Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Wd5eqz1Z5h5hogpjOUiuBRMQSZ0.roa
File: Wd5eqz1Z5h5hogpjOUiuBRMQSZ0.roa (raw, json)
Hash identifier: rzvz5SjssHVr4Ptvy4uDmoubfsDT9ZYp9TztrvyF6XE=
Subject key identifier: 59:DE:5E:AB:3D:59:E6:1E:61:A2:0A:63:39:48:AE:05:13:10:49:9D
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 37F2665B
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Wd5eqz1Z5h5hogpjOUiuBRMQSZ0.roa
Signing time: Sat 01 Jan 2022 05:53:44 +0000
ROA not before: Sat 01 Jan 2022 05:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42019
IP address blocks: 178.252.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938632795 (0x37f2665b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jan 1 05:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59de5eab3d59e61e61a20a633948ae051310499d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:63:3c:2e:58:13:37:02:92:2c:8f:d2:a9:
79:05:a5:5d:5f:0f:60:cd:98:e0:f9:66:31:29:5b:
3e:07:79:9d:10:6d:d4:75:e1:5b:41:d7:4e:a5:ea:
0a:03:c8:ed:36:1e:fb:36:b6:f7:ed:63:9d:ba:ef:
ca:ce:c0:ab:aa:f2:a2:82:23:3f:64:1f:bc:56:db:
92:67:10:0d:ac:b6:0b:9b:60:b6:64:f4:df:93:dc:
af:3a:29:43:da:5c:1e:8a:f0:fa:33:5a:97:23:be:
8d:3f:ed:9b:34:e0:a3:c5:01:a8:fa:c9:ff:c8:0d:
b7:67:62:43:0e:a9:9a:03:da:df:67:a8:7e:ae:27:
cd:05:87:13:3b:9c:b0:0d:7e:6b:e1:21:02:8d:ca:
3d:6a:5b:64:85:72:06:32:e6:f6:84:1d:40:78:96:
90:8c:46:a7:93:7a:25:35:48:9a:e8:8d:1c:17:6b:
34:c3:cd:3b:89:e2:1a:ff:49:7c:cf:f7:1a:f5:fd:
52:c1:b3:9d:f7:5f:29:5b:a1:77:8c:a1:b4:ed:40:
5c:65:6c:df:ea:2e:55:c0:14:65:2e:76:07:cb:0b:
f2:66:9c:55:fe:33:6e:79:2b:66:de:0a:e6:6b:69:
96:a4:00:34:28:48:75:2a:ed:9c:3c:8e:28:ab:e8:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:5E:AB:3D:59:E6:1E:61:A2:0A:63:39:48:AE:05:13:10:49:9D
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/Wd5eqz1Z5h5hogpjOUiuBRMQSZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.252.150.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9d:94:2b:6b:f6:21:ac:e4:e6:cf:05:fd:d3:a0:97:25:de:
d3:0e:bf:0f:34:b0:1d:78:1c:78:d0:25:ef:b2:e0:eb:b4:1f:
a9:91:21:11:08:bb:f1:10:69:20:a2:1c:b7:00:fb:a0:24:fb:
1e:aa:bb:eb:48:0b:76:03:4e:ab:e2:ee:83:a3:77:37:c0:06:
2d:79:b0:f6:c7:3d:80:f3:51:d7:24:bf:a8:1c:5d:4d:f0:5d:
69:e2:ab:50:1c:f8:8e:f3:60:7e:78:bd:c0:4e:22:a2:0b:d7:
68:e2:27:71:2b:ae:77:52:44:27:7c:8a:a8:9e:b3:0b:fc:7b:
4b:a0:44:30:fe:3f:81:b5:76:9f:0f:85:0e:f5:d1:06:ed:76:
24:b4:ec:a1:9b:b3:31:76:00:c8:b8:74:04:5c:19:a0:5b:3b:
3f:69:f5:6f:5e:91:9f:a3:28:a8:5a:48:23:7c:87:a5:98:37:
c0:09:77:34:3c:00:6a:18:f6:c7:01:d8:2f:71:41:22:96:1a:
ee:b2:46:5c:22:4d:14:e4:52:9e:78:86:79:11:99:78:f0:be:
95:8a:b9:06:21:77:a4:f2:55:52:a6:dd:e9:03:82:6a:a6:1d:
53:4d:df:f6:4c:2e:39:17:3d:a4:ca:9d:9f:47:d7:ea:52:27:
7e:c1:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:25 2023 by rpki-client on console-fra.rpki-client.org