Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/WgLSLR6DHrb0A_Tf4Vy-jZEtgAw.roa
File: WgLSLR6DHrb0A_Tf4Vy-jZEtgAw.roa (raw, json)
Hash identifier: TFkYGJ3Qnufk6jMszCySeI7n9yWmIo5+1vxpkUJRznY=
Subject key identifier: 5A:02:D2:2D:1E:83:1E:B6:F4:03:F4:DF:E1:5C:BE:8D:91:2D:80:0C
Certificate issuer: /CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
Certificate serial: 015D8E31
Authority key identifier: 1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/WgLSLR6DHrb0A_Tf4Vy-jZEtgAw.roa
Signing time: Sun 13 Mar 2022 17:54:35 +0000
ROA not before: Sun 13 Mar 2022 17:54:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 188.244.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22908465 (0x15d8e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a8eeb83b5a1ed7d5caade8ef1004a5bac19f30f
Validity
Not Before: Mar 13 17:54:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a02d22d1e831eb6f403f4dfe15cbe8d912d800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:f9:43:3f:5f:5f:4e:3a:c9:0b:2e:5c:fd:
1d:a8:d2:23:a1:19:82:d2:ea:fa:13:b1:d9:89:c4:
c8:85:50:13:94:e2:d0:e3:df:bb:bd:95:2e:11:5a:
3b:a4:39:82:ae:da:6e:4d:f2:bc:10:93:7d:59:92:
28:1c:64:00:c0:0b:17:03:74:e4:bc:30:da:6d:67:
3d:c8:3a:b0:20:b5:8c:6c:0b:c4:05:47:cb:6c:45:
36:00:ab:6f:19:2e:7a:06:b1:46:ef:37:c9:7e:f1:
8f:82:cd:85:fa:8c:ec:85:34:b4:bc:93:fd:a8:6e:
66:eb:cf:28:5f:1f:f0:3a:23:69:4a:94:89:f9:d3:
61:70:cd:11:bf:47:87:8a:0e:aa:b0:d2:97:70:fd:
b4:d1:d6:d6:0a:90:5c:d9:a6:f5:65:6f:91:bf:76:
c9:14:5a:a2:71:d5:a2:e1:14:d5:52:59:3d:8c:d1:
24:09:b6:56:a3:dd:0b:2f:4e:e6:7d:33:12:c1:63:
e1:87:63:0b:6f:00:f4:e0:e4:53:c5:ed:a8:1d:80:
cf:1a:61:09:93:23:cf:d0:90:b7:25:ba:ee:9a:48:
89:db:d5:03:9f:93:89:b0:d3:42:d2:54:88:cb:51:
c2:93:ca:72:b8:d2:65:77:31:c6:49:34:bd:f4:af:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:D2:2D:1E:83:1E:B6:F4:03:F4:DF:E1:5C:BE:8D:91:2D:80:0C
X509v3 Authority Key Identifier:
keyid:1A:8E:EB:83:B5:A1:ED:7D:5C:AA:DE:8E:F1:00:4A:5B:AC:19:F3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/WgLSLR6DHrb0A_Tf4Vy-jZEtgAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9a262-3896-4b91-87e4-bd7379a9d043/1/Go7rg7Wh7X1cqt6O8QBKW6wZ8w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5f:81:f8:a5:ff:71:54:bb:b2:bc:a9:21:5c:38:d7:32:b3:
2c:84:19:89:34:03:1d:c0:d4:9e:0e:e6:e1:e2:aa:5d:fb:ba:
3a:f6:3a:17:f8:95:5d:89:cb:7d:70:ed:8f:c8:a5:82:ed:30:
8f:f3:1a:ca:c1:4e:6d:82:31:18:cb:56:82:3d:66:5d:c7:05:
00:2a:83:47:05:fe:15:c9:62:66:59:ec:2e:14:c6:e7:e1:0e:
9b:d8:d8:9a:fd:c6:e4:2b:c2:57:c9:b9:12:71:18:73:fd:7d:
5b:cb:9f:9e:b5:be:85:01:bf:d8:80:0a:1b:08:2d:c9:d3:a8:
01:59:51:1c:93:68:2b:2e:f4:ea:3b:df:e4:32:ef:0a:e9:fc:
c9:7c:7b:8b:ff:bb:d7:cf:07:3f:80:14:94:5f:66:40:4d:61:
24:35:b6:51:13:b8:e4:48:6c:dc:6a:8a:b5:98:76:eb:36:6e:
56:9d:bc:40:1d:c2:23:07:dc:85:b0:2c:e5:7e:27:1b:5e:26:
c6:d2:f6:c9:bc:94:44:a4:2f:f1:f4:15:3b:25:fa:2b:4a:96:
8f:a3:06:cc:f4:06:09:aa:df:92:96:d8:6a:80:2f:41:c6:b9:
38:5b:8d:3c:cf:dc:a5:6f:fa:df:5a:8b:ab:b6:f6:77:c9:ea:
8a:ba:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-ams.rpki-client.org