Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/WKe9wGcdZUhb35Gh61nYZlKmWIw.roa
File: WKe9wGcdZUhb35Gh61nYZlKmWIw.roa (raw, json)
Hash identifier: NCWa962Yuob1GQmGBIxUsVuSVopG9Aru/71uUqxj2fI=
Subject key identifier: 58:A7:BD:C0:67:1D:65:48:5B:DF:91:A1:EB:59:D8:66:52:A6:58:8C
Certificate issuer: /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial: 02A092
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/WKe9wGcdZUhb35Gh61nYZlKmWIw.roa
Signing time: Wed 08 Jun 2022 12:24:04 +0000
ROA not before: Wed 08 Jun 2022 12:24:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 193.150.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172178 (0x2a092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Validity
Not Before: Jun 8 12:24:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58a7bdc0671d65485bdf91a1eb59d86652a6588c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:8a:3f:1e:98:24:30:26:38:31:2c:52:42:
b9:db:a2:57:fa:3e:c8:4c:64:17:80:42:85:1e:65:
f8:9c:f7:f1:5b:99:bf:75:60:da:9e:63:d2:29:fd:
84:7e:09:45:89:49:e6:98:fb:94:08:54:03:c6:75:
43:92:64:1f:02:f5:3f:0d:5a:b4:6e:ce:0f:ab:27:
51:85:cb:1a:7b:10:5d:bb:69:4f:bf:b0:4e:b0:a6:
bc:ad:8f:c7:04:7a:ae:0e:38:d5:d5:61:c3:71:0f:
1b:73:53:36:40:85:6e:32:dc:20:9e:3c:8f:4e:75:
d0:28:44:ee:f5:ec:0a:76:2a:f5:d6:78:6a:fe:ff:
d2:b9:47:d7:1f:e6:09:b0:68:6e:ae:9a:75:cf:29:
a4:60:bd:d4:b0:a6:1d:84:b0:a9:be:bd:b7:b9:e2:
6b:0d:6d:c8:82:18:e9:45:b8:64:f6:1d:5c:2e:81:
7c:28:a4:b1:63:ee:c3:b8:22:3a:11:23:6d:08:4a:
f7:49:0b:a0:44:f5:a0:15:76:a1:1a:f3:f4:4e:da:
d4:3e:e1:93:53:a1:0f:8b:92:35:b6:18:52:1a:ea:
82:20:5d:b6:89:69:ec:65:66:e1:42:77:f6:8a:52:
8a:c5:3d:ea:15:03:28:d0:49:36:45:14:5c:2b:6e:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A7:BD:C0:67:1D:65:48:5B:DF:91:A1:EB:59:D8:66:52:A6:58:8C
X509v3 Authority Key Identifier:
keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/WKe9wGcdZUhb35Gh61nYZlKmWIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.164.0/24
Signature Algorithm: sha256WithRSAEncryption
10:20:b7:eb:b7:c7:b4:cb:fd:f0:97:01:6e:da:e2:66:c2:b1:
81:e6:87:41:b2:7f:7d:ee:48:97:aa:9e:e9:d6:b3:bb:90:ca:
da:5d:a6:95:53:cb:c1:14:ab:3f:75:5d:ae:50:d4:95:cd:15:
71:60:3e:01:d8:f6:5d:6d:94:21:dc:24:b8:96:cc:e8:69:be:
96:2f:7e:37:1a:3b:71:b4:41:63:c2:2e:74:ab:ba:92:33:f1:
a1:24:8c:05:fa:a2:50:6f:cc:e7:e9:e7:3d:bd:16:5d:ec:d8:
69:d7:99:c7:02:58:c0:d1:8b:31:47:41:e6:37:39:c5:70:69:
a4:12:65:85:45:cb:ba:00:d9:ac:4d:bf:8d:5d:1a:39:86:f6:
48:da:45:87:b2:c4:14:8c:db:2d:bc:4d:10:9c:96:7c:40:59:
6a:9c:aa:54:5d:8e:79:f1:ea:93:b5:c6:1f:8e:0d:73:d4:0f:
18:dc:a2:e5:52:de:d8:f8:78:0a:09:ad:af:f6:ed:69:8b:59:
f7:6c:eb:be:eb:ee:f9:72:c7:5b:17:ad:b6:cb:eb:23:5b:bb:
09:73:01:60:b1:33:b7:3d:ec:c6:d6:6b:0d:4b:2a:54:1d:86:
9f:44:6c:48:fd:25:52:04:ec:80:1d:47:ec:c9:98:d6:64:f6:
36:dd:5e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org