Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Wef0elcXuYhNXfPYARtWvbFoqBk.roa
File: Wef0elcXuYhNXfPYARtWvbFoqBk.roa (raw, json)
Hash identifier: dS/FQyE9xxfwIb/M5M5fWClp8GZfP+Ys4ztHyvivkbY=
Subject key identifier: 59:E7:F4:7A:57:17:B9:88:4D:5D:F3:D8:01:1B:56:BD:B1:68:A8:19
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 01F02797
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Wef0elcXuYhNXfPYARtWvbFoqBk.roa
Signing time: Sat 01 Jan 2022 15:06:15 +0000
ROA not before: Sat 01 Jan 2022 15:06:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12129
IP address blocks: 176.111.221.0/24 maxlen: 24
147.189.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32515991 (0x1f02797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 15:06:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59e7f47a5717b9884d5df3d8011b56bdb168a819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:1f:b5:60:de:bb:b9:cd:0d:f0:a0:b5:c1:
16:2d:5b:7a:70:55:bf:03:36:e1:36:08:c8:90:15:
03:98:31:07:d2:c9:18:3f:4e:50:fd:96:c1:ca:5f:
3d:b0:b0:21:a3:05:47:ca:73:df:90:78:a8:6b:74:
db:33:2d:f1:a4:72:57:67:e8:45:6b:e0:a9:c9:cb:
b2:e2:e4:86:b1:87:41:77:cc:fc:74:1b:4e:6b:26:
b9:27:be:58:ff:66:f7:3e:c6:36:ee:49:e6:36:7d:
c4:ff:ed:1a:fe:b9:a4:80:37:ea:dd:96:e0:84:ba:
32:6f:c8:c5:00:7f:2f:2b:bd:2c:d3:5e:9a:29:59:
35:29:ab:72:4c:21:a8:be:2e:ca:98:ad:30:50:24:
93:3e:b0:35:05:d3:18:5f:7d:56:2e:b9:d4:f8:46:
9e:45:ec:3f:a2:9b:e6:01:ae:94:94:a4:59:5b:0c:
84:f1:32:18:f5:80:0b:e3:07:32:32:99:47:57:5c:
33:aa:19:f2:ae:02:09:4a:70:9b:0c:4c:43:c8:1c:
38:ba:c2:95:65:72:08:f5:99:20:45:de:e4:b3:90:
b6:a8:5e:d8:65:b9:22:c9:2b:06:f3:b9:4c:ed:33:
d3:ea:ff:09:f5:97:d6:ef:10:5b:55:73:f4:31:8c:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:F4:7A:57:17:B9:88:4D:5D:F3:D8:01:1B:56:BD:B1:68:A8:19
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Wef0elcXuYhNXfPYARtWvbFoqBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.140.0/24
176.111.221.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a5:30:f9:8e:a9:0a:3e:51:b0:cf:0e:f4:3d:76:b7:fd:17:
ca:e6:dd:25:69:a3:db:05:ef:7d:1a:46:6f:70:24:cd:87:f2:
d4:5c:9b:5a:3c:83:37:dd:d6:08:8b:66:c0:5e:2f:5c:53:87:
32:27:8c:de:36:2c:b1:80:3d:c2:82:15:26:23:8c:59:e5:f2:
ef:67:5e:f6:bf:6c:b1:80:cd:61:10:09:16:76:44:38:52:73:
8c:6e:b3:c4:ba:85:16:17:d0:27:5b:a4:b7:e6:b1:cd:5a:13:
8d:33:33:6e:8c:87:d9:e5:2a:39:69:af:69:14:f4:00:af:7e:
ef:49:60:51:3f:e2:19:7e:ea:4f:bb:74:39:12:64:21:d6:f6:
20:36:43:65:fd:16:9d:42:d0:dc:6e:0f:6c:b4:31:89:62:9e:
26:bf:b7:00:71:2b:51:fb:19:b6:4c:5f:0c:d3:cc:6f:1f:38:
3a:1d:97:15:2c:c1:80:79:1b:5e:08:8a:d9:81:f4:f2:51:bf:
9b:c7:11:ad:79:52:f6:d8:c6:15:30:4d:a1:c6:c5:a5:bd:6d:
02:2e:e5:2f:e7:94:63:b5:1c:8e:ef:24:24:25:b8:10:a3:dc:
b0:ce:d7:fb:41:0f:0e:86:ac:af:51:cd:1c:ca:60:be:b6:4d:
a0:64:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-ams.rpki-client.org