Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/WVJVGtuywO_h6RE3_feKnhHbcZc.roa
File: WVJVGtuywO_h6RE3_feKnhHbcZc.roa (raw, json)
Hash identifier: Fa1gdYAtxY1Wlh3S359ojCcFXuErtzsTHHB6I3tNRqw=
Subject key identifier: 59:52:55:1A:DB:B2:C0:EF:E1:E9:11:37:FD:F7:8A:9E:11:DB:71:97
Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial: 0296F5
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/WVJVGtuywO_h6RE3_feKnhHbcZc.roa
Signing time: Fri 25 Feb 2022 13:58:50 +0000
ROA not before: Fri 25 Feb 2022 13:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197446
IP address blocks: 194.0.242.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169717 (0x296f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Validity
Not Before: Feb 25 13:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5952551adbb2c0efe1e91137fdf78a9e11db7197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:7b:c7:40:4b:e1:e7:56:f2:64:0c:77:e4:
bb:2a:1f:50:5f:3f:2c:ba:44:c4:62:53:db:fc:fc:
81:39:ac:7e:cb:8d:79:d4:aa:b2:a8:1a:fb:02:c1:
85:0c:c5:14:96:4a:68:89:bd:9e:3d:7f:ba:46:06:
66:aa:91:08:7d:74:2f:2a:65:fa:e2:73:d3:5a:a1:
39:cf:6b:5f:db:64:24:ff:71:14:07:e4:37:e9:08:
1a:66:5b:8d:41:80:b7:84:52:7d:e2:54:5f:a2:fc:
a4:61:1b:0a:6f:7e:f8:dc:f8:b4:39:5d:8f:b0:e4:
85:be:9a:64:b2:7b:52:4a:30:85:c0:47:91:5e:e0:
87:59:63:a8:d0:ee:83:8e:83:d8:60:7e:31:45:5b:
90:dc:00:7b:61:64:12:81:68:35:1e:8a:af:2a:cd:
ca:a6:37:09:41:6c:d1:dc:95:ea:4a:06:19:44:f0:
84:ba:5f:74:17:51:1e:a2:18:eb:30:27:e8:63:93:
79:e1:87:19:53:27:c7:1a:a0:5f:70:cd:01:1f:d9:
55:c6:cb:b2:1b:67:42:d8:9d:66:ae:43:6e:f9:f6:
78:a2:88:aa:4f:16:1c:de:57:a2:da:fa:b7:c0:4b:
4b:50:72:ea:a0:0b:b3:16:fa:23:bb:b4:2a:11:03:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:52:55:1A:DB:B2:C0:EF:E1:E9:11:37:FD:F7:8A:9E:11:DB:71:97
X509v3 Authority Key Identifier:
keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/WVJVGtuywO_h6RE3_feKnhHbcZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.242.0/24
Signature Algorithm: sha256WithRSAEncryption
47:09:2a:e2:f6:90:ff:f7:94:90:ed:3b:f5:db:66:73:8d:bf:
8c:74:ab:9d:61:c1:1b:91:62:23:1a:31:53:44:2e:b0:71:66:
a8:8c:bc:a7:45:ca:3f:df:c6:6b:fc:89:57:44:0d:a1:d4:1a:
a5:c9:f7:20:8b:70:c9:b4:f3:b2:f2:90:af:a8:d5:9b:4a:ea:
b2:90:47:c3:7f:0a:6d:e9:27:aa:5d:53:60:64:e0:55:d8:d0:
8a:0e:d0:16:83:10:e8:5d:67:70:4b:b2:4c:b3:61:ac:a5:a5:
b8:b1:53:d0:30:f0:df:ba:f6:0a:a9:65:42:53:32:4a:4f:d6:
a0:3f:ca:59:d3:02:fd:97:19:13:f0:65:54:f9:3a:bf:e2:9f:
8a:3c:37:71:f2:ab:e6:10:17:b8:de:8d:97:1b:0a:e5:d7:64:
37:86:d5:a6:3e:82:6e:2d:20:53:b5:21:17:db:ed:12:df:0f:
52:c9:49:43:05:f3:17:31:d5:1c:cc:33:8f:8e:67:8e:bc:fe:
cd:36:d7:0b:f5:ce:17:27:7b:fd:3f:33:96:a8:20:52:27:4b:
4f:ee:e1:67:e9:24:9f:e9:a1:f0:49:dc:1a:29:1b:51:84:5b:
a6:19:f8:c8:f7:a0:8a:76:d4:a4:5f:82:36:5a:25:45:30:12:
83:7d:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:45 2023 by rpki-client on console-fra.rpki-client.org