Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/wUeoez2dsw7HKsWIkfmMVxsefy4.roa
File: wUeoez2dsw7HKsWIkfmMVxsefy4.roa (raw, json)
Hash identifier: ww8Qc1GsOwyybVF6IA6XYET8sFVW+e7+TKUDSZN4s3Y=
Subject key identifier: C1:47:A8:7B:3D:9D:B3:0E:C7:2A:C5:88:91:F9:8C:57:1B:1E:7F:2E
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 01C45D
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/wUeoez2dsw7HKsWIkfmMVxsefy4.roa
Signing time: Tue 22 Mar 2022 18:39:40 +0000
ROA not before: Tue 22 Mar 2022 18:39:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12400
IP address blocks: 185.151.196.0/23 maxlen: 23
185.151.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115805 (0x1c45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Mar 22 18:39:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c147a87b3d9db30ec72ac58891f98c571b1e7f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:18:c0:21:5b:5a:71:d8:00:47:91:bf:3c:
61:df:4f:b6:a5:0c:f5:fa:5a:7f:2a:dd:2f:3a:a3:
64:76:53:94:21:73:f8:65:f2:83:38:77:eb:f3:26:
1f:fa:df:ff:d4:c3:04:88:2d:51:01:55:20:a5:53:
bb:71:a7:33:9f:91:b1:f1:f6:aa:13:cf:8f:a5:c5:
18:f9:76:b8:9d:8d:6f:bc:fc:cf:f7:7c:07:02:7f:
c2:b1:af:18:ff:72:88:41:17:7a:0b:33:c5:b1:f1:
81:f0:83:85:e4:82:bd:ea:61:81:26:6a:b2:81:58:
6d:e7:16:1e:e6:66:76:ec:a9:9a:a3:87:bf:57:f9:
b3:33:72:b9:4c:97:13:59:fd:0e:7f:ff:96:67:2d:
fe:e4:23:d8:4d:6f:5d:e4:5a:f3:0e:80:ed:67:01:
2a:67:a6:64:a9:3e:16:5b:8e:74:26:c6:c6:d8:44:
1d:98:14:66:f3:af:16:69:1a:f0:db:66:65:b4:88:
d7:b2:d6:a3:7e:f8:aa:0a:eb:dd:65:dc:d6:33:22:
f6:48:04:cb:ce:87:05:c5:fa:64:08:eb:66:00:2c:
21:6b:78:87:b1:12:d9:5f:6a:17:b7:a6:b8:b5:59:
b2:ce:e7:68:e1:b8:27:32:f6:fb:79:24:49:36:f5:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:A8:7B:3D:9D:B3:0E:C7:2A:C5:88:91:F9:8C:57:1B:1E:7F:2E
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/wUeoez2dsw7HKsWIkfmMVxsefy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.196.0-185.151.198.255
Signature Algorithm: sha256WithRSAEncryption
80:60:d2:ea:33:97:48:64:4d:8b:ab:a5:c3:5d:71:d7:22:ec:
38:d8:0f:e9:28:cc:18:99:db:1b:52:67:42:d7:bc:34:9e:9a:
0e:6d:5c:59:8b:03:2a:62:91:3c:11:62:2c:4c:5d:cb:c1:f1:
88:37:84:fc:1f:3d:a0:84:a6:e1:ba:71:9e:4e:a3:8e:da:b9:
93:55:d7:10:db:20:1e:9d:6d:35:1a:c0:17:9d:8f:21:93:97:
38:82:9c:53:b3:c5:42:ba:a2:64:3d:41:82:bc:a7:1c:b7:63:
7b:d4:c8:b8:4f:ce:63:fe:b1:53:2b:c5:60:55:7b:f4:91:fb:
7e:43:09:48:a9:34:b1:09:32:01:56:d5:fd:5d:c9:aa:a9:dc:
85:89:74:96:74:3c:be:c0:92:94:93:ab:4c:d4:5b:c5:90:98:
a3:17:c0:1d:0e:53:0a:e2:93:8e:f4:b8:e0:9f:11:02:19:7a:
32:47:c6:c1:e5:9b:cd:41:bb:f4:82:af:5b:91:b5:c6:cd:a9:
c3:10:1f:d1:2d:74:8e:23:40:a9:35:88:2e:48:0e:05:6b:c3:
ba:b2:4f:e1:82:f3:ea:ba:c2:3c:72:b3:b6:9b:42:05:fc:ab:
da:59:73:de:6f:83:ba:3e:21:f7:00:9d:ca:5d:bc:db:1d:9e:
cb:f1:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:00 2023 by rpki-client on console-ams.rpki-client.org