Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/W_JTZyJ44GRLecmBC79PLyi86r0.roa
File: W_JTZyJ44GRLecmBC79PLyi86r0.roa (raw, json)
Hash identifier: X0P6+RCCEgNuGGUbAxRRhmO9CnANHz6Re0eKvvXcRss=
Subject key identifier: 5B:F2:53:67:22:78:E0:64:4B:79:C9:81:0B:BF:4F:2F:28:BC:EA:BD
Certificate issuer: /CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Certificate serial: 1586580E
Authority key identifier: D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/W_JTZyJ44GRLecmBC79PLyi86r0.roa
Signing time: Sat 01 Jan 2022 08:55:19 +0000
ROA not before: Sat 01 Jan 2022 08:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200742
IP address blocks: 185.97.125.0/24 maxlen: 24
185.97.124.0/22 maxlen: 22
185.97.124.0/24 maxlen: 24
185.97.127.0/24 maxlen: 24
185.97.126.0/24 maxlen: 24
2a06:600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361125902 (0x1586580e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10c88d82d2fac82203d42a242d6eb763d13bbf8
Validity
Not Before: Jan 1 08:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bf253672278e0644b79c9810bbf4f2f28bceabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:e0:b4:78:02:69:e7:14:a2:9e:78:94:f4:
98:f9:b5:57:26:86:e8:c8:c4:fa:fc:b1:dd:e0:2e:
ce:38:cc:a1:99:83:92:b9:c6:e0:6b:33:51:ef:b0:
ca:e9:4e:3b:22:0a:34:e8:00:ca:43:be:2b:a0:8e:
e5:96:ca:9b:cb:b9:5d:68:32:8c:12:76:c5:6e:54:
37:cd:31:b7:4f:36:22:3b:6d:1b:69:f8:02:bc:29:
55:e7:5e:69:ae:fd:fd:fa:20:da:e4:73:62:e6:b8:
f4:6f:d9:b6:e7:7d:31:5d:1c:cb:d8:f1:6f:3c:33:
23:55:35:d9:eb:1f:f9:68:5f:59:73:c2:be:bc:7b:
2e:ef:5f:81:92:a2:89:79:66:f8:e1:be:7b:53:64:
85:c3:cd:c9:45:16:60:93:a4:64:8e:e1:76:f1:fb:
8e:a0:2e:b9:56:ad:f5:80:cc:07:cf:e3:a8:cb:b6:
b2:d6:b6:d1:cf:1a:58:37:1c:88:55:3c:73:d2:0c:
1e:f8:43:bd:6e:ba:07:d5:e9:bc:16:b5:ab:8c:60:
18:03:72:16:25:61:b7:a7:21:11:9f:48:71:b8:85:
b4:e7:bc:f2:3e:ce:d4:a8:53:d4:d6:66:e9:ef:c6:
38:11:9f:7f:c3:4c:23:86:66:1d:e4:33:de:e7:35:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F2:53:67:22:78:E0:64:4B:79:C9:81:0B:BF:4F:2F:28:BC:EA:BD
X509v3 Authority Key Identifier:
keyid:D1:0C:88:D8:2D:2F:AC:82:20:3D:42:A2:42:D6:EB:76:3D:13:BB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/W_JTZyJ44GRLecmBC79PLyi86r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8ed018-08f3-4777-9dd4-de245af4facb/1/0QyI2C0vrIIgPUKiQtbrdj0Tu_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.124.0/22
IPv6:
2a06:600::/29
Signature Algorithm: sha256WithRSAEncryption
86:a7:ad:e0:83:3c:0d:9f:a4:dd:53:b4:c3:12:e0:28:d6:ab:
ec:67:9c:0f:b8:d5:a2:a0:92:80:8b:91:aa:03:71:94:f5:3c:
7b:8d:81:2e:b4:1f:3f:9e:58:15:3b:67:7b:9e:83:67:92:aa:
5b:6e:af:23:36:cc:19:f1:e2:ad:bb:1e:a0:65:59:a7:a1:e1:
0f:84:27:7b:3f:31:48:ee:7e:fb:29:de:7a:b2:20:5b:e5:e4:
08:4e:3e:a6:ca:8d:73:16:f2:ab:2c:f4:ed:bd:e2:c9:18:e0:
6d:b7:5e:81:8c:82:15:c6:77:71:c1:11:13:1c:47:2e:1c:18:
0f:f3:0a:42:f9:6e:2d:78:e9:d6:f4:10:6c:ef:3f:36:f7:34:
ba:87:ec:cb:1a:e9:c9:d5:72:c2:e9:0c:24:44:2e:15:6d:ab:
46:8d:35:e4:c0:28:d3:e1:0a:64:ae:9b:c2:5e:0c:66:3a:79:
3b:b3:9b:bb:35:6c:e4:50:ab:10:f0:99:21:a6:4b:56:64:95:
c2:ad:93:6a:89:d7:0a:ae:67:d1:61:2d:b3:ad:3b:d5:11:4c:
0f:ca:b0:12:21:15:9e:ee:eb:1b:f7:50:2b:80:78:d1:32:cc:
74:a1:9b:84:93:ae:a1:4c:df:9a:86:c4:db:4e:61:b8:1d:e7:
23:22:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:16 2024 by rpki-client on console-ams.rpki-client.org