Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/WygVfqK6OfWuGnPGJpRnJCoow8Y.roa
File: WygVfqK6OfWuGnPGJpRnJCoow8Y.roa (raw, json)
Hash identifier: VZXJqYS5kYu6Y63kGYujBy+O3bl2Pws94W+pRZyjxD8=
Subject key identifier: 5B:28:15:7E:A2:BA:39:F5:AE:1A:73:C6:26:94:67:24:2A:28:C3:C6
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0A8161D0
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/WygVfqK6OfWuGnPGJpRnJCoow8Y.roa
Signing time: Sat 01 Jan 2022 08:02:23 +0000
ROA not before: Sat 01 Jan 2022 08:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212298
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176251344 (0xa8161d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 1 08:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b28157ea2ba39f5ae1a73c6269467242a28c3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:77:1a:26:6b:7a:62:f9:ae:19:8f:83:8d:
ba:d0:29:55:14:d4:6a:62:a4:32:d1:74:2d:c4:8e:
68:74:cd:93:41:64:73:bd:10:ea:1f:a9:88:ab:88:
fa:db:9b:28:d7:54:2d:f4:46:f1:a0:4a:22:da:f6:
f0:63:f9:c0:95:39:f2:35:be:48:ed:ad:39:d9:6e:
b1:5b:6f:9a:f4:0a:4d:1c:84:8a:1d:b9:bc:5f:47:
54:24:1f:30:a4:be:ef:f3:25:07:e5:63:e0:19:3b:
3d:15:91:68:48:bf:57:8a:28:60:9d:ea:83:6c:a2:
2c:d9:87:b8:46:b4:1c:b1:e0:e3:57:00:13:c5:02:
b3:4c:f5:e7:56:7c:37:9a:d9:23:5f:13:5a:ef:2b:
8a:df:5c:0e:a3:65:70:e6:b4:a1:1f:27:ec:8e:d5:
fc:44:d5:a2:69:ad:f6:26:57:e8:5b:d4:8c:14:67:
b6:cf:7f:4e:a5:a5:eb:e0:d6:bf:22:d1:fa:df:0f:
27:19:4a:23:7b:38:12:9c:a2:c4:c2:a9:a7:61:79:
ff:41:06:21:1a:a3:b0:e9:0c:d2:41:ac:ec:b3:82:
9a:0b:22:ba:f1:cb:21:0c:98:eb:e3:c0:c0:25:9c:
da:38:57:30:1f:14:c1:3d:95:0a:69:7f:7b:6f:be:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:15:7E:A2:BA:39:F5:AE:1A:73:C6:26:94:67:24:2A:28:C3:C6
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/WygVfqK6OfWuGnPGJpRnJCoow8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:04:4b:05:b5:6f:08:b3:d3:10:f5:cf:d3:61:cf:36:b4:41:
8d:79:33:28:b7:fa:d9:a7:f2:5a:f9:63:e9:08:c1:79:de:4a:
49:02:6f:1d:a4:18:6f:21:f7:f8:ea:93:c3:f9:4b:18:11:9f:
58:d1:fb:18:b6:f4:6b:4c:dc:cf:86:5a:26:3b:77:02:b5:27:
ee:af:4f:57:37:03:3f:ab:a9:e3:65:76:fd:27:91:a2:db:9a:
73:eb:94:9f:ab:ee:07:00:d4:6e:dc:83:ef:0d:7a:28:36:f1:
64:92:2d:ea:9f:bb:a4:16:c2:d3:f1:94:33:db:61:aa:50:23:
2f:aa:5d:ef:d1:a5:b8:0f:20:59:aa:40:95:51:9c:cf:a5:4f:
96:d2:90:32:bf:1a:76:84:70:c2:e6:f9:f3:2e:90:ce:43:94:
09:80:75:1d:c6:d9:71:57:f1:31:cf:ff:81:85:05:5e:5d:66:
d9:03:15:69:9e:0e:12:14:24:49:6e:46:ad:4d:76:51:c8:04:
3b:55:a1:6c:71:2e:0e:04:a8:0a:27:57:70:f9:f4:5c:4c:27:
7e:ca:0b:b3:f3:50:0a:7a:ba:97:8d:c0:5f:bd:92:0e:6b:93:
49:1c:c0:7e:4b:97:bb:44:b8:d9:f4:31:79:c7:0b:a8:ff:db:
0b:37:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org