Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/W9pFXX9WwMG4ByLegNXEZ3Avipw.roa
File: W9pFXX9WwMG4ByLegNXEZ3Avipw.roa (raw, json)
Hash identifier: Muz7YdocIjEpL9FZ78r1vpa5NqhsQxXONMqBcXfOJy4=
Subject key identifier: 5B:DA:45:5D:7F:56:C0:C1:B8:07:22:DE:80:D5:C4:67:70:2F:8A:9C
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 018284234BF507336E94BE152D282E4693FC
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/W9pFXX9WwMG4ByLegNXEZ3Avipw.roa
Signing time: Tue 09 Aug 2022 19:44:41 +0000
ROA not before: Tue 09 Aug 2022 19:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61423
IP address blocks: 185.202.132.0/24 maxlen: 24
2a0a:d6c0:4::/48 maxlen: 48
2a0a:d6c0:efef::/48 maxlen: 48
2a0a:d6c0:efff::/48 maxlen: 48
2a0a:d6c0:3::/48 maxlen: 48
2a0a:d6c0:eff3::/48 maxlen: 48
2a0a:d6c0:eff1::/48 maxlen: 48
2a0a:d6c0:7::/48 maxlen: 48
2a0a:d6c0:eff2::/48 maxlen: 48
2a0a:d6c0:2::/48 maxlen: 48
2a0a:d6c0:5::/48 maxlen: 48
2a0a:d6c0::/48 maxlen: 48
2a0a:d6c0:eff0::/48 maxlen: 48
2a0a:d6c0:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:23:4b:f5:07:33:6e:94:be:15:2d:28:2e:46:93:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Aug 9 19:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bda455d7f56c0c1b80722de80d5c467702f8a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:9c:95:8b:37:a5:2f:4b:5a:1e:61:c1:3e:
6b:9e:35:26:3c:78:f5:51:3b:0a:49:24:3a:52:95:
f5:62:6c:1d:8e:3f:03:bb:44:c6:44:e5:5c:3a:41:
bc:5d:a9:97:f2:e4:86:6f:72:71:de:05:4c:9d:bd:
af:eb:66:b0:97:3e:31:a8:8d:89:d8:39:85:76:13:
a6:46:81:81:50:41:10:e1:b5:4d:04:e3:c8:2a:15:
0e:01:65:78:9d:10:da:8e:46:e1:4a:e3:a6:ed:98:
25:a8:80:b5:76:65:95:76:a1:af:ac:fa:34:74:f4:
b0:2f:21:73:4e:3a:b4:11:5c:4e:77:95:be:ba:de:
46:4f:9c:f8:00:ff:5a:53:ec:5a:aa:e3:c7:b6:ba:
14:64:02:79:cd:a1:92:e8:96:1d:21:85:fa:64:cf:
7f:c9:6a:7f:8f:99:30:23:93:f6:98:ca:ac:29:4b:
32:33:6d:17:33:f3:fd:5a:ed:21:d5:b6:9d:af:1a:
c3:2d:cc:00:1b:0a:1b:af:a4:94:2c:4c:6f:14:d9:
20:62:16:fc:b7:ad:bf:9f:c9:e3:32:b1:7e:0a:ae:
4a:10:f2:4a:b2:d8:ef:01:17:56:6a:8f:1e:2a:a2:
ff:1f:ad:4f:8d:68:c7:44:ce:18:ea:95:82:da:4f:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DA:45:5D:7F:56:C0:C1:B8:07:22:DE:80:D5:C4:67:70:2F:8A:9C
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/W9pFXX9WwMG4ByLegNXEZ3Avipw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.132.0/24
IPv6:
2a0a:d6c0::/48
2a0a:d6c0:2::-2a0a:d6c0:7:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:efef::-2a0a:d6c0:eff3:ffff:ffff:ffff:ffff:ffff
2a0a:d6c0:efff::/48
Signature Algorithm: sha256WithRSAEncryption
5c:b4:94:4f:3a:1b:46:33:af:0e:ef:dc:9c:11:ec:1e:c8:e8:
20:29:00:aa:51:0b:ef:fe:ae:08:ad:38:90:32:54:8d:b0:59:
67:44:26:3a:cd:f7:17:d9:27:30:96:79:f2:b7:ae:c0:69:19:
de:f9:bd:6d:f1:b7:78:a9:55:36:2a:e7:35:1d:1b:e5:e6:84:
1a:6e:51:af:e9:93:5f:6e:d9:00:70:e6:36:7c:21:17:81:54:
1d:f4:3b:fe:69:16:06:52:21:0d:2d:d3:51:54:56:fe:4f:3e:
d5:fb:16:75:1b:10:5c:c2:c1:1b:ac:c1:43:74:60:19:11:ad:
6a:be:1b:b0:f9:08:73:86:17:d4:3f:e4:40:15:8d:2b:27:d4:
4b:cc:b8:3a:3f:00:b6:34:ac:d7:28:b0:a1:3e:45:e1:29:e3:
b4:d0:99:42:7e:51:1b:eb:13:e9:93:81:0d:24:e1:b2:0c:9d:
90:49:e6:80:7d:7f:db:15:23:9d:dc:87:bd:80:53:0f:0c:46:
e7:6d:64:fb:88:bf:4f:1e:60:e9:43:1a:f0:bc:dd:dc:3d:87:
bc:f0:af:17:18:a9:26:ff:4e:6f:e3:d2:2b:65:c2:ae:10:c1:
33:e6:4d:20:ca:e1:40:e0:b7:0c:27:d3:f1:f9:9f:f2:30:25:
c7:1a:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:38 2024 by rpki-client on console-fra.rpki-client.org