc:13:90:0e:
2b:b7:c4:1a:66:dc:8d:35:d2:53:18:f2:0f:7a:4c:
c2:7a:bb:97:42:62:d9:c2:66:a3:22:36:1a:18:97:
1c:db:67:39:c4:8e:06:b6:e5:7b:dc:cf:4a:0d:bb:
09:dc:e8:e2:a7:cb:d2:cf:c1:61:75:5d:e5:b6:9c:
e5:91:65:97:f5:46:22:e1:d9:d7:2d:42:6d:d6:86:
a6:66:7e:47:9b:e1:8c:65:d4:de:40:06:a9:2f:c5:
07:c1:bc:5c:ab:9e:f0:06:4c:0b:1a:b2:52:63:52:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0C:94:2F:4D:E9:40:C4:79:BD:CE:D1:2A:F4:6F:44:EE:B0:0A:13
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/wwyUL03pQMR5vc7RKvRvRO6wChM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.120.0-185.164.122.255
185.221.96.0/23
185.221.99.0/24
Signature Algorithm: sha256WithRSAEncryption
47:89:a9:98:dc:3c:4b:e9:a8:4a:4f:8d:46:f4:96:ca:93:39:
1e:bc:df:ea:9c:32:21:8c:58:86:1c:44:a6:61:30:dc:be:1a:
05:71:fd:46:b0:79:10:73:da:9c:ea:48:8c:8b:20:7b:41:57:
3d:5b:2e:68:cd:94:1f:ee:50:be:52:f2:c1:e3:a6:4c:7c:03:
4e:ae:1a:1a:f5:cc:a9:0c:22:59:65:00:da:11:87:f5:07:70:
dc:3e:56:22:bc:f2:e1:c1:7a:eb:1c:32:27:e8:5f:a4:55:2f:
ff:da:49:2e:c8:ec:09:27:52:3a:07:fe:eb:29:b1:a0:3c:59:
88:ed:e6:3e:08:2b:40:f7:1f:77:1e:b9:92:84:58:da:ef:bf:
f3:c6:e2:96:01:4c:c0:44:ae:9e:fa:2c:d7:36:33:92:8d:2a:
6f:6d:0f:2b:05:7f:ec:bd:66:02:61:96:82:ed:b1:b4:da:ef:
66:c1:00:f3:1d:fc:8c:4a:f8:25:79:2d:59:4a:b7:52:69:04:
cc:ec:3f:2d:2e:38:ab:f4:35:a9:0b:db:94:e0:c2:4e:6e:8c:
41:cb:e1:29:3f:56:ec:33:10:a3:60:0e:c5:99:be:0b:82:f9:
03:b8:72:49:02:cc:79:30:60:89:81:c1:54:52:54:6d:9d:11:
53:0c:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org