Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/WgpeKbr7ekT-a7bR0U4BDtV-LJ8.roa
File: WgpeKbr7ekT-a7bR0U4BDtV-LJ8.roa (raw, json)
Hash identifier: 1NWoQ6U0d+TDoK7XtYpAQStvrQaoqzGJBzPo9AKUW0M=
Subject key identifier: 5A:0A:5E:29:BA:FB:7A:44:FE:6B:B6:D1:D1:4E:01:0E:D5:7E:2C:9F
Certificate issuer: /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial: 17EE6E5A
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/WgpeKbr7ekT-a7bR0U4BDtV-LJ8.roa
Signing time: Sat 01 Jan 2022 10:53:27 +0000
ROA not before: Sat 01 Jan 2022 10:53:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58224
IP address blocks: 185.66.228.0/24 maxlen: 24
185.66.231.0/24 maxlen: 24
185.66.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401501786 (0x17ee6e5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Validity
Not Before: Jan 1 10:53:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a0a5e29bafb7a44fe6bb6d1d14e010ed57e2c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:88:a5:02:5a:05:65:aa:3f:a6:12:e7:bf:
4e:50:bd:3a:a7:be:b3:34:ae:be:89:79:7f:79:ba:
8d:97:3a:42:d6:4d:1f:3f:a9:90:d0:86:bc:60:75:
20:f9:04:c8:63:56:4f:1a:f5:4e:5d:58:68:16:24:
fd:84:af:36:b1:4a:51:6f:1c:36:6a:fe:d4:3b:d8:
79:03:74:32:c3:11:f5:8f:49:b3:1d:26:d8:90:89:
0d:67:b1:52:ad:1a:1b:22:e2:c5:a0:c6:9a:21:64:
ed:1c:a9:1e:18:56:10:9f:eb:fe:10:45:7e:ee:15:
d4:bc:4b:1e:2d:aa:fd:ed:2a:db:14:51:8c:ba:8f:
f2:07:ec:1b:de:34:cd:5b:0d:11:53:0e:4a:10:be:
c2:76:a9:2d:17:1b:7d:5a:0b:72:8c:60:98:a9:72:
56:8b:83:a2:97:83:3f:de:f1:1c:84:87:52:dc:39:
8a:70:ae:78:e9:f8:84:80:ab:6d:9c:85:55:da:2e:
0f:66:52:ba:1f:45:e2:71:96:ff:d9:53:25:a6:75:
34:cf:15:5b:5f:5f:cc:94:4c:34:e2:12:87:54:9c:
bc:61:04:58:72:86:62:02:75:0f:56:d6:6d:b0:7d:
48:e6:89:15:f3:4e:38:f3:47:29:91:1d:7f:3c:85:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0A:5E:29:BA:FB:7A:44:FE:6B:B6:D1:D1:4E:01:0E:D5:7E:2C:9F
X509v3 Authority Key Identifier:
keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/WgpeKbr7ekT-a7bR0U4BDtV-LJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.228.0/23
185.66.231.0/24
Signature Algorithm: sha256WithRSAEncryption
85:89:09:5f:b7:95:1d:b1:80:e6:13:6c:24:ef:ed:a1:9a:78:
8b:e7:79:31:c0:44:16:d2:2d:6e:a5:48:05:40:cc:4a:8c:52:
9f:86:92:7f:0a:5a:52:3e:8b:24:27:4b:a5:20:8e:51:78:7a:
48:c0:72:40:89:e6:42:cd:98:33:eb:bf:87:fd:33:76:aa:f1:
e9:80:c1:21:9c:06:e0:f8:38:de:8b:4e:1a:50:cb:b5:b9:0c:
d9:3f:27:8a:2c:c6:ab:a9:06:3c:38:99:b6:31:11:ab:df:7d:
53:ac:56:d2:9d:89:cd:65:ab:1b:be:b8:57:ef:f6:84:fd:46:
e1:ef:79:45:48:d1:5b:b4:55:b0:76:f4:6e:6d:fe:f8:2b:3e:
eb:da:11:0e:89:6d:0e:31:2c:3c:7d:ed:63:da:8b:bb:87:ce:
13:46:70:5b:46:c0:bf:7f:96:84:89:0b:84:b9:7c:7d:d9:87:
80:7e:08:66:3c:2b:2a:46:9b:22:d6:2c:f4:ed:d5:20:0c:8f:
55:74:5f:76:b7:f2:71:52:e8:03:9b:03:fa:d1:aa:0a:fa:c0:
08:39:c2:2f:18:f7:8e:b6:c9:7c:ca:b9:ea:11:84:48:6a:57:
b1:c5:96:ed:6f:cc:f3:7d:27:f3:2e:6d:b8:76:96:9c:85:c8:
12:3f:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:43 2024 by rpki-client on console-ams.rpki-client.org