Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/1-wcyi_s5FcLrYmUBF5sRGphbfnA.roa
File: 1-wcyi_s5FcLrYmUBF5sRGphbfnA.roa (raw, json)
Hash identifier: WgFrMTjHiN63bm4c9TK3mG7BSYR8RBVHTzPAts+NQng=
Subject key identifier: FB:07:32:8B:FB:39:15:C2:EB:62:65:01:17:9B:11:1A:98:5B:7E:70
Certificate issuer: /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial: 011B9D
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/1-wcyi_s5FcLrYmUBF5sRGphbfnA.roa
Signing time: Wed 20 Apr 2022 13:01:46 +0000
ROA not before: Wed 20 Apr 2022 13:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 194.15.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72605 (0x11b9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Validity
Not Before: Apr 20 13:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb07328bfb3915c2eb626501179b111a985b7e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:04:a0:bf:00:3d:50:5e:28:c0:eb:34:a5:
08:f9:d2:51:41:de:7a:61:8f:83:74:6e:c4:74:60:
a8:91:e1:1c:b7:5e:ea:7c:ec:fa:e0:23:fa:60:c6:
73:7a:f2:3f:82:fe:fa:79:4a:41:36:f2:29:4a:34:
ff:4d:f3:2e:d1:89:7a:06:ab:5d:47:ea:2a:09:66:
ca:8f:d5:f6:0d:c0:86:44:4b:d7:91:78:aa:db:69:
28:fb:84:d9:6c:52:d6:35:c1:48:03:9e:5d:db:67:
90:d5:e3:d5:6d:96:71:6d:b1:7e:7b:13:24:99:23:
80:e6:3b:0c:72:70:d5:9d:ed:7c:b0:54:74:3f:83:
53:e0:30:96:43:b9:7f:ed:97:53:d4:a6:27:dd:47:
7d:85:e7:e2:fe:ec:b9:3d:b0:88:61:28:0d:c7:4c:
d4:99:70:79:33:34:75:7c:33:5f:c2:ff:8f:cb:66:
ca:84:a4:39:4c:6e:ef:ec:5f:bb:3b:17:c9:f8:b8:
8d:98:3e:94:8a:95:a7:f0:65:3f:54:e4:ee:20:e9:
cb:63:c5:e1:98:36:c2:7f:4e:42:66:9b:36:ef:8a:
ad:64:6c:ca:6a:61:e5:53:3f:23:d1:1e:0c:6c:b9:
12:75:fa:b8:6f:1d:f4:40:d1:92:c1:cc:e4:86:5f:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:07:32:8B:FB:39:15:C2:EB:62:65:01:17:9B:11:1A:98:5B:7E:70
X509v3 Authority Key Identifier:
keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/1-wcyi_s5FcLrYmUBF5sRGphbfnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a0:82:de:78:6f:f5:b2:fe:10:36:a1:43:7d:a7:1b:fd:e4:
7e:81:ce:10:81:49:66:51:23:92:42:2c:0f:14:d9:aa:df:a1:
49:b2:24:0e:2d:c8:ce:c6:c6:0b:5a:1b:24:58:bf:b8:8d:0b:
00:04:fc:aa:dd:72:9f:c1:e7:02:6a:2f:22:59:41:09:90:6e:
a2:2c:5c:3e:1e:c2:18:3f:0c:56:58:c3:89:fb:7e:9f:2d:a6:
4f:d6:3c:f5:b3:ec:e1:84:29:72:4a:33:54:ca:58:b5:14:62:
52:c0:5d:41:29:4c:a0:ab:ed:76:e5:fe:6a:69:2c:a7:41:59:
16:6b:83:16:7e:50:b8:9b:ba:b2:fe:d8:ef:fa:57:85:0f:93:
53:19:62:16:d9:44:a6:46:79:9e:c2:71:b9:4e:b0:16:fa:be:
13:0e:8c:44:ec:00:42:d6:e4:c8:7c:9c:74:89:af:6e:90:38:
f0:a8:46:44:10:88:02:47:07:91:5a:9a:89:54:16:68:45:14:
14:f3:8a:99:d5:e1:aa:8c:61:4b:ca:b1:55:50:2c:4e:24:db:
0c:e9:93:7c:21:88:97:38:4a:f6:90:42:6b:a7:2c:60:9a:3e:
46:b8:ef:7c:1b:c8:e2:dd:0a:a5:c3:a5:c5:7b:f5:fa:1e:6a:
a8:82:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:16 2023 by rpki-client on console-ams.rpki-client.org