Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/oWolf8Kr8gd6E0HIZ1ahdWDTIHE.roa
File: oWolf8Kr8gd6E0HIZ1ahdWDTIHE.roa (raw, json)
Hash identifier: 3vK56+O7346/BNqJQWsDF5kPt/N65jI6VUFdRx8o5Ik=
Subject key identifier: A1:6A:25:7F:C2:AB:F2:07:7A:13:41:C8:67:56:A1:75:60:D3:20:71
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 1203ED48
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/oWolf8Kr8gd6E0HIZ1ahdWDTIHE.roa
Signing time: Sat 01 Jan 2022 06:52:05 +0000
ROA not before: Sat 01 Jan 2022 06:52:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42148
IP address blocks: 185.150.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302247240 (0x1203ed48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Jan 1 06:52:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a16a257fc2abf2077a1341c86756a17560d32071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:52:70:12:a4:85:d5:ab:f8:bd:8a:af:c3:
71:fd:32:6d:67:bc:5a:a5:75:64:ba:0e:6f:66:57:
97:f9:19:61:58:e1:29:58:e7:91:ea:ae:6f:da:cf:
c8:82:61:b6:5d:f1:24:f2:08:c6:31:33:7f:e5:2c:
bc:1f:70:17:d0:e2:15:c6:5f:6c:4c:ec:fd:f4:f4:
63:e8:b6:b6:12:63:66:0a:4e:53:69:31:94:2e:6b:
3a:1d:0e:f0:d0:ae:44:c9:89:14:a8:23:06:6b:15:
73:17:33:f5:62:e6:49:7d:f2:b1:b0:3f:c6:38:94:
67:2f:7d:d3:37:f5:5e:92:b9:51:a9:04:55:66:ac:
46:11:af:64:89:0b:4f:c0:3f:4d:58:f9:4b:7d:9d:
72:be:15:39:94:2c:ee:d0:2a:38:52:08:d6:06:7d:
52:dc:5f:0f:8c:9b:7c:59:18:ee:03:61:98:c0:7b:
8c:80:77:09:b6:db:fe:49:12:04:3b:84:97:5e:0a:
dc:a6:68:69:04:0f:bf:e0:8a:8e:86:00:13:d6:34:
4a:a2:38:74:13:35:a9:8e:c3:f6:17:c9:d7:f0:99:
af:70:19:65:92:93:79:e4:bc:28:07:c7:3f:bb:77:
7a:af:e4:73:4f:61:90:7b:61:81:d9:a6:5e:57:3e:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6A:25:7F:C2:AB:F2:07:7A:13:41:C8:67:56:A1:75:60:D3:20:71
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/oWolf8Kr8gd6E0HIZ1ahdWDTIHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.152.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d6:db:14:c8:14:e3:1a:69:83:26:d0:f5:53:29:c0:ac:7d:
16:76:21:bb:c6:d8:f7:00:fd:83:26:23:54:24:18:9b:29:12:
6f:92:24:6b:6e:07:29:f6:f2:6a:fb:79:84:16:e8:6f:a2:02:
1d:35:ab:18:41:d7:47:2c:5b:38:e2:77:de:3a:ea:05:3d:d9:
d4:49:20:c4:0d:20:27:6a:d9:ab:ce:6f:e4:77:89:be:33:37:
fc:1a:6c:ad:3c:f6:6e:bd:57:0e:32:95:f1:39:14:47:69:b2:
b2:30:69:ab:de:db:2e:bd:b4:cd:3c:27:a9:ad:66:2d:89:b9:
0f:c5:ba:09:16:8d:0f:9d:c0:ba:11:77:b3:24:6e:d4:2d:09:
d1:4e:8d:a1:69:32:e2:a8:48:bd:05:76:a6:1d:ec:4a:c0:60:
02:cc:6e:2d:2a:5c:07:d4:20:ab:14:4d:ff:74:9f:93:ab:0f:
ee:2a:7c:6e:d6:4c:bc:c5:6a:6b:7a:5b:73:06:50:56:44:a4:
1a:9f:d0:b0:9e:90:98:41:e6:9b:7d:4d:08:75:c1:25:d5:0a:
a1:6a:3d:9a:a3:41:58:35:b8:c1:d3:a0:f7:ba:1c:fd:12:d7:
e0:51:a4:71:53:8d:9f:20:5d:8f:ef:e3:18:e9:e6:d7:d0:fe:
c2:f9:e5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:28 2025 by rpki-client