Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wQXpZHnT1AOboVLLfDxwk06KrOA.roa
File: wQXpZHnT1AOboVLLfDxwk06KrOA.roa (raw, json)
Hash identifier: pUkFh2MXrkyf/+dsGFhG0zyDSFpLWU9vfFTRTd/ADLo=
Subject key identifier: C1:05:E9:64:79:D3:D4:03:9B:A1:52:CB:7C:3C:70:93:4E:8A:AC:E0
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 15640A3C
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wQXpZHnT1AOboVLLfDxwk06KrOA.roa
Signing time: Sat 01 Jan 2022 11:55:39 +0000
ROA not before: Sat 01 Jan 2022 11:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141039
IP address blocks: 185.65.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358877756 (0x15640a3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 11:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c105e96479d3d4039ba152cb7c3c70934e8aace0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:f4:27:c2:6e:5b:a3:f1:36:32:6a:16:c1:
5e:a4:ee:e9:ec:68:17:41:da:29:2d:c9:e9:22:7b:
36:b1:69:75:2f:2d:3d:32:8c:a5:73:69:66:0c:5e:
ff:31:3c:39:5c:d9:0a:4f:cc:41:8b:ee:97:a4:f7:
0d:cb:73:90:2a:5e:d9:c6:93:55:3f:22:a6:b5:01:
c0:01:b8:a5:72:69:24:80:0c:46:87:df:e1:b7:8f:
62:bc:78:ac:6f:e1:79:fa:5e:47:82:f1:a5:31:23:
b5:74:cf:11:8a:85:7a:b1:ac:a7:fe:b9:0c:d2:cb:
99:93:41:ff:9f:33:04:d2:88:18:85:8e:ce:88:65:
38:a0:ab:1c:3d:51:14:45:f0:6a:ed:62:90:ab:3b:
80:ca:f3:7c:07:96:a0:3b:63:a4:29:70:81:ad:15:
1b:91:fc:8a:3b:e2:0c:99:9f:e9:9a:9e:e1:11:82:
cf:1d:6a:81:25:f0:11:50:e7:e3:e5:9e:af:0a:8d:
06:de:d8:03:13:7b:ac:5f:b1:52:22:d9:77:eb:37:
7d:e4:7c:18:fd:17:4d:3f:f3:2a:0c:d7:d6:69:35:
f5:49:5a:96:1a:94:51:ac:65:1d:4c:54:69:16:4f:
04:59:b7:c4:95:0b:a4:36:de:f9:96:c8:35:70:59:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:E9:64:79:D3:D4:03:9B:A1:52:CB:7C:3C:70:93:4E:8A:AC:E0
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/wQXpZHnT1AOboVLLfDxwk06KrOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.50.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fc:30:ce:ea:43:88:08:ff:2e:7a:d5:56:97:63:2e:85:fc:
18:4c:0d:bf:cf:cc:49:b1:c0:af:fd:7a:79:a0:64:8d:f4:81:
39:df:5b:2b:35:09:1b:dd:60:2a:84:0d:f8:27:47:cc:d0:c6:
3a:16:4d:6e:7d:55:12:13:43:f2:37:e7:9b:87:cd:2a:83:76:
38:15:42:4f:4a:05:03:12:5a:02:3b:47:13:d2:2d:f9:13:bd:
ab:f8:6c:d2:91:e6:bb:82:0a:e2:10:5d:bd:1f:d7:bf:f1:bb:
53:30:15:65:ad:2f:eb:b2:00:f7:23:ca:9f:52:09:62:03:67:
fe:54:2f:c0:4b:d1:3d:3c:9c:7e:59:04:c7:91:40:05:37:df:
3a:e6:e0:52:b2:93:86:05:08:e0:65:ed:a5:4a:d3:7d:81:f0:
1f:5f:9c:c2:de:6e:92:24:7e:cf:32:0b:81:34:26:cb:a6:95:
ac:b3:b2:ad:a4:25:b0:33:61:d8:b2:d0:e4:b8:a4:c5:b2:f2:
37:21:c1:30:16:84:39:cd:b4:46:b2:20:77:8c:e1:7b:53:e8:
d9:4f:fe:75:17:c6:76:52:b3:7a:05:ea:59:d2:e1:95:f5:e1:
11:10:36:55:47:03:a7:01:43:11:81:af:c8:9f:f5:b4:a4:5c:
e2:d5:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-fra.rpki-client.org