Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/_WmfZHFxfbCWVP4zQV2NwS8IXFc.roa
File: _WmfZHFxfbCWVP4zQV2NwS8IXFc.roa (raw, json)
Hash identifier: OTDY3L8N7Ep8RBp26e9DBmVAHsvJff4p+V5AqszqnEA=
Subject key identifier: FD:69:9F:64:71:71:7D:B0:96:54:FE:33:41:5D:8D:C1:2F:08:5C:57
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 06A5EE89
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/_WmfZHFxfbCWVP4zQV2NwS8IXFc.roa
Signing time: Sat 01 Jan 2022 04:56:00 +0000
ROA not before: Sat 01 Jan 2022 04:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6461
IP address blocks: 185.237.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111537801 (0x6a5ee89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 1 04:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd699f6471717db09654fe33415d8dc12f085c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:39:3e:a5:e0:8a:4b:0b:56:d3:ea:1f:45:
29:df:3d:ac:f9:ca:63:40:0c:8e:2c:52:ed:71:a9:
4c:f1:4b:8a:d0:43:e7:59:06:25:81:99:7f:36:38:
34:4e:d6:20:0f:9c:ff:af:01:53:9f:58:e8:88:fe:
c6:fb:28:ed:68:c5:89:1b:ee:71:36:a6:a2:9a:57:
2a:81:f8:d5:a0:e0:b1:0b:4d:c7:1e:b8:28:36:fd:
90:3d:e3:0d:d9:cd:70:dd:1c:ed:e4:38:19:d0:4c:
9f:4d:90:de:a4:9f:18:3b:85:2e:c0:5c:df:ce:0b:
67:89:ca:e9:41:f9:16:ad:68:b0:68:95:2d:b4:87:
04:60:46:63:ee:84:24:d7:e4:52:95:02:93:56:81:
79:d0:11:f9:2f:32:f3:d5:4e:6d:2d:6d:1f:cb:c4:
fe:57:50:c1:af:4f:ab:e7:02:d2:cb:58:43:1a:76:
a5:7e:f3:93:dc:71:5f:a8:45:49:28:5e:74:e5:31:
4b:7b:42:e5:52:ef:fa:ce:a1:f2:a7:7e:28:70:63:
42:5b:33:27:00:e4:12:45:32:4c:ff:e1:df:36:f7:
d0:6a:f5:ce:98:d6:f8:18:f5:1a:1a:d8:49:86:3a:
0b:91:ee:9f:fc:e0:98:4e:28:17:9f:18:4e:25:2f:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:9F:64:71:71:7D:B0:96:54:FE:33:41:5D:8D:C1:2F:08:5C:57
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/_WmfZHFxfbCWVP4zQV2NwS8IXFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.35.0/24
Signature Algorithm: sha256WithRSAEncryption
06:34:a4:be:8c:ff:04:d6:cd:c2:86:61:89:de:b7:ef:ed:e8:
76:5a:07:c1:c8:03:a3:49:36:47:f4:b5:98:e8:79:55:0f:c2:
b9:0f:70:74:ce:3a:8c:d3:b1:c4:c5:dc:e7:ba:20:f7:de:15:
d8:38:61:6f:c3:3a:77:b6:2d:cd:49:9b:af:7e:fa:a9:59:43:
4b:3b:ad:c5:94:a7:2b:f6:8b:eb:ad:26:24:f7:4f:a8:c6:ab:
a9:e0:91:86:00:0c:6f:7f:66:21:96:6f:fa:cc:f8:e0:f0:6e:
0d:83:ce:54:0a:bb:c0:2a:f4:ad:b8:40:e0:0a:7d:f5:92:fc:
5f:10:93:00:45:b4:e4:2b:42:ce:8d:0c:9e:91:56:06:bc:11:
6d:e5:ec:0b:ec:a4:9e:65:13:3a:77:02:5b:75:69:86:a4:49:
52:ef:39:ee:2f:1a:fa:ea:e8:46:da:7e:a7:8d:d6:39:74:8d:
73:c5:0c:2c:f1:43:b3:74:87:ff:12:7b:c5:ce:fc:ce:40:3c:
13:59:1a:75:0f:7d:f4:d4:c0:8a:2e:8f:9e:60:84:80:29:c6:
4c:69:61:cd:97:63:45:c3:27:18:08:74:b7:8e:26:96:3d:b3:
54:b6:34:93:89:7c:9a:71:a0:fc:e1:b3:ec:ae:8e:72:8f:ac:
96:b8:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-ams.rpki-client.org