Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d5e3a6-adf0-4d99-baf2-30502e4a2d6b/1/W8DYhggJ-58ZDzOda3aPgS4rtUc.roa
File: W8DYhggJ-58ZDzOda3aPgS4rtUc.roa (raw, json)
Hash identifier: M13TCSplUHfEETDI6SS11X+/j/RVU2yO+Kp1oeeZ7Nw=
Subject key identifier: 5B:C0:D8:86:08:09:FB:9F:19:0F:33:9D:6B:76:8F:81:2E:2B:B5:47
Certificate issuer: /CN=5644f7c1a784d80d4605b2bd5a984029aedb0838
Certificate serial: 01016683
Authority key identifier: 56:44:F7:C1:A7:84:D8:0D:46:05:B2:BD:5A:98:40:29:AE:DB:08:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkT3waeE2A1GBbK9WphAKa7bCDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d5e3a6-adf0-4d99-baf2-30502e4a2d6b/1/W8DYhggJ-58ZDzOda3aPgS4rtUc.roa
Signing time: Sat 01 Jan 2022 07:56:26 +0000
ROA not before: Sat 01 Jan 2022 07:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.235.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16868995 (0x1016683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5644f7c1a784d80d4605b2bd5a984029aedb0838
Validity
Not Before: Jan 1 07:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bc0d8860809fb9f190f339d6b768f812e2bb547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:78:3d:95:bf:89:59:22:36:16:76:83:03:
cf:64:c6:2b:84:fc:aa:7d:9d:fd:ab:23:6c:7e:23:
08:5f:9b:7e:54:b6:cb:f4:ea:42:c0:1b:e9:f1:a3:
70:c8:59:25:24:e1:b4:b8:b3:f4:df:97:98:51:63:
11:ce:5a:19:37:c8:91:e8:fb:c4:31:00:89:76:51:
fe:08:43:ec:12:16:df:5c:2e:ff:1e:b4:d0:e2:35:
4b:8a:f5:97:89:09:fa:ee:8f:7d:d1:36:2f:cb:3f:
c3:cf:c6:b4:07:17:41:6d:47:12:12:ce:40:4a:39:
d4:58:41:43:09:33:a9:e8:b8:3d:93:9a:ec:79:17:
a1:cb:1e:68:c5:fc:ad:40:a7:bf:95:0f:a8:18:2c:
9c:2a:6a:20:d3:f0:db:80:ce:89:04:a3:38:8f:7e:
b5:eb:37:8c:77:88:6a:d0:f2:73:5d:0d:87:6f:d0:
3b:63:f9:8e:8b:1c:34:9a:ad:61:30:2c:c5:d0:54:
cd:2a:d3:59:7c:28:f3:46:20:ca:87:d9:6a:2a:63:
04:03:ca:c5:a6:14:6d:79:be:90:4b:88:39:fe:ad:
09:44:75:e5:a3:1c:c8:5e:34:6d:33:1a:a0:25:a9:
03:d8:ff:5d:c8:08:4a:21:6f:5c:5b:41:f7:9a:0b:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C0:D8:86:08:09:FB:9F:19:0F:33:9D:6B:76:8F:81:2E:2B:B5:47
X509v3 Authority Key Identifier:
keyid:56:44:F7:C1:A7:84:D8:0D:46:05:B2:BD:5A:98:40:29:AE:DB:08:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkT3waeE2A1GBbK9WphAKa7bCDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d5e3a6-adf0-4d99-baf2-30502e4a2d6b/1/W8DYhggJ-58ZDzOda3aPgS4rtUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d5e3a6-adf0-4d99-baf2-30502e4a2d6b/1/VkT3waeE2A1GBbK9WphAKa7bCDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.228.0/24
Signature Algorithm: sha256WithRSAEncryption
56:60:5c:df:45:0a:e4:b3:f5:b4:d3:fb:ed:f0:ee:ef:80:ac:
a9:67:76:3a:8e:87:ff:18:8f:48:17:97:24:31:76:c0:1b:a1:
c1:ca:53:18:19:81:24:e5:6d:8a:ef:04:e7:10:16:08:88:89:
c9:6e:2d:85:c9:aa:44:4b:ba:89:a7:82:90:15:cc:63:dc:a4:
0d:45:ed:b6:23:1a:33:02:02:06:8e:ed:5d:1a:41:09:68:97:
0b:82:bf:a2:f9:8c:ae:5f:ab:31:02:ba:36:52:98:b5:8a:96:
8c:e5:17:31:76:2c:0c:c7:03:f6:b3:ef:a7:46:d8:16:c2:f9:
7d:e9:2e:f0:be:fd:91:ba:0f:5e:1e:d6:28:8e:b4:55:12:8d:
eb:e1:7f:1a:3c:1a:2c:e4:2f:fc:49:6e:fc:ba:b4:7f:1a:96:
32:63:9e:a1:9b:02:5c:7d:68:01:04:d1:6d:ed:f4:cf:2d:00:
4f:2b:8c:e3:6c:a5:5d:c6:88:3b:f5:bb:31:16:45:b5:86:f5:
c9:3b:da:46:c5:86:de:f8:1b:b0:35:3a:7e:f8:cc:59:3c:0e:
8f:a0:24:e3:68:49:6b:4c:fd:2a:cc:02:50:56:22:53:a6:f3:
db:bb:6a:e5:91:24:ab:f7:74:32:6c:5c:e7:fb:40:f5:30:31:
d5:62:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:27 2023 by rpki-client on console-ams.rpki-client.org