Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/wLFfLJXIAbQVBCawcGJhcCCch8c.roa
File: wLFfLJXIAbQVBCawcGJhcCCch8c.roa (raw, json)
Hash identifier: 9r7bLhoH8HkBx7OsA7qriuTFNX+0eQNb/huvYOXbFRY=
Subject key identifier: C0:B1:5F:2C:95:C8:01:B4:15:04:26:B0:70:62:61:70:20:9C:87:C7
Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial: 732C8C
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/wLFfLJXIAbQVBCawcGJhcCCch8c.roa
Signing time: Sat 01 Jan 2022 01:56:00 +0000
ROA not before: Sat 01 Jan 2022 01:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206472
IP address blocks: 185.185.177.0/24 maxlen: 24
185.185.176.0/24 maxlen: 24
185.185.176.0/22 maxlen: 22
185.185.179.0/24 maxlen: 24
185.185.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7548044 (0x732c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
Validity
Not Before: Jan 1 01:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0b15f2c95c801b4150426b070626170209c87c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:89:43:3e:b3:c9:4c:57:9c:78:ec:fb:b5:
d4:c1:b4:c7:51:2e:df:01:81:de:25:fc:d1:ca:41:
d8:d6:59:ee:ef:9c:e2:46:ae:63:dc:1d:66:c4:bd:
46:47:2f:c9:aa:de:b1:cf:aa:6a:16:00:c1:c8:92:
39:07:2a:2c:05:f6:1a:37:32:6c:4d:a3:c2:6b:d3:
a2:db:d4:e6:ea:8b:ff:d2:92:b4:ed:66:a2:14:6a:
c4:e8:c7:ab:97:e1:25:40:18:09:c8:1e:2a:da:4e:
ab:2b:8d:2b:d5:e2:87:db:18:c9:71:d9:0d:9e:9d:
60:57:b6:5a:10:a4:cf:26:16:23:a9:ab:29:9e:88:
41:22:21:92:db:13:22:52:af:3c:40:b3:85:63:3c:
4e:5a:95:be:3a:3d:34:3e:5d:3f:64:94:b9:c7:af:
09:09:c3:9f:b0:88:2f:f1:dc:35:66:ad:3c:53:27:
2b:38:4c:1c:ee:6d:6c:89:66:8c:50:bf:85:b3:e0:
a8:91:d9:96:ce:dd:a1:89:d4:9c:9d:e4:85:16:15:
58:87:16:58:d2:56:6a:a9:47:bd:ec:22:92:62:74:
29:91:b6:a4:5b:f0:36:fc:0d:b2:0b:d1:ca:04:2a:
35:c8:5d:a2:ed:ae:a2:ec:4a:3f:dc:ad:6f:c2:ef:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B1:5F:2C:95:C8:01:B4:15:04:26:B0:70:62:61:70:20:9C:87:C7
X509v3 Authority Key Identifier:
keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/wLFfLJXIAbQVBCawcGJhcCCch8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.176.0/22
Signature Algorithm: sha256WithRSAEncryption
89:71:66:d4:f4:f9:45:6a:11:30:3b:c5:77:a8:c7:87:43:02:
5d:8b:b8:ee:43:0b:72:40:9c:8f:ba:13:cf:4d:13:5c:0b:3d:
82:cd:6a:4f:a2:36:9a:f5:45:f1:83:ef:8c:91:22:e1:36:4f:
b8:a2:9d:57:44:26:ea:b8:b7:11:49:72:ae:88:07:0d:ec:d1:
68:eb:2a:1d:4a:84:85:51:28:d2:c5:0f:64:63:c8:46:ac:2a:
eb:9d:20:f9:48:a7:63:8f:50:1c:73:be:a6:c5:1c:4e:66:9a:
9c:3f:1c:1a:10:64:d8:46:0b:95:88:a5:c5:8f:c5:35:35:27:
cf:27:72:a4:f3:12:21:1a:08:e4:68:2b:79:ff:d2:28:50:e6:
78:68:e2:b8:bb:d9:85:81:ee:49:cd:39:b7:8b:5e:a8:ef:49:
ad:cc:5e:c1:f5:54:8e:ca:a4:01:b1:57:1d:85:be:e9:be:72:
bf:76:0b:20:66:63:19:b6:4c:cb:f4:cd:28:36:b7:63:f4:1e:
7f:2a:fd:c8:bc:f3:68:40:7c:a6:27:2d:ac:52:3f:1f:9a:0d:
10:fe:e6:00:8b:2c:d9:96:43:f0:79:17:7b:bd:8d:ea:2d:bb:
42:be:1c:57:9a:31:15:e3:9a:89:a1:12:07:17:7f:a1:29:e6:
80:47:b2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:57 2023 by rpki-client on console-ams.rpki-client.org