Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/WsZPSlQjXOT4E1dM-RSLYD76rWM.roa
File: WsZPSlQjXOT4E1dM-RSLYD76rWM.roa (raw, json)
Hash identifier: T4LF/tuLh7isTbHzuuWirin1Cfc0jZdq6A0ZD9JcZLs=
Subject key identifier: 5A:C6:4F:4A:54:23:5C:E4:F8:13:57:4C:F9:14:8B:60:3E:FA:AD:63
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 09BA0DCB
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/WsZPSlQjXOT4E1dM-RSLYD76rWM.roa
Signing time: Sat 01 Jan 2022 12:05:43 +0000
ROA not before: Sat 01 Jan 2022 12:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208650
IP address blocks: 185.202.135.0/24 maxlen: 24
185.202.134.0/24 maxlen: 24
2a0a:d6c0:134::/48 maxlen: 48
2a0a:d6c0:135::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163188171 (0x9ba0dcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 1 12:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ac64f4a54235ce4f813574cf9148b603efaad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:e3:8b:82:4d:31:f7:95:df:e6:72:49:f1:
8d:cc:f2:e0:b6:34:e4:12:9f:d5:d3:64:56:a8:9b:
5f:c2:c1:74:8d:73:d6:e2:df:b5:45:c8:8c:14:65:
2a:60:05:d3:68:f3:1c:f7:d5:20:9c:f0:4c:41:b3:
d4:05:8f:66:f6:90:1e:17:ea:f8:96:5b:73:a1:83:
7d:2c:2e:39:66:78:d8:2e:0a:42:03:34:42:d4:d7:
38:5a:38:ba:1a:d3:f5:07:88:5b:d7:91:e7:b0:66:
bf:5d:45:34:29:e4:38:63:98:ed:79:3a:41:08:b8:
39:b0:32:e3:82:63:5c:57:3a:87:43:60:04:2c:37:
d4:45:67:8c:31:35:ea:b6:a0:c3:e7:6e:5a:94:74:
f0:47:f0:5b:84:9a:df:59:ce:9a:44:ab:f5:3d:5d:
9e:29:76:fc:67:27:08:f3:50:00:59:de:87:66:11:
a0:22:13:bc:c5:7b:36:a9:33:4f:bc:f0:49:d1:b9:
91:32:db:b0:01:e0:1a:9a:66:6d:d5:e2:dd:ef:d8:
9f:17:df:50:a6:44:79:61:b6:d9:53:4c:13:37:9b:
b6:50:28:5f:6f:16:2a:60:d9:b1:8e:10:7e:39:36:
c1:50:22:8d:2f:8f:3f:da:1e:cc:af:77:36:8f:09:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C6:4F:4A:54:23:5C:E4:F8:13:57:4C:F9:14:8B:60:3E:FA:AD:63
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/WsZPSlQjXOT4E1dM-RSLYD76rWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.134.0/23
IPv6:
2a0a:d6c0:134::/47
Signature Algorithm: sha256WithRSAEncryption
a2:8d:84:ce:98:e1:c9:8f:64:54:b1:0c:cd:bf:34:1e:41:fd:
d4:a9:9c:9c:8d:b0:41:a4:ef:ba:58:22:f8:9c:49:ba:5b:e1:
12:10:42:5a:d4:f5:3c:79:5e:e1:de:5c:65:96:b6:25:f3:c0:
a0:4f:d4:49:57:82:7f:46:e8:09:53:9b:2e:1b:1a:b1:51:ea:
12:8f:2a:28:bd:33:e4:59:f9:80:ca:4c:e6:61:f4:73:4b:44:
c1:cb:20:d3:25:0d:5a:ef:4c:32:29:67:06:da:3d:0e:c2:5f:
fa:9f:63:1b:ed:78:f4:c0:74:67:d6:e8:1f:a2:5b:63:c7:2b:
1d:75:fb:e8:11:8c:64:df:64:b1:48:44:91:18:33:34:8c:0a:
06:1d:b9:78:67:6d:0c:aa:3c:75:df:ba:b4:8f:87:a2:44:02:
dd:e2:09:8a:6b:18:b6:3f:88:14:8e:de:93:c0:47:aa:8b:6c:
cf:47:63:8e:dc:7c:cd:dd:fc:73:db:9e:5d:af:89:b0:06:1b:
84:b6:1a:ed:58:43:d2:25:61:d2:fa:f8:c6:57:c4:07:57:37:
c8:00:c3:d6:a7:a0:a5:b3:f6:b1:8d:4d:26:51:3d:35:3c:59:
76:1c:7e:52:cd:0f:42:2e:16:7d:45:68:78:2f:5a:f0:1d:30:
94:e0:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:53 2024 by rpki-client on console-ams.rpki-client.org