Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/WqlvVVk4EKCqkdxTqQ6C-9WopGU.roa
File: WqlvVVk4EKCqkdxTqQ6C-9WopGU.roa (raw, json)
Hash identifier: IjeHVqUGOIVfahRpsWzgMp67s7KZskwf9D/jzjbB8wk=
Subject key identifier: 5A:A9:6F:55:59:38:10:A0:AA:91:DC:53:A9:0E:82:FB:D5:A8:A4:65
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1ABC4F78
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/WqlvVVk4EKCqkdxTqQ6C-9WopGU.roa
Signing time: Sat 01 Jan 2022 16:03:10 +0000
ROA not before: Sat 01 Jan 2022 16:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197654
IP address blocks: 195.33.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448548728 (0x1abc4f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5aa96f55593810a0aa91dc53a90e82fbd5a8a465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:de:c4:93:c9:e7:9c:05:b4:04:39:c6:fe:
46:a1:be:ea:6d:b8:c5:76:62:90:62:76:b9:64:d6:
6e:fb:d5:70:c0:d5:2e:c1:71:ac:18:17:1c:27:71:
dc:bc:d3:a6:3b:29:24:50:3f:00:1f:31:71:68:f1:
ed:3b:01:e5:c8:aa:19:6a:9b:bc:4e:e1:c5:99:24:
f6:39:53:66:ef:9e:77:29:85:9c:63:61:35:d4:d8:
6c:0a:9b:92:20:92:86:44:18:4a:0e:27:5f:87:59:
65:ae:6b:12:d4:3f:a8:56:e8:a1:ec:1a:c2:62:31:
76:ee:f6:e9:ca:2f:13:3e:48:da:92:84:c5:3b:30:
2f:4b:d5:59:3e:e9:e6:ab:40:a4:00:6f:e3:f3:ab:
e0:e3:b6:41:0a:7d:9f:a9:65:76:f5:e2:b3:e1:ee:
ad:8f:16:a6:8f:c8:7f:33:05:70:ce:c8:c7:75:92:
eb:70:aa:f0:13:ea:5a:25:77:f6:55:f2:fb:ed:87:
e7:15:8d:be:84:6a:62:8b:7f:13:50:51:ea:91:39:
e1:20:fe:4a:07:43:33:4a:8c:32:c5:e5:e4:a8:05:
70:97:4d:dc:41:af:20:26:ae:73:37:e6:99:ee:c8:
1d:e8:b9:52:c3:b7:3c:de:01:07:88:6c:99:d4:94:
83:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A9:6F:55:59:38:10:A0:AA:91:DC:53:A9:0E:82:FB:D5:A8:A4:65
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/WqlvVVk4EKCqkdxTqQ6C-9WopGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.33.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:61:53:01:eb:bb:b8:e3:e4:11:b4:f8:c6:b1:6d:93:12:86:
90:6a:f7:79:ab:d9:1d:42:d9:8b:a5:5d:6c:56:13:a4:50:45:
32:3e:7e:8e:fe:07:dd:fa:b3:eb:90:7e:94:a9:05:c2:2b:ad:
69:4d:64:1a:22:c4:57:da:b5:4c:7b:27:74:1b:8a:1d:e5:d0:
97:77:2d:62:46:15:43:00:2b:d1:01:34:a6:8d:2c:6e:44:c4:
de:19:41:a5:f3:0c:c6:16:1c:ec:f5:ab:ac:ce:b5:54:aa:b0:
db:67:0d:c5:b2:bb:e5:63:a3:ef:b6:1b:88:f1:c1:70:1f:da:
02:40:52:92:83:34:4b:c2:fa:c3:88:eb:1f:4d:42:82:0b:3c:
a0:6c:c2:02:85:da:25:5a:81:b5:23:59:4d:83:3d:6d:4e:1b:
a3:c9:74:d8:a2:48:24:d4:bf:d4:ef:4e:72:9b:f6:d5:70:ce:
20:f0:94:b2:b0:8b:cf:e1:5a:4c:ec:82:77:03:cd:0e:3e:28:
02:3a:55:f5:0d:11:4c:76:12:4c:9e:6b:6d:9a:f6:74:0b:70:
05:eb:ee:d2:57:e8:a2:08:7a:46:7b:7e:c0:88:19:ef:97:a2:
33:6c:80:99:49:15:96:70:01:e4:65:db:08:94:41:49:73:bf:
c2:a9:c5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org