Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WrHJM3fpMlu1GoCqbgqMn4inGJM.roa
File: WrHJM3fpMlu1GoCqbgqMn4inGJM.roa (raw, json)
Hash identifier: S/MecdFkCI2AiUD00KNUkhU/UX2bF9MyMWOJ36vQDw4=
Subject key identifier: 5A:B1:C9:33:77:E9:32:5B:B5:1A:80:AA:6E:0A:8C:9F:88:A7:18:93
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 3948887E
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WrHJM3fpMlu1GoCqbgqMn4inGJM.roa
Signing time: Sat 01 Jan 2022 08:05:36 +0000
ROA not before: Sat 01 Jan 2022 08:05:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60638
IP address blocks: 94.184.140.0/22 maxlen: 24
94.184.140.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961054846 (0x3948887e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 1 08:05:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ab1c93377e9325bb51a80aa6e0a8c9f88a71893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:8c:1a:1e:62:b7:fb:c4:94:8c:4c:f9:8d:
c1:58:2d:45:5f:f1:c8:0c:7c:f2:31:c3:b1:7a:ec:
c3:6e:91:f8:25:1c:3c:7c:a7:6f:43:5c:1d:a3:75:
34:12:39:91:36:b4:d7:f1:28:85:90:60:6b:e5:92:
d2:b3:21:b1:ef:09:4e:5d:84:c1:5e:0a:62:ad:b2:
db:9d:73:71:34:7a:88:a7:ba:35:cc:62:5d:f8:28:
55:1c:55:56:af:0d:c2:15:b6:25:76:f7:ad:1d:48:
f1:eb:f2:96:85:8b:f8:1e:a7:53:65:da:04:38:ba:
b4:29:86:15:4d:17:6b:cb:a3:53:e8:1a:a1:ca:60:
7d:63:c4:a1:ac:d9:40:6c:70:19:6f:60:7c:ff:c9:
89:24:a9:33:bf:4a:66:2b:4d:a3:6a:c0:12:fd:37:
32:63:ab:45:b8:1b:39:b8:1d:74:96:c5:6a:ab:d2:
e3:e0:b4:d8:95:de:04:9e:c2:ba:12:3a:1c:42:7d:
b5:0a:82:1b:e9:08:b8:68:f4:dd:2d:d2:7d:0b:f4:
a0:ea:b3:01:95:b9:18:2b:53:93:f1:3a:05:9b:fe:
b3:40:9e:c8:60:16:e2:02:7e:c4:e1:50:a8:f5:2e:
92:b7:d2:44:fb:93:99:75:2f:e2:80:d1:e3:39:98:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:C9:33:77:E9:32:5B:B5:1A:80:AA:6E:0A:8C:9F:88:A7:18:93
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WrHJM3fpMlu1GoCqbgqMn4inGJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:27:73:22:02:29:4d:4e:ee:19:38:57:cb:1f:8f:7a:75:16:
97:f1:8d:cc:4d:71:48:56:dd:59:6a:6d:c0:b9:9b:4a:86:a0:
67:31:25:ac:b1:52:92:e5:2a:f4:09:92:bf:79:35:34:4d:a4:
ba:a1:57:d6:2f:cc:19:11:84:a5:57:15:d1:b5:db:a0:38:6a:
0d:11:a9:d2:1d:18:1b:a4:6a:e7:16:b7:cc:a7:c7:12:52:12:
05:d1:ba:f9:e7:6f:15:3b:8e:37:40:03:c3:1c:21:5f:a8:ba:
6e:b6:41:5f:e3:8e:50:70:95:48:cc:53:49:8c:e8:a3:0d:4a:
4a:b4:6d:2d:1c:72:21:3d:c6:5f:61:23:02:ef:29:a5:26:ba:
41:9d:a1:da:e5:43:20:f1:63:de:f4:1a:81:1b:10:73:74:db:
c8:89:9f:10:1f:f1:5d:1b:17:44:9c:5c:22:2f:1d:95:26:fe:
55:79:20:f6:10:5c:b8:18:a5:d8:38:b4:9d:04:b6:a3:41:c4:
02:9f:cd:c2:4d:62:ce:da:52:38:f9:98:95:b7:b6:d2:74:ba:
f6:d8:e8:c8:cf:72:2b:be:e9:00:15:bf:0b:3a:96:ce:be:96:
6b:7f:35:90:91:eb:78:e6:a5:8b:ca:bf:eb:6b:99:6e:aa:f3:
4e:16:06:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org