Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/wPhOVKwtjmjv106-d7XCuusv1gA.roa
File: wPhOVKwtjmjv106-d7XCuusv1gA.roa (raw, json)
Hash identifier: 0zGN/ivUXlsRB3Kk9DvdqBydaUr5xRM1ujq8SYkSb9o=
Subject key identifier: C0:F8:4E:54:AC:2D:8E:68:EF:D7:4E:BE:77:B5:C2:BA:EB:2F:D6:00
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 3879F59E
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/wPhOVKwtjmjv106-d7XCuusv1gA.roa
Signing time: Sun 08 May 2022 02:20:23 +0000
ROA not before: Sun 08 May 2022 02:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.148.216.0/21 maxlen: 24
195.191.102.0/23 maxlen: 24
37.148.220.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947516830 (0x3879f59e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: May 8 02:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0f84e54ac2d8e68efd74ebe77b5c2baeb2fd600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:d2:b0:d8:11:6e:63:92:bb:0d:b1:36:8d:
8d:20:13:07:fd:8e:90:fa:4e:de:f6:ab:d8:59:d0:
db:61:75:1c:a4:bd:53:26:e6:20:5e:16:f2:22:55:
ce:e6:3e:5c:b0:71:1a:63:23:94:fd:c6:39:f9:b6:
f8:cf:9b:31:a0:39:9a:0c:f1:6b:ad:0f:b5:96:9a:
90:d8:c6:56:e2:c7:ee:b7:07:2f:6d:6b:14:92:6c:
8f:f6:15:40:c6:24:93:9c:e9:4d:9b:0e:30:ee:70:
03:c4:fc:47:26:37:8c:a4:ee:29:49:27:e3:3a:84:
98:a5:a6:cd:bc:4c:6b:bf:98:b3:55:0c:b3:d1:6b:
22:aa:e8:d6:cc:04:6c:f2:0c:bd:20:0b:ec:98:39:
c6:ca:10:07:0f:cf:4b:be:38:20:a1:ee:f2:ca:e6:
a8:60:15:25:5c:2c:8e:a6:d5:5d:85:d1:25:53:52:
13:65:5c:b9:b3:b6:58:7b:1d:dc:be:3c:b9:b6:38:
55:cf:72:d9:5d:0f:e4:17:3a:d8:a0:16:e5:a5:ca:
af:cc:c2:ca:97:c7:fc:60:6f:36:bc:0a:53:be:28:
bf:65:f2:24:5f:47:f6:cc:6d:66:d2:4d:0b:0b:16:
50:85:ad:17:b5:65:fd:c0:87:09:40:d8:48:40:0d:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F8:4E:54:AC:2D:8E:68:EF:D7:4E:BE:77:B5:C2:BA:EB:2F:D6:00
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/wPhOVKwtjmjv106-d7XCuusv1gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.216.0/21
195.191.102.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:46:8c:30:08:58:4c:f8:28:38:b2:c5:8c:64:ce:10:aa:fa:
02:28:93:55:46:99:53:a2:4f:bb:34:f3:86:08:8f:e9:7f:b0:
f3:d9:8e:b1:4e:b0:2d:6d:9c:ea:aa:71:a2:40:f3:61:10:50:
cb:8c:6b:b6:9e:92:7e:e6:2e:e4:9a:6d:6d:77:d0:4e:58:97:
d5:ad:23:16:ab:b6:f8:8a:60:e0:28:17:ec:54:8b:ae:9e:d8:
a1:3a:5a:e7:7e:ee:ad:37:81:49:e7:c0:ae:a8:4b:f1:59:ba:
b5:9a:42:3e:06:91:c5:5b:dd:01:2b:b0:fc:60:f7:57:29:56:
45:99:c1:6b:aa:b1:bb:be:fc:b4:c6:ae:2c:72:bf:fc:90:f0:
82:38:91:79:21:ff:1f:0b:85:76:28:9d:a9:9e:33:56:f0:ed:
b9:fb:d0:d9:1c:38:21:23:c8:56:dc:ff:52:8f:2d:0f:65:5e:
fe:9f:e7:cb:89:44:3e:ad:3e:cb:94:14:63:4d:85:a0:23:77:
c2:a9:97:b4:ab:4b:cc:a2:33:8a:40:32:3f:81:2e:7b:ed:b9:
ec:be:be:d6:41:8d:49:39:71:9a:3a:29:e8:fa:57:b7:3a:2c:
66:48:8a:e5:07:5d:0b:23:1a:f8:5c:ea:cc:a2:12:d3:57:ce:
63:84:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:30 2024 by rpki-client on console-ams.rpki-client.org