Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/wExUtxp7_PhZKqAGjdjBBE4JINc.roa
File: wExUtxp7_PhZKqAGjdjBBE4JINc.roa (raw, json)
Hash identifier: viNt1LOcG9gg2vE08Kka75ZGUv6S4jDafejK0PvfN14=
Subject key identifier: C0:4C:54:B7:1A:7B:FC:F8:59:2A:A0:06:8D:D8:C1:04:4E:09:20:D7
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 21CC95
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/wExUtxp7_PhZKqAGjdjBBE4JINc.roa
Signing time: Sat 01 Jan 2022 01:01:50 +0000
ROA not before: Sat 01 Jan 2022 01:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60205
IP address blocks: 185.25.47.254/31 maxlen: 31
185.25.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215061 (0x21cc95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Jan 1 01:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04c54b71a7bfcf8592aa0068dd8c1044e0920d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:b7:ee:a1:c4:ab:5a:ac:1d:14:3c:cf:cd:
c0:5b:79:77:cf:1c:ed:9f:29:25:4e:0b:30:ff:b4:
18:34:63:06:f2:23:0b:32:10:7e:07:5e:9b:a2:82:
ca:29:10:eb:25:74:09:33:2e:10:c1:6a:52:fa:d4:
95:47:4b:06:78:8f:44:5a:b7:86:fc:f4:f6:65:72:
46:5c:87:18:b4:2b:51:4a:70:66:17:67:e9:31:22:
97:95:a8:a7:8d:4b:71:00:bd:3c:d4:7d:c1:92:fb:
00:d0:fd:49:8c:6b:76:6a:6b:be:d4:be:79:b5:4f:
b8:bc:6f:46:b7:e8:d3:82:8a:b4:2b:e5:b5:bf:63:
15:61:48:a9:8c:8c:dd:36:ef:56:a5:ab:61:bf:80:
e0:91:5c:5b:b2:1a:de:c0:7e:fe:bb:c7:bc:28:64:
96:19:fc:79:fa:71:9c:d0:a9:87:50:d4:24:29:21:
df:6b:ef:10:f0:09:93:59:86:50:ba:64:fd:e0:5a:
08:e3:23:c2:73:ce:17:3b:fe:4a:f7:75:bd:24:83:
da:6e:5c:d7:12:71:ed:1e:8d:93:b1:3e:3b:d8:34:
8e:95:3b:b5:d0:2f:be:82:e7:99:d4:5f:a4:76:98:
91:ef:f4:73:f8:d8:f0:67:02:5c:dd:f9:96:c8:39:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:54:B7:1A:7B:FC:F8:59:2A:A0:06:8D:D8:C1:04:4E:09:20:D7
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/wExUtxp7_PhZKqAGjdjBBE4JINc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.47.0/24
Signature Algorithm: sha256WithRSAEncryption
70:67:0c:44:f1:ec:99:16:aa:c5:38:ee:ff:84:d0:2b:40:cd:
8a:f5:cd:c1:6c:df:2f:6b:c9:61:3d:8c:d5:9d:c3:95:cc:4e:
f7:de:5a:59:2f:62:02:fc:4e:bf:04:78:1f:2c:c6:d0:8f:b2:
b3:bf:9f:eb:cd:2b:d5:2c:63:f5:f3:22:0a:4d:14:eb:7e:6b:
f7:12:9b:ad:f2:06:28:1d:3e:d6:a9:d0:c6:54:b3:e8:89:49:
89:fc:c0:89:7e:5e:b9:79:30:3f:34:cb:33:8a:69:93:86:ec:
2a:dd:1e:97:15:54:82:02:16:e7:04:29:ff:0f:0f:d8:2a:50:
0d:ff:29:2b:67:08:3f:af:86:ff:bc:50:c7:f8:0a:14:8e:db:
31:e2:c6:31:03:90:ec:b2:21:08:86:68:db:c3:51:83:67:bc:
91:b4:25:ad:8c:53:3b:3a:cb:67:36:3b:81:2b:9d:6d:cd:f1:
52:50:b3:f3:be:24:82:04:63:8d:07:bd:01:61:cd:88:a6:00:
e1:50:3d:e0:d5:84:70:7b:e8:24:e1:01:26:cb:de:a8:62:7e:
a5:e9:5a:0e:28:1e:b1:8d:5d:8b:23:74:34:98:05:aa:5f:11:
d4:0e:30:47:35:55:c2:c1:b8:ee:77:ae:aa:d4:53:b5:68:44:
a8:f5:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:27 2023 by rpki-client on console-fra.rpki-client.org