Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/wOK9Wx08loNoXaBCq7FyYoShsYA.roa
File: wOK9Wx08loNoXaBCq7FyYoShsYA.roa (raw, json)
Hash identifier: yUsmOpg3esyGDydO+sJETo/Cq8QhCTYfnYcUQ524mUA=
Subject key identifier: C0:E2:BD:5B:1D:3C:96:83:68:5D:A0:42:AB:B1:72:62:84:A1:B1:80
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 01E2A8
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/wOK9Wx08loNoXaBCq7FyYoShsYA.roa
Signing time: Thu 28 Apr 2022 11:29:59 +0000
ROA not before: Thu 28 Apr 2022 11:29:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199619
IP address blocks: 185.5.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123560 (0x1e2a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Apr 28 11:29:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0e2bd5b1d3c9683685da042abb1726284a1b180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:f7:47:8f:07:78:69:1c:11:82:4c:94:32:
8c:45:77:3d:61:2f:eb:5e:8e:b2:53:e1:c0:b3:31:
4f:31:6d:37:db:a2:26:d4:20:43:1a:9b:c0:86:be:
df:c5:fc:06:14:82:ad:20:2a:e6:31:f4:37:70:e1:
25:f0:f5:5d:19:57:34:53:1f:a8:5f:0a:a8:9d:e8:
bb:d4:b3:4f:7f:28:75:60:c5:76:b6:f3:24:11:d2:
90:8f:87:c5:ec:8b:49:c4:7b:49:aa:07:c4:6d:de:
be:0a:07:72:d5:e7:f6:13:f2:3e:01:db:68:1d:4e:
b8:68:3f:02:bc:a1:24:96:cd:4e:4e:bf:90:02:22:
53:7b:f1:d6:00:b2:49:7f:c2:ae:d8:6a:aa:ed:eb:
d3:3f:a6:26:a7:5b:53:c9:b9:d2:fd:ad:91:f3:d8:
b1:03:36:3b:23:8e:f1:de:ce:e1:e8:93:1e:77:ca:
63:ab:34:7f:40:f0:d4:5d:ec:f0:a8:1b:a7:c6:86:
0a:82:1d:ec:3e:80:f3:70:f9:10:8d:20:90:0e:40:
38:a6:e4:34:eb:f0:f0:0d:13:1a:57:4c:ca:e7:6c:
1e:60:11:2f:7e:1c:1b:1a:38:da:a5:bc:43:8c:7f:
fc:94:0b:0f:f7:ca:d5:f6:4a:5b:6c:69:09:b4:12:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:BD:5B:1D:3C:96:83:68:5D:A0:42:AB:B1:72:62:84:A1:B1:80
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/wOK9Wx08loNoXaBCq7FyYoShsYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.143.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3a:12:40:25:98:e8:82:bf:aa:63:88:96:f8:90:f1:07:2d:
13:05:08:6a:16:00:be:e6:1d:e2:2d:30:ee:11:82:58:b5:ed:
aa:67:cb:e7:64:e4:c1:39:cc:f5:5c:a1:d7:22:57:b6:5e:ab:
7d:51:9b:4c:6e:7a:d2:e2:de:60:86:40:b3:9e:e9:a0:b6:a7:
3b:19:64:4c:94:63:58:70:50:cf:08:f7:27:2f:cf:72:88:1b:
91:11:23:ab:24:39:82:d8:75:9a:84:f5:25:66:13:80:d5:cf:
a3:da:69:f9:b6:7e:1d:fb:93:89:ca:d9:f1:e9:46:3a:92:03:
8b:56:fb:fc:fb:4e:48:44:79:99:32:f4:08:cc:24:bb:eb:bf:
ea:eb:43:2e:69:50:fa:15:8d:ad:85:9f:6e:ff:10:ec:f4:99:
e8:a6:20:3c:58:37:a3:5e:58:37:0f:d3:69:c8:34:df:d7:86:
73:2f:a2:cc:6b:42:73:aa:90:68:0d:d4:db:ed:3b:55:cc:cf:
f0:be:f7:d1:9b:6e:f1:ad:e7:58:f0:eb:c7:82:7e:18:72:ee:
0a:b6:70:32:ce:52:ce:e7:b4:f8:72:9f:ad:2e:f2:ff:36:f5:
cf:9b:c4:10:97:5a:82:8a:2d:4e:b7:33:bc:aa:75:40:6f:7c:
e7:09:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:41 2023 by rpki-client on console-fra.rpki-client.org