Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/AB_Wtf_VCiaYjCGC5QS2ccSBFrg.roa
File: AB_Wtf_VCiaYjCGC5QS2ccSBFrg.roa (raw, json)
Hash identifier: ULYY6arzRGsZUNVRnSn9ILU/7g1qam5UUh8+rh9jPFo=
Subject key identifier: 00:1F:D6:B5:FF:D5:0A:26:98:8C:21:82:E5:04:B6:71:C4:81:16:B8
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 0182CF4996E45650BA560E6CFBB692766F9A
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/AB_Wtf_VCiaYjCGC5QS2ccSBFrg.roa
Signing time: Wed 24 Aug 2022 09:58:02 +0000
ROA not before: Wed 24 Aug 2022 09:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202777
IP address blocks: 185.124.148.0/24 maxlen: 24
185.124.149.0/24 maxlen: 24
185.124.150.0/24 maxlen: 24
185.124.151.0/24 maxlen: 24
185.235.141.0/24 maxlen: 24
2a06:ee80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:49:96:e4:56:50:ba:56:0e:6c:fb:b6:92:76:6f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Aug 24 09:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=001fd6b5ffd50a26988c2182e504b671c48116b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:0d:ed:ca:ed:23:f2:bb:1a:6d:c2:f1:3c:
50:1f:91:79:d5:b1:d7:d1:3a:2b:07:58:eb:ad:57:
c6:a0:be:bd:1b:70:d7:95:ad:69:32:c4:ae:af:73:
b3:e9:a7:9a:a6:42:74:77:24:36:79:f0:78:96:c7:
1b:28:24:df:c4:6e:53:e6:19:d5:83:9c:7a:61:12:
4f:80:d6:f6:e7:01:be:fe:06:f0:81:4c:10:fc:55:
05:3d:1c:3b:f8:40:60:45:f7:35:2b:68:85:fd:90:
b0:ec:fe:3d:b4:a0:ba:b2:22:92:b8:27:5d:9c:b4:
6f:0a:56:7c:82:9b:35:ff:a3:64:55:c8:03:a2:64:
63:90:18:dd:8f:7d:11:2f:9d:f5:4a:c7:2b:38:66:
e2:48:e1:66:bc:7d:59:9b:fa:26:a5:04:e5:9a:9a:
cf:ec:b8:b2:b5:2b:9a:2a:70:4a:51:1b:7e:6b:04:
b1:7e:ad:a8:c8:80:50:e8:2a:f7:c5:97:f9:4e:0a:
1a:42:21:90:43:f6:ce:96:f0:95:76:21:4f:67:f2:
de:20:fb:ef:68:26:d6:65:f9:53:c1:56:4b:01:44:
7a:9f:3e:be:62:61:5b:1b:b0:fc:93:c5:cd:2b:56:
e6:29:8a:a3:35:86:10:85:80:ab:d0:89:af:07:47:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:D6:B5:FF:D5:0A:26:98:8C:21:82:E5:04:B6:71:C4:81:16:B8
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/AB_Wtf_VCiaYjCGC5QS2ccSBFrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.148.0/22
185.235.141.0/24
IPv6:
2a06:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
7b:cb:91:18:ca:0c:1e:63:27:75:2a:4b:61:71:1a:e7:76:38:
26:fd:58:11:28:04:68:04:ec:08:6c:37:19:b6:13:c6:6e:af:
ee:76:f8:86:00:92:b7:57:a2:1d:05:13:0f:e3:01:a3:b2:db:
91:0f:62:81:f6:94:32:5e:6d:51:dc:0c:80:14:8d:5a:9c:17:
4a:c5:31:31:91:ca:49:d7:17:5d:62:f6:56:47:5a:5c:51:4a:
a8:35:82:16:69:5b:6a:53:4f:10:10:ed:fe:ea:80:82:a7:77:
88:57:3d:5c:60:10:00:31:f8:03:f1:18:70:fd:b6:e8:ff:f8:
0c:38:8e:83:04:d4:a2:c9:07:cb:38:11:8b:28:20:06:97:fe:
7d:6f:29:b2:ec:2c:20:f8:29:24:5b:62:4f:35:aa:96:e0:f8:
cb:05:6f:02:69:54:dc:1a:6e:d8:13:b5:2d:8b:bd:e9:96:83:
c0:16:c9:f2:90:41:b5:99:88:0e:c8:a3:4d:dc:c7:37:92:45:
b7:7a:c2:92:b6:b8:1e:a4:c5:4f:3a:63:01:bb:7f:9b:72:4e:
68:1a:06:fc:e3:e0:4a:2f:14:8e:bf:ad:32:9b:68:33:ff:5e:
f9:0b:3f:82:89:83:52:bf:c4:c2:1f:da:26:4d:3c:4a:9c:9d:
08:55:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:57 2023 by rpki-client on console-ams.rpki-client.org