Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/wug-JnkId2uzrCSTYsldBbWAA_4.roa
File: wug-JnkId2uzrCSTYsldBbWAA_4.roa (raw, json)
Hash identifier: P5vCjnyOA/8V0mRmH1Obg6HJE0UMUCHUS7T73KIMmqU=
Subject key identifier: C2:E8:3E:26:79:08:77:6B:B3:AC:24:93:62:C9:5D:05:B5:80:03:FE
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 01F092E7
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/wug-JnkId2uzrCSTYsldBbWAA_4.roa
Signing time: Sat 01 Jan 2022 10:55:01 +0000
ROA not before: Sat 01 Jan 2022 10:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18345
IP address blocks: 185.238.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32543463 (0x1f092e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 1 10:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2e83e267908776bb3ac249362c95d05b58003fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:19:de:e3:63:48:ff:a9:a1:c3:7a:c6:76:
16:70:bc:f1:cf:7f:e4:b7:49:5b:8f:fa:6c:74:7c:
75:fd:36:79:17:91:57:d9:60:bd:62:6e:b9:ea:1f:
b9:25:db:16:d4:8b:cc:64:7a:1c:91:d1:3e:7b:f0:
f7:e6:92:a4:5e:ae:4a:93:5d:41:99:43:80:5b:88:
c0:04:ef:cd:3d:ea:5e:a7:d5:e5:2c:50:31:d5:e8:
12:f9:68:b1:67:40:23:62:86:52:f6:8a:2a:a7:4f:
4b:d2:de:2e:a2:58:28:26:9d:8c:b3:4d:10:01:c7:
58:ce:82:f0:80:e7:7a:0b:1a:f9:2b:ed:2f:e0:8d:
b6:cc:21:95:aa:90:82:8b:cd:10:83:4f:a9:a5:5f:
ad:06:a4:78:8c:78:dd:9f:0b:12:94:cc:11:8a:5c:
5a:a3:5a:fb:38:21:8f:08:3c:4d:b6:d2:74:fc:7b:
8a:ed:c3:cb:fe:bc:46:ec:a5:e1:7a:a6:43:04:7b:
93:cc:b0:41:4e:d2:a4:72:64:4d:2a:a8:47:d8:5b:
5b:88:d3:e4:02:21:cd:00:a8:9a:ef:19:f3:ef:60:
87:60:c1:b5:4d:6d:2d:a8:5e:7f:dd:26:71:99:be:
8b:cc:92:c6:a1:6c:bc:5f:a8:2b:5c:fe:e3:c5:2c:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E8:3E:26:79:08:77:6B:B3:AC:24:93:62:C9:5D:05:B5:80:03:FE
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/wug-JnkId2uzrCSTYsldBbWAA_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f6:36:e4:1f:33:61:40:6a:e0:c8:db:e3:95:c2:67:c9:1f:
91:07:d0:ed:cc:01:63:c0:5c:b0:fc:b5:ab:92:40:ac:c5:88:
04:30:2e:ce:ac:35:09:ad:f9:4a:f9:0f:18:ac:a2:6a:1d:a3:
56:77:a7:89:e7:8c:2e:48:e6:b7:85:0b:84:58:ce:e8:d4:e9:
3f:6f:1a:f9:25:85:a8:be:7e:b1:e3:99:9e:82:5b:51:5b:99:
ae:94:5b:24:4c:42:9e:84:0c:03:77:69:a7:4a:d8:78:fd:5d:
70:d0:5a:35:81:5a:2f:68:96:7e:fd:81:6a:5c:2f:d4:72:fb:
54:9b:ff:53:b4:79:1b:c1:60:fa:da:c6:2c:99:95:ec:f5:75:
8c:59:8f:5b:db:3b:ea:9c:47:da:e0:da:d4:1c:cc:d1:1a:34:
6c:32:2b:a1:f3:e9:fe:c6:c4:dd:4c:b3:9e:0f:e6:0d:f2:3c:
77:74:42:87:a3:5b:96:2d:4b:52:93:a5:18:ba:ea:a0:b1:22:
f0:0f:f6:b6:e1:d8:d9:20:e7:52:e1:a9:fa:cd:b4:13:5e:10:
ff:43:f4:eb:bc:d3:7e:c3:9e:86:50:a7:ad:62:42:4b:ba:7e:
9c:01:7b:9a:93:6f:86:17:9b:32:f2:78:51:34:80:96:a4:c7:
25:ca:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:51 2023 by rpki-client on console-ams.rpki-client.org