Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/wgMK3YYq120dVjbvnNnfGP-njjc.roa
File: wgMK3YYq120dVjbvnNnfGP-njjc.roa (raw, json)
Hash identifier: Sr8ysOKchg6+UsejP13cj1kDdXjCxd8gZ7drpVJa9to=
Subject key identifier: C2:03:0A:DD:86:2A:D7:6D:1D:56:36:EF:9C:D9:DF:18:FF:A7:8E:37
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 023620F3
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/wgMK3YYq120dVjbvnNnfGP-njjc.roa
Signing time: Sat 01 Jan 2022 11:59:48 +0000
ROA not before: Sat 01 Jan 2022 11:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6739
IP address blocks: 185.86.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37101811 (0x23620f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Jan 1 11:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2030add862ad76d1d5636ef9cd9df18ffa78e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:7b:4d:7b:f9:5b:05:bb:4f:c7:18:1a:70:
7d:be:3c:f5:84:f7:5f:7e:15:a4:fd:80:ee:25:d8:
12:ed:0b:5e:22:12:3c:38:fd:a3:0a:c1:f8:38:ea:
61:32:43:4f:07:02:3b:4f:20:e6:0d:9e:6b:dc:18:
b3:a6:d3:6a:9d:7e:cb:01:26:f8:f4:bb:30:c6:f0:
d4:e1:d3:75:12:86:48:d2:d6:8a:f7:01:6f:74:58:
25:58:a7:58:82:d2:67:19:77:1d:07:0e:e1:55:5e:
15:08:f5:e5:5f:f8:fb:d1:a0:90:7b:cd:06:fb:c3:
34:e8:53:3c:d0:6d:7f:3e:98:ad:66:46:0c:cb:73:
99:bf:d8:51:ce:4c:fd:21:57:f6:80:c3:9e:61:0b:
b3:5b:9e:dd:74:21:44:dc:4c:e7:03:ea:94:aa:d3:
85:a4:c0:6a:59:14:d1:95:a6:55:6b:c2:8d:e8:66:
8a:33:4c:cb:36:06:11:d1:73:cd:86:80:4e:37:7d:
ab:cf:6a:f0:e1:07:05:1c:73:ae:a5:82:10:31:1a:
46:60:3f:52:57:49:bc:22:18:23:25:34:f8:79:d1:
95:d4:c6:93:f1:cb:5e:bf:52:f5:a8:e3:f9:3e:75:
43:ed:38:8f:0f:fa:60:c0:8b:cd:51:f2:dd:00:5e:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:03:0A:DD:86:2A:D7:6D:1D:56:36:EF:9C:D9:DF:18:FF:A7:8E:37
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/wgMK3YYq120dVjbvnNnfGP-njjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.8.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c8:b7:18:d4:28:76:2a:d8:92:d9:22:f0:3a:97:f8:76:d1:
a1:3f:18:ec:66:fa:f2:fb:fd:6a:d8:d1:77:21:b2:50:f6:f3:
6d:83:07:16:e8:cf:05:16:bc:55:d0:a0:7a:89:4d:89:0f:e8:
8e:90:8f:40:72:9b:fa:e7:5f:70:d9:19:95:ef:1f:f1:ec:fd:
7e:1f:6c:e5:ea:b3:d1:42:85:c6:5d:6a:e9:d8:34:59:0f:fa:
2a:42:43:35:1d:cb:1a:6a:49:12:dd:f5:08:27:9b:fa:3c:17:
fb:a7:c9:ce:c4:f6:b6:68:ef:ce:37:fe:5a:79:5b:3f:de:21:
1a:58:ec:b5:c6:38:7a:a4:28:c1:e8:05:83:f5:eb:54:d7:3c:
47:a9:62:3a:d1:88:1d:47:89:9c:f6:6d:a2:7f:1f:af:76:f0:
77:8f:9e:3c:02:71:28:cc:3d:12:d5:fe:f7:85:db:34:b5:9a:
89:0a:a6:36:13:20:22:49:59:ef:d5:a0:d0:e0:b6:67:0b:5b:
31:aa:57:f2:ba:c2:8b:15:4e:4d:7c:6e:f4:41:09:07:96:ac:
e6:e3:d8:2a:50:8d:78:f0:b6:cf:11:2c:5c:23:34:0d:66:c7:
f9:64:cd:b4:a7:8f:73:ba:45:59:56:af:b4:72:a8:59:b0:c3:
de:0c:85:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:44 2023 by rpki-client on console-ams.rpki-client.org