Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/WAv97D18sWQ_9IbfvBaQHD2NptY.roa
File: WAv97D18sWQ_9IbfvBaQHD2NptY.roa (raw, json)
Hash identifier: 4N7SXhBAWhqIBt8K4JOb6sOXV4HyJ0O/b/5rh24PHDM=
Subject key identifier: 58:0B:FD:EC:3D:7C:B1:64:3F:F4:86:DF:BC:16:90:1C:3D:8D:A6:D6
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 063FBD6F
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/WAv97D18sWQ_9IbfvBaQHD2NptY.roa
Signing time: Sat 12 Mar 2022 17:12:12 +0000
ROA not before: Sat 12 Mar 2022 17:12:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.149.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104840559 (0x63fbd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Mar 12 17:12:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=580bfdec3d7cb1643ff486dfbc16901c3d8da6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:32:b9:f6:f0:29:99:a8:77:f5:95:09:6a:
69:55:e3:22:4a:97:b1:21:6a:ea:f7:68:2c:3c:cc:
73:99:fa:54:02:04:31:13:a3:54:46:ab:be:cf:59:
c7:e2:2e:39:13:3f:b2:e6:eb:6f:79:a2:bd:1d:05:
36:63:5e:85:ca:c4:f0:87:cd:2c:f1:07:2a:32:0b:
e0:1e:fb:7b:da:fc:a4:4f:aa:fe:15:e4:93:dd:d2:
b8:90:c4:89:6a:04:e3:12:ea:5b:45:96:02:84:74:
c4:9d:76:36:2a:a8:c8:f8:e7:3a:26:ab:2c:a9:7e:
04:56:3c:55:cf:51:8f:a4:48:df:66:8d:9b:5e:d4:
a3:98:88:47:79:64:f7:6b:c9:08:ed:98:05:96:ab:
24:88:c3:65:d5:ae:9d:aa:c0:57:08:0c:ae:5f:8f:
ee:35:09:b3:ce:a0:ad:6b:f9:c8:f3:6e:42:4f:8c:
10:f4:2b:af:cf:d0:e5:c9:58:8c:47:ee:90:88:b9:
71:57:31:01:f6:5f:3b:7c:cd:26:4a:5e:7b:dc:48:
cf:9a:86:46:89:5a:35:18:f2:73:c4:6d:03:83:11:
74:52:34:e9:d7:e4:81:b6:24:52:c0:82:29:f8:c9:
77:8a:7b:4c:2d:c4:c3:6c:f8:79:a0:51:d5:be:ae:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:FD:EC:3D:7C:B1:64:3F:F4:86:DF:BC:16:90:1C:3D:8D:A6:D6
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/WAv97D18sWQ_9IbfvBaQHD2NptY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ab:7c:bd:ca:55:85:81:05:b6:f8:fa:6a:ce:f8:5d:25:10:
61:82:cc:39:ac:5d:34:52:2a:cc:81:2c:da:c7:f8:02:dd:4e:
54:bd:4e:6f:a7:8a:2a:93:3f:9f:45:e3:b7:74:6a:70:b3:e6:
80:e3:41:78:cd:79:77:b9:0f:c2:25:0f:5d:80:72:38:71:96:
03:2e:3f:33:c7:90:2b:74:de:ac:59:5d:f8:1c:9f:b5:58:1e:
9a:bb:05:dd:f2:3b:71:42:f8:d8:a4:62:ee:11:cb:e0:75:24:
ce:98:13:fc:f4:04:74:49:e8:a0:3c:21:43:f7:2b:97:ba:02:
ae:5d:4f:32:c7:b3:23:41:08:fc:b8:d9:55:eb:42:46:87:a7:
62:9d:14:c4:6c:23:55:be:98:ea:51:61:dc:e5:7a:56:55:89:
68:02:c5:14:25:4c:40:76:86:b6:a0:fd:1a:08:4e:ad:b9:d7:
56:e0:89:28:9a:4a:7a:30:1d:35:fd:f2:88:6f:32:6d:e8:49:
47:0c:ff:81:83:9a:a1:03:d7:de:55:52:dc:5d:4a:a1:03:27:
a2:f3:f1:ad:e9:3c:2b:d0:04:9d:e9:42:b1:02:06:d9:39:b8:
7b:8f:3a:94:9e:aa:a9:f8:54:22:87:ce:bc:59:44:e3:1f:65:
3b:90:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org