Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/WJSydWudMIpMmIOnT7dzamqdolQ.roa
File: WJSydWudMIpMmIOnT7dzamqdolQ.roa (raw, json)
Hash identifier: DK0MitptV9Q/oOn6FQSLGQbBAaGnnvhQe1VncN22S40=
Subject key identifier: 58:94:B2:75:6B:9D:30:8A:4C:98:83:A7:4F:B7:73:6A:6A:9D:A2:54
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 097454D3
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/WJSydWudMIpMmIOnT7dzamqdolQ.roa
Signing time: Sat 01 Jan 2022 07:01:21 +0000
ROA not before: Sat 01 Jan 2022 07:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20546
IP address blocks: 93.191.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158618835 (0x97454d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jan 1 07:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5894b2756b9d308a4c9883a74fb7736a6a9da254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:cc:bd:d8:fb:22:a4:f7:27:58:47:42:04:
2f:4f:f1:03:6d:e7:dc:27:79:2c:8b:ed:a3:89:8a:
22:28:ed:24:c1:46:8c:f0:4e:a3:8e:64:d8:22:b1:
dc:ee:1f:c3:b2:a6:32:64:4f:da:f2:43:b8:29:35:
0e:7a:27:ba:39:7c:93:1a:c7:50:2f:dc:58:f7:6c:
4f:6b:f4:c6:cb:09:44:6a:05:bb:9c:85:4f:92:83:
e5:47:04:7b:bf:dc:44:6c:21:67:ba:e8:3b:cd:f1:
d8:76:82:0b:58:c9:ec:e5:9e:96:c6:07:c8:19:b1:
5b:d5:e4:84:98:72:f1:bc:9e:03:15:a3:94:20:5a:
97:9f:60:f1:fe:9a:97:75:51:2a:fb:88:26:fe:af:
0d:84:e1:c9:37:c4:8a:4f:70:ee:46:df:d3:4d:ce:
94:4c:ed:55:1d:e3:94:39:01:cb:c0:71:0f:7d:2f:
b2:f2:9f:1c:0e:24:75:47:2e:2f:0c:51:fa:b6:b7:
fb:c5:3a:d9:51:5f:1f:c4:b2:96:ee:25:c6:a8:bf:
f2:e2:86:d3:0b:27:7f:3a:bf:72:be:40:de:71:93:
53:3a:b3:c8:ad:ab:51:dd:9c:9f:cb:9f:4f:b1:5d:
57:af:d9:11:3e:79:29:ba:90:fa:7d:a7:31:fe:2e:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:B2:75:6B:9D:30:8A:4C:98:83:A7:4F:B7:73:6A:6A:9D:A2:54
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/WJSydWudMIpMmIOnT7dzamqdolQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:26:34:0f:fe:1e:96:af:25:f6:a2:72:d1:81:70:bf:58:ba:
d7:65:37:a8:bb:fe:06:82:b6:48:0c:c0:fa:86:bd:e2:35:86:
0d:dc:32:23:fe:2e:02:95:12:46:e8:e6:85:fc:d0:e8:a9:32:
6d:30:51:e1:51:81:8e:39:7a:42:8a:93:6c:e5:90:b6:02:a5:
16:e0:02:ec:76:86:ef:1e:0a:76:a1:c8:90:d4:28:e8:da:2a:
7d:d3:c7:18:89:d6:61:da:e2:b0:2f:4b:9e:a9:60:57:fb:bb:
d7:41:d3:97:05:75:cd:ea:cd:80:72:76:aa:0b:36:25:b4:3e:
e8:8f:f7:e3:81:8b:0c:62:6f:8d:66:9f:3d:97:12:a5:2b:d2:
38:65:6f:67:91:e3:37:fe:f7:1b:e0:e7:b0:bf:06:5e:8a:7f:
68:4d:f6:95:21:a1:14:fd:47:0f:dd:38:3c:c8:8a:80:b9:aa:
c0:68:ff:08:f6:48:74:59:e4:69:57:65:d9:a6:4f:9d:4f:c4:
6a:55:a5:6d:dd:cb:74:45:6b:b1:bd:27:61:ff:d3:41:72:a7:
7d:ca:e3:ff:61:9b:e3:f9:1f:cb:c3:58:b3:e2:e0:e9:1c:0f:
51:4c:ff:1f:d6:52:8e:5f:55:5e:05:ce:88:71:b4:f1:c7:0d:
2d:bf:e3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:10 2024 by rpki-client on console-ams.rpki-client.org