Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WEkF_rY7AeS1XLCkrDB8FeMcD7M.roa
File: WEkF_rY7AeS1XLCkrDB8FeMcD7M.roa (raw, json)
Hash identifier: Q9G0okLfVNqvirky6tUVRLaNBHRW9fdUIi3ZBKG7m2A=
Subject key identifier: 58:49:05:FE:B6:3B:01:E4:B5:5C:B0:A4:AC:30:7C:15:E3:1C:0F:B3
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0182DDDBDA9DB8D966794D12E0D5B703179F
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WEkF_rY7AeS1XLCkrDB8FeMcD7M.roa
Signing time: Sat 27 Aug 2022 05:52:29 +0000
ROA not before: Sat 27 Aug 2022 05:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 188.215.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:dd:db:da:9d:b8:d9:66:79:4d:12:e0:d5:b7:03:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Aug 27 05:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=584905feb63b01e4b55cb0a4ac307c15e31c0fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:9a:99:f2:e5:ae:0c:23:82:a8:4b:66:de:
0c:f2:ed:da:c5:b6:49:d8:49:b1:1b:b0:1b:10:ba:
dc:8a:27:3e:ae:b8:00:08:b8:35:36:69:7c:b2:54:
97:65:b4:ae:77:83:9e:15:ea:6d:45:41:ff:ed:d6:
0e:c8:ab:0c:52:3d:9b:42:13:b8:91:e3:97:f7:5c:
00:dc:e8:27:4c:1a:98:48:28:b1:8f:da:7b:07:7c:
7d:f3:59:c3:74:c4:5c:64:1d:a9:10:67:6d:59:9a:
64:ff:ae:e7:2c:22:86:c2:71:fa:a3:d3:7b:5a:39:
3c:d1:9e:71:b4:c6:6e:6f:65:b9:ce:81:f9:13:3a:
1f:3e:8a:62:36:7d:2b:4b:c1:e0:95:23:e4:b7:dd:
c0:4e:6c:b1:e9:89:90:3b:b5:a2:25:2b:71:de:ab:
1c:60:b6:b4:02:46:1a:37:e0:ce:77:43:0f:72:3c:
e3:67:2d:a2:94:4e:43:d8:04:4a:58:b8:39:7c:be:
bd:82:90:a9:99:b9:52:32:1a:27:a5:f2:39:28:6a:
8b:b4:64:74:9b:36:a6:3c:2c:20:0e:e3:5e:f1:e5:
63:21:09:14:2c:b1:f9:35:63:c3:95:0a:93:53:2b:
e9:ff:d0:2a:9c:1c:21:2c:13:e7:31:9d:44:88:53:
6e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:05:FE:B6:3B:01:E4:B5:5C:B0:A4:AC:30:7C:15:E3:1C:0F:B3
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WEkF_rY7AeS1XLCkrDB8FeMcD7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.124.0/22
Signature Algorithm: sha256WithRSAEncryption
51:45:5e:5f:f3:d4:de:ec:f6:f8:45:af:60:14:4d:25:a6:5b:
75:a2:dc:ee:5a:67:15:53:9c:61:71:f6:78:c4:36:f8:96:21:
0b:2a:6c:1f:33:46:11:87:61:56:db:96:86:c7:a9:5b:53:c2:
ff:fb:f4:a6:ee:e3:f0:cb:c1:e1:ca:25:1d:02:fc:04:2f:45:
46:d9:a9:6f:70:96:d7:fc:c7:3a:ff:65:2e:70:2c:da:85:6e:
1b:34:07:46:9a:fb:af:16:23:e3:f5:4a:ee:f7:2d:ac:71:96:
4b:30:81:09:41:a0:1d:1e:2f:de:fa:b2:1a:ec:4d:8a:4b:0d:
22:22:c6:91:10:ba:77:d1:e8:3c:0f:34:c8:cf:d2:42:fd:d7:
60:ae:7b:82:b3:4d:3d:4b:bd:5c:1c:ed:fc:62:a2:bf:9b:d6:
e9:fb:61:ed:94:cf:ca:2e:72:5f:15:6b:c2:9f:3e:b4:57:90:
a5:7e:0d:6d:96:f3:2b:7f:e0:3c:9d:9d:af:9f:f7:8f:5e:f9:
63:78:ba:94:75:d3:70:2f:2b:6a:16:d8:31:5b:c8:cf:58:b7:
1c:7e:87:16:e4:09:a8:e4:7c:16:1f:4b:c7:ac:c0:6b:97:28:
99:cf:7f:81:0f:7c:1a:16:af:a5:ea:74:71:f3:8e:41:10:28:
07:61:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org