Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WpDj29jL6ulUk3OP9MiOEPZtjcg.roa
File: WpDj29jL6ulUk3OP9MiOEPZtjcg.roa (raw, json)
Hash identifier: k4uID/IwW80TDnq0ShmHfseOIWF89VQ7h/2PgcbTsQM=
Subject key identifier: 5A:90:E3:DB:D8:CB:EA:E9:54:93:73:8F:F4:C8:8E:10:F6:6D:8D:C8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 048EBAD3
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WpDj29jL6ulUk3OP9MiOEPZtjcg.roa
Signing time: Mon 11 Apr 2022 11:02:52 +0000
ROA not before: Mon 11 Apr 2022 11:02:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206425
IP address blocks: 194.36.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76462803 (0x48ebad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 11 11:02:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a90e3dbd8cbeae95493738ff4c88e10f66d8dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:a1:22:bb:ca:ce:4d:12:b9:4d:bd:d9:41:
c6:26:66:67:9f:6c:73:77:c3:b5:0b:d4:8b:46:16:
53:5c:06:2e:52:68:e1:d2:be:75:0f:b1:65:36:09:
ba:1d:08:9d:d1:b0:b5:6a:a3:7d:59:14:e0:45:cd:
e5:b6:65:f1:5f:8b:a8:42:82:fe:05:da:a2:6d:ed:
5f:58:5e:ae:21:4f:82:18:f4:ef:90:9f:f5:0f:ec:
44:6f:57:df:3a:c7:81:68:6a:9f:e5:e9:dd:00:b5:
52:71:16:0a:99:4a:a6:e4:1b:30:54:a0:0a:7c:cc:
bb:bd:62:14:4b:0c:f4:ce:cf:08:0d:49:90:db:37:
f4:bf:f6:a4:65:b5:06:41:03:1c:3b:c7:4a:aa:fc:
68:a2:1c:af:96:eb:da:9a:86:09:6f:45:1a:c3:17:
6e:33:41:a0:f2:e8:65:a1:62:11:fa:a1:db:23:3a:
9c:7b:65:3b:89:59:fb:be:90:fc:60:6e:de:93:db:
6a:ed:46:53:0d:c6:27:d0:57:3c:88:37:f9:95:54:
43:80:30:60:1c:c6:a0:8a:98:7d:00:6f:d5:45:be:
73:c8:5c:c3:2c:04:e2:6e:5f:a8:43:76:21:bf:09:
73:08:8e:19:97:f9:de:67:a6:9e:83:5f:f9:5f:4f:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:E3:DB:D8:CB:EA:E9:54:93:73:8F:F4:C8:8E:10:F6:6D:8D:C8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WpDj29jL6ulUk3OP9MiOEPZtjcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5a:40:2d:b8:8f:30:6b:84:cf:bd:e9:eb:c4:29:98:ff:d5:
50:87:0f:29:1a:d7:5e:5d:02:0e:5f:b2:00:31:fa:56:4a:c5:
32:a6:f9:6f:9a:dc:ff:9f:63:0a:ca:69:26:8f:c9:c6:d4:03:
56:8f:d7:bf:e8:e7:b0:27:7d:1b:d2:3b:4e:fa:4b:91:5d:c6:
c3:9e:79:0b:00:2e:97:de:fd:df:e7:e4:59:c7:23:1d:e4:14:
e4:31:1b:5f:c0:b0:ad:41:cc:3a:85:a9:38:61:18:1b:73:95:
71:a0:63:68:bb:0c:99:b9:d6:b9:66:b4:0c:42:e2:78:c7:98:
36:e5:f0:71:30:ea:94:3a:c0:11:10:f3:11:44:ea:fa:2b:39:
68:2b:57:ae:64:7f:2f:bd:8e:8e:4d:a0:c6:88:4a:14:a5:44:
dd:46:3a:6e:c5:20:c8:a3:dd:2b:58:8a:a2:b6:d1:d9:d2:c9:
9d:80:ce:0e:a2:90:95:cb:d9:41:40:92:71:d1:c0:34:0b:a5:
58:5e:7a:87:e3:9b:f8:3f:c5:c5:b5:d9:d1:df:ae:bc:2a:90:
31:94:fe:5a:dd:6d:0a:c5:09:fb:52:c0:cc:9b:51:f9:de:50:
ec:68:91:74:bf:8a:f6:36:c0:92:99:86:34:f6:51:0b:01:f8:
7d:6d:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org