Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/W08yCy5S-4_t4jV3ND08_zL2Wkw.roa
File: W08yCy5S-4_t4jV3ND08_zL2Wkw.roa (raw, json)
Hash identifier: ZXMswoo+ArAWfc6du4dxgMiberr97m/J2dGW0BQzTf0=
Subject key identifier: 5B:4F:32:0B:2E:52:FB:8F:ED:E2:35:77:34:3D:3C:FF:32:F6:5A:4C
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 03C6A3B7
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/W08yCy5S-4_t4jV3ND08_zL2Wkw.roa
Signing time: Sat 01 Jan 2022 03:02:50 +0000
ROA not before: Sat 01 Jan 2022 03:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51431
IP address blocks: 185.137.24.0/24 maxlen: 24
185.137.27.0/24 maxlen: 24
185.137.25.0/24 maxlen: 24
185.191.77.0/24 maxlen: 24
185.191.76.0/22 maxlen: 24
185.191.76.0/24 maxlen: 24
185.191.78.0/24 maxlen: 24
185.191.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63349687 (0x3c6a3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Jan 1 03:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b4f320b2e52fb8fede23577343d3cff32f65a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:5c:61:ef:40:59:30:41:15:a5:0f:3a:6b:
9b:3b:76:19:bc:bb:19:65:98:e6:a1:38:f0:08:bd:
f2:17:71:aa:9b:af:5d:68:3f:44:aa:74:21:e2:bd:
75:a0:e1:e4:18:71:9f:5a:7e:54:8b:24:24:b7:d9:
e4:94:03:4f:be:2a:be:13:05:0f:5b:93:db:ed:58:
0c:98:b8:b0:54:83:6a:e8:19:65:2e:61:34:22:42:
30:21:93:54:18:53:f5:c8:63:43:16:b6:e0:c2:86:
14:c3:c0:b9:bc:b7:ad:10:66:b7:84:ff:d8:1c:e2:
54:25:db:27:c5:5d:f2:ae:77:2f:2e:f9:ab:35:40:
92:e5:25:b8:33:fd:28:b4:ec:d1:3d:54:5e:8a:39:
c1:5d:28:f7:db:32:b9:8a:96:4e:a3:99:06:7a:4e:
51:37:92:1b:d8:4e:a6:13:d0:36:22:53:16:c2:f6:
99:2c:69:1e:9b:2c:20:7c:db:57:4b:ba:bb:4c:5f:
9a:1b:39:05:a6:1d:28:ca:a7:08:4d:42:8b:0f:1c:
37:85:7e:a2:b2:1c:1b:92:a5:8e:b8:15:7c:9b:4a:
ed:96:86:af:c1:41:b4:09:ca:55:8c:79:4b:ec:16:
08:62:8a:3f:2f:ed:57:02:c7:89:e0:45:07:41:d9:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:32:0B:2E:52:FB:8F:ED:E2:35:77:34:3D:3C:FF:32:F6:5A:4C
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/W08yCy5S-4_t4jV3ND08_zL2Wkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.24.0/23
185.137.27.0/24
185.191.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:8f:67:85:06:b4:6f:ef:91:ba:59:86:e7:4d:5b:44:06:5b:
11:2c:f4:bf:07:4e:68:f9:6b:f5:7e:0f:2b:77:2f:37:42:eb:
55:09:9d:01:26:b4:03:95:f4:b4:73:7e:db:89:88:fc:05:30:
ee:78:5d:ad:36:be:c7:f2:18:b9:9e:78:d4:bf:ad:07:06:8c:
ff:8d:45:24:e6:b0:8d:4b:84:f8:9b:79:17:45:c6:66:50:d8:
df:ab:10:e2:6d:91:47:34:b3:20:f6:1b:61:37:70:c2:e8:cf:
65:f8:f1:72:03:7e:fa:ed:14:24:9e:68:0a:f7:98:cf:31:0d:
8f:88:54:58:e8:3e:48:ad:a3:05:f3:50:1b:f4:27:b4:73:76:
6d:15:af:2e:17:9d:4c:ea:d9:86:0b:c8:92:fb:1f:ff:95:0a:
0b:c3:5c:d0:47:31:90:17:59:0f:44:b4:40:80:5b:0b:e8:51:
8e:cc:2a:c4:88:27:32:36:65:59:d4:6d:14:cf:51:3a:8b:91:
89:3e:14:98:49:5d:3a:c3:b4:bd:d1:ef:75:9a:9b:72:be:4c:
9c:93:8a:b7:fe:d0:ab:dc:cf:04:6a:9b:7d:2b:d1:20:8d:ae:
57:7f:28:d9:f1:03:3e:d5:d1:ff:a4:80:16:95:97:9e:93:4e:
89:37:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:40 2023 by rpki-client on console-fra.rpki-client.org