Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/Wv3fAKqVVEnDuBDvQQOVP1MciXw.roa
File: Wv3fAKqVVEnDuBDvQQOVP1MciXw.roa (raw, json)
Hash identifier: 1ibP+Sk+X1scNTxrdtkb8sHRkpgEjW5x77ToZYdQgIY=
Subject key identifier: 5A:FD:DF:00:AA:95:54:49:C3:B8:10:EF:41:03:95:3F:53:1C:89:7C
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 0F5E161B
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/Wv3fAKqVVEnDuBDvQQOVP1MciXw.roa
Signing time: Mon 13 Jun 2022 12:30:44 +0000
ROA not before: Mon 13 Jun 2022 12:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134094
IP address blocks: 185.190.16.0/24 maxlen: 24
185.190.17.0/24 maxlen: 24
185.190.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257824283 (0xf5e161b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jun 13 12:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5afddf00aa955449c3b810ef4103953f531c897c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:01:ed:48:10:88:a8:50:78:7b:ba:c3:92:
db:b0:43:c9:b7:4b:24:d0:bd:10:70:00:59:0e:7c:
13:21:a2:b0:db:8f:e8:64:3f:7b:29:97:1e:29:22:
06:f3:9e:29:f0:fa:b2:2f:51:fc:8d:dd:33:c0:7b:
07:80:50:ea:d1:58:6c:de:97:14:47:50:34:64:77:
8a:88:a8:7c:fe:98:de:c8:20:13:6d:46:83:ae:0c:
4b:a5:6e:36:15:35:a2:a8:c3:90:b9:25:1e:b4:27:
b1:1d:45:cc:0c:a3:b4:d3:04:8e:83:dc:5b:6d:f4:
d2:ed:3e:f4:40:ec:73:a7:4f:d7:3a:4d:a7:e6:cc:
f9:fc:56:32:33:65:40:22:a4:b8:80:59:9c:e7:d6:
0e:47:97:6b:71:20:76:d3:fa:c8:e6:56:b5:1e:6e:
89:e2:87:ab:4e:c4:41:06:3a:73:a2:da:18:b0:5d:
b3:80:36:78:d8:b3:32:71:9d:e5:a0:e2:f4:a6:b8:
8b:e4:85:6a:62:9a:cd:93:9a:8a:78:4b:a4:65:79:
cc:ef:b2:d0:ff:61:18:5f:a9:42:8d:53:ae:d5:86:
54:15:84:2a:21:93:51:91:6d:73:40:d6:01:63:50:
a6:c6:19:e2:11:12:9c:60:4c:e2:bc:de:50:38:43:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:DF:00:AA:95:54:49:C3:B8:10:EF:41:03:95:3F:53:1C:89:7C
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/Wv3fAKqVVEnDuBDvQQOVP1MciXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.16.0/23
185.190.19.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f8:c4:d3:d8:36:30:e3:39:82:49:fa:43:bb:cf:51:fc:35:
1f:a7:44:79:08:49:74:2a:e1:06:b7:3a:f9:f8:39:b6:20:b0:
fc:e4:14:4c:ca:de:eb:48:9a:22:cc:e3:79:13:32:33:65:7e:
79:22:49:06:6e:fc:e1:40:b9:b9:73:c4:96:a0:35:47:77:79:
18:b8:13:e6:1d:3d:7b:ed:ec:ec:ab:33:b3:80:7e:71:b2:12:
00:b6:2f:81:a3:ab:8f:3c:91:81:6a:24:03:2a:59:d8:8b:22:
67:ca:aa:a8:af:9a:db:e6:12:6d:0e:d8:f0:11:b3:63:ba:93:
d3:2e:9b:b5:00:88:10:d6:b6:89:1c:d1:8d:c8:c6:97:88:1c:
df:4f:e7:d9:08:c9:bb:f0:fa:54:8b:c8:37:ee:21:78:31:1d:
3a:94:f6:23:f7:23:4d:2d:9a:7a:49:e8:b5:29:80:64:ee:f1:
5a:9e:3b:0d:72:a2:2d:82:fa:76:f2:10:e9:f1:8a:fe:f9:31:
c0:db:2c:92:77:58:74:d9:39:95:ba:ec:ad:a0:0d:f7:4a:51:
f8:2a:f8:fc:cd:0f:99:ad:14:63:7a:7c:41:f3:a3:91:6c:dc:
2a:2f:ad:0d:41:5b:8e:19:02:56:25:4a:fe:e9:4c:18:e0:6e:
0b:c2:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:20 2025 by rpki-client