Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/s-wBDMm_nVNM5clNPmNuvKbOWL8.roa
File: s-wBDMm_nVNM5clNPmNuvKbOWL8.roa (raw, json)
Hash identifier: rPwT0TbfOCCG4WNKAfyDCqNSieQ4D6+t7hU7thFWIBk=
Subject key identifier: B3:EC:01:0C:C9:BF:9D:53:4C:E5:C9:4D:3E:63:6E:BC:A6:CE:58:BF
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01837949E1D3A5360FFD8300BE1A380B437D
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/s-wBDMm_nVNM5clNPmNuvKbOWL8.roa
Signing time: Mon 26 Sep 2022 10:13:48 +0000
ROA not before: Mon 26 Sep 2022 10:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35758
IP address blocks: 185.200.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:49:e1:d3:a5:36:0f:fd:83:00:be:1a:38:0b:43:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Sep 26 10:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3ec010cc9bf9d534ce5c94d3e636ebca6ce58bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:15:0b:9e:03:81:1d:c9:96:d8:00:dd:8e:
77:82:c4:78:62:56:56:91:66:f4:0b:7e:ea:de:76:
5a:6a:e5:82:34:37:da:e4:77:d3:69:cc:b7:c0:49:
23:b1:a2:57:06:02:ff:43:01:39:98:a7:be:3d:88:
69:e5:70:13:f2:56:42:c4:80:3e:75:87:88:2c:10:
5c:97:63:f6:a0:ab:f5:a1:35:9a:e3:8f:f7:77:39:
72:70:9b:9e:43:07:0e:42:3d:2f:d5:2f:8b:67:1f:
a4:0f:7a:7d:b9:3a:90:6c:2b:85:dd:6d:98:bf:5e:
20:88:95:71:a5:4f:49:19:65:14:b6:fd:05:68:30:
eb:49:bb:8d:c0:6a:f5:af:ed:25:b3:8d:ed:12:d3:
fd:82:33:99:93:83:ee:d7:bf:f5:b5:13:ea:0f:a0:
99:5f:d2:fb:7b:67:ba:8d:f3:17:f7:df:36:de:f5:
d4:d0:24:cd:be:59:16:b2:b9:45:11:bc:a7:2b:56:
bc:be:87:e5:7d:92:86:20:e5:ab:2d:b0:98:d3:37:
8f:a5:49:99:9e:cd:4a:3a:07:f6:42:61:9a:69:7a:
9e:aa:d6:8f:2a:2e:2c:b2:45:f2:7c:e3:08:54:5b:
0f:47:33:31:83:cb:9f:08:16:a7:3d:42:99:ca:fb:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EC:01:0C:C9:BF:9D:53:4C:E5:C9:4D:3E:63:6E:BC:A6:CE:58:BF
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/s-wBDMm_nVNM5clNPmNuvKbOWL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:00:31:e6:c6:a1:b9:bc:ff:b6:38:58:0f:47:4e:45:83:62:
0a:67:98:7e:14:5a:a5:d0:29:48:00:71:cf:ee:f3:b2:dd:94:
61:60:2a:42:82:69:88:88:0b:58:7e:d7:4a:79:af:b3:fd:c6:
a4:13:fb:a6:1e:f1:24:9d:1c:21:8c:71:e8:c5:6c:76:1d:82:
a2:59:76:66:d2:c8:ef:51:49:4a:c1:95:c1:1d:68:8f:41:7f:
75:3f:9b:47:e3:c6:d3:be:a4:b7:de:8c:78:36:7c:d5:33:31:
e9:49:ec:75:a5:c5:e8:08:c3:08:0b:26:83:79:97:17:8b:f4:
f6:86:6f:cc:6b:ab:5b:5a:eb:11:7d:1a:37:08:50:cb:f2:af:
d5:d6:89:eb:e5:d6:68:8b:76:8c:4f:a9:4c:e6:d9:03:a0:58:
7c:78:31:ed:9c:4c:89:cd:81:b1:2b:12:d8:d1:21:4b:c7:aa:
b0:45:20:ca:ce:c4:3f:2a:4a:f9:63:38:9b:ef:a4:c1:2a:b5:
33:2c:79:4d:0c:bf:92:33:e7:22:d0:93:3d:4e:5f:d0:fe:47:
b2:8a:a0:5a:47:4f:83:af:37:b9:40:ae:69:1e:95:2b:8b:b2:
e2:9b:45:c2:35:b8:a8:05:4b:d2:b7:3f:5a:b0:54:e5:73:a0:
69:00:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:29 2024 by rpki-client on console-ams.rpki-client.org