Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/wgYpZin5VIvmD7iLK2Hto25H5F4.roa
File: wgYpZin5VIvmD7iLK2Hto25H5F4.roa (raw, json)
Hash identifier: lm1KZhktHsMGT+Oa9gor7xWfDJcdt7tuUc9RceeqI2I=
Subject key identifier: C2:06:29:66:29:F9:54:8B:E6:0F:B8:8B:2B:61:ED:A3:6E:47:E4:5E
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 0C072D7A
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/wgYpZin5VIvmD7iLK2Hto25H5F4.roa
Signing time: Fri 01 Apr 2022 12:13:38 +0000
ROA not before: Fri 01 Apr 2022 12:13:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203147
IP address blocks: 185.150.219.0/24 maxlen: 24
185.150.216.0/23 maxlen: 23
185.150.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201796986 (0xc072d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Apr 1 12:13:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c206296629f9548be60fb88b2b61eda36e47e45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:ff:4e:1f:fb:2b:6c:30:4f:f9:2b:b6:10:
96:3e:21:87:71:40:cf:fb:04:3d:76:67:29:ec:17:
d2:90:c8:91:17:76:8f:e6:98:3d:57:ae:0c:35:5e:
db:37:9b:97:0a:f2:71:b7:e4:41:cb:39:89:48:56:
0a:e1:39:00:c5:b1:87:41:aa:17:59:7d:c5:da:c8:
03:9c:8b:07:76:4d:ea:5c:f9:61:50:19:26:40:31:
52:6c:59:b6:a6:ca:f9:7b:f5:89:22:e6:82:a4:37:
38:e7:c5:75:ba:5a:39:2c:f3:d8:ca:86:8e:76:2d:
4b:e9:b7:7c:fd:b4:70:9b:dd:c1:7f:70:e8:cb:75:
fc:ba:c7:f0:21:10:7b:7e:7e:7a:14:63:fb:73:59:
e0:0a:ae:6d:3b:8d:70:7e:15:f5:3c:4c:5f:de:6a:
f3:39:64:85:54:43:c8:f1:b5:9b:26:f0:63:f1:71:
0e:72:0e:a6:3c:e5:f2:17:a4:57:0c:29:d0:75:70:
c4:50:c5:ed:84:a8:de:7c:30:d3:37:cf:33:92:c1:
9b:af:1c:4f:f9:bb:08:d8:fa:17:73:04:33:c5:35:
ad:63:85:a0:c4:73:f3:4f:8e:c0:59:ad:2a:0d:32:
ae:a5:b3:e1:d7:40:49:55:03:bc:fa:6d:e5:c4:64:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:29:66:29:F9:54:8B:E6:0F:B8:8B:2B:61:ED:A3:6E:47:E4:5E
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/wgYpZin5VIvmD7iLK2Hto25H5F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:dd:63:90:1a:fa:64:72:08:23:2a:be:74:5e:35:5e:c5:3b:
30:8f:76:30:fa:5b:32:8d:d0:bb:66:68:31:d9:18:13:6f:c5:
28:7e:37:50:40:b6:8f:dc:a0:8e:9b:72:5e:74:f7:2f:25:45:
f4:e0:e8:f2:f5:a9:1b:00:84:6d:a3:01:10:67:9b:6e:93:4a:
57:1d:c7:ed:15:5d:01:5d:f6:b4:e0:06:31:d0:9b:c3:69:9b:
b4:e2:ad:08:d6:43:a7:60:fb:85:67:51:c0:e6:9d:77:bd:0e:
fc:aa:6e:02:50:16:4f:64:c5:55:7a:04:06:5b:bb:f7:a8:11:
02:57:64:19:94:7f:f2:b2:5d:66:47:bb:1d:1d:5f:16:e6:0f:
45:04:a6:81:70:96:6a:c0:e2:48:af:7b:de:2e:b3:da:ff:35:
e4:dc:c5:13:99:c5:07:8c:28:47:c3:bf:64:16:32:92:d1:d1:
02:ea:3c:42:7e:2e:42:05:0d:6a:59:92:4d:6f:32:79:e8:72:
0b:3e:12:5f:29:fc:57:07:6a:da:ff:c4:ce:e9:8d:3c:dc:e6:
60:a9:b7:cd:fd:7a:70:ef:5d:7c:4d:45:0b:91:9f:f7:2f:9f:
a4:63:d5:fe:a2:3d:b0:0c:f4:f6:eb:1f:66:8c:fb:50:9e:6d:
78:fb:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:33 2023 by rpki-client on console-ams.rpki-client.org