Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/WRKAohP1GduvYCNcic9X43l5vQw.roa
File: WRKAohP1GduvYCNcic9X43l5vQw.roa (raw, json)
Hash identifier: vVHdopON29RAxfCljpvV6NaB6LbZBtRNG7aD944DYME=
Subject key identifier: 59:12:80:A2:13:F5:19:DB:AF:60:23:5C:89:CF:57:E3:79:79:BD:0C
Certificate issuer: /CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
Certificate serial: 01AE7C47
Authority key identifier: E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/WRKAohP1GduvYCNcic9X43l5vQw.roa
Signing time: Tue 07 Jun 2022 15:12:02 +0000
ROA not before: Tue 07 Jun 2022 15:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.253.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28212295 (0x1ae7c47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e9ad934f40594c9f1ba500495a93eeec3c6ce3
Validity
Not Before: Jun 7 15:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=591280a213f519dbaf60235c89cf57e37979bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:68:6c:8b:0e:19:4b:7b:29:3f:9e:a6:6c:
37:a4:1e:1c:82:c7:de:a5:cb:8a:be:d1:73:59:d8:
fd:e0:04:a4:fd:4c:53:b2:17:c1:31:cd:8f:0b:3a:
21:a7:c3:2d:d5:02:18:13:e5:87:ad:bb:9f:50:f2:
b1:64:17:f1:86:8e:ee:1f:29:f5:fe:87:af:76:90:
8a:cc:d7:8d:b1:9d:7a:0a:4a:c0:24:f9:80:27:17:
06:bb:8e:66:34:50:b1:19:c5:4b:a1:0a:fd:97:2a:
7f:33:0e:7e:84:7f:65:04:06:b5:a1:94:4f:1b:cd:
53:8c:b6:da:c5:a5:00:2a:9e:49:14:74:6b:08:fe:
1b:95:da:02:91:8f:a8:d3:81:dc:2c:b9:40:80:f5:
d1:6e:d7:7a:3e:93:de:40:5d:10:4c:57:b4:94:d5:
d5:de:2a:23:a7:b0:2d:96:fe:12:86:2f:bf:8c:56:
cc:6a:f0:ef:6c:1f:8e:76:25:ac:c0:d1:13:5f:52:
5a:57:39:00:4f:fa:81:76:b1:96:85:87:75:42:e9:
d3:5d:2a:6a:42:4c:d0:8e:7c:d3:1d:f3:9e:1d:f6:
26:fc:47:46:9d:75:a7:0a:90:d1:6e:28:16:56:b8:
ea:f8:85:38:40:c0:c4:cb:f2:b0:21:3b:6d:41:72:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:80:A2:13:F5:19:DB:AF:60:23:5C:89:CF:57:E3:79:79:BD:0C
X509v3 Authority Key Identifier:
keyid:E9:E9:AD:93:4F:40:59:4C:9F:1B:A5:00:49:5A:93:EE:EC:3C:6C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6emtk09AWUyfG6UASVqT7uw8bOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/WRKAohP1GduvYCNcic9X43l5vQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/267a8b-3b7d-4bb0-b222-960dee072f3a/1/6emtk09AWUyfG6UASVqT7uw8bOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.56.0/24
Signature Algorithm: sha256WithRSAEncryption
27:dd:cd:29:5e:d6:1f:9e:03:78:c5:83:44:93:65:2a:73:1c:
1a:da:ba:0c:cc:40:dd:4c:dc:67:12:31:19:66:19:e2:06:05:
42:44:20:ea:d5:7b:f3:3a:5d:44:ac:6c:ec:0a:ab:13:c5:b7:
31:dc:f0:20:66:ee:a1:c4:88:70:28:a6:93:f5:f7:63:27:c5:
19:36:9a:28:69:4f:77:0d:45:3d:6c:32:a4:6d:06:2d:ea:fe:
45:8f:6b:4a:98:45:5f:ea:65:15:da:52:df:be:9e:84:12:71:
92:51:9f:c2:a0:bf:ba:b8:f4:c4:17:c1:8c:aa:51:09:1d:74:
e2:a0:07:37:1a:3d:f9:9f:3b:64:80:c1:98:f2:65:78:57:47:
42:a8:4f:c2:88:42:a5:01:02:3d:86:ea:af:7b:84:8b:d4:b4:
59:0f:19:15:3d:ad:34:b9:ed:89:0c:d0:92:b5:0f:73:80:9e:
72:fb:6b:8c:56:e6:07:e0:bf:c2:9c:54:85:54:b1:d9:f2:8d:
f1:08:b1:6f:5e:92:81:4d:07:74:e3:ae:e9:25:13:44:91:c7:
2a:99:73:c8:db:eb:9d:2c:ab:16:de:d4:d1:31:09:21:9b:6d:
40:f0:e7:21:ad:14:ef:2c:92:78:46:14:bc:a2:40:95:3d:8f:
49:e8:20:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:04 2023 by rpki-client on console-fra.rpki-client.org