Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/wt18xTgekXMpG8z0g76I_buGMo0.roa
File: wt18xTgekXMpG8z0g76I_buGMo0.roa (raw, json)
Hash identifier: 3gMcq6gu9qIRZLiQAuO6GTnGpSeDmHRMtGNN8nO02Wc=
Subject key identifier: C2:DD:7C:C5:38:1E:91:73:29:1B:CC:F4:83:BE:88:FD:BB:86:32:8D
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 0182EA0621E293165F503CFB1D7B0E1B681D
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/wt18xTgekXMpG8z0g76I_buGMo0.roa
Signing time: Mon 29 Aug 2022 14:34:06 +0000
ROA not before: Mon 29 Aug 2022 14:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34062
IP address blocks: 185.99.17.0/24 maxlen: 24
185.99.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:06:21:e2:93:16:5f:50:3c:fb:1d:7b:0e:1b:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Aug 29 14:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2dd7cc5381e9173291bccf483be88fdbb86328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:99:48:f8:cb:44:ad:a3:7f:e6:f0:e1:8d:
82:a3:42:de:f1:a4:65:e9:b3:66:4a:1d:ce:b1:cc:
ee:14:e3:cd:30:e7:ca:5d:5f:88:fd:dc:fb:a2:be:
67:80:39:27:57:0a:f6:7e:ee:22:84:7b:7b:a9:43:
36:1b:0c:ee:57:a8:43:e0:01:b3:f8:88:d6:ff:4f:
7a:c5:43:f0:76:84:03:8c:4f:3b:42:cd:7c:db:c8:
09:a3:5e:6c:f7:48:94:36:3b:c5:1b:69:9d:bf:63:
61:cd:ce:d0:85:8d:29:12:39:cc:f2:2e:c3:c8:3f:
46:c8:d6:14:0f:5a:04:15:17:77:3e:3a:bc:57:1d:
4a:8c:2a:25:8b:0b:85:9a:9d:9d:ce:72:be:88:26:
6d:5f:24:19:7b:d8:ba:8c:83:e2:98:29:b9:5e:39:
a1:fd:3b:08:dc:c5:5d:9d:40:79:dd:c1:c4:2e:28:
18:cd:78:c0:69:a0:3b:9d:01:17:ee:fc:4c:f5:14:
70:b1:22:39:73:ae:ed:e5:dc:87:56:f8:57:15:99:
6d:d3:e6:cb:4b:16:19:10:bd:8c:10:44:7f:93:4a:
69:43:58:4d:37:8b:4c:0e:83:4f:34:d3:61:41:9a:
7e:de:e0:e4:c4:b3:ca:37:2e:4d:9b:3e:e0:f0:77:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:7C:C5:38:1E:91:73:29:1B:CC:F4:83:BE:88:FD:BB:86:32:8D
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/wt18xTgekXMpG8z0g76I_buGMo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.16.0/23
Signature Algorithm: sha256WithRSAEncryption
32:f8:c6:cb:ae:6c:15:81:26:02:16:e0:c8:22:2d:a4:5c:28:
18:ff:8f:b6:2b:38:6b:e2:44:32:39:e8:89:76:1a:09:2f:b5:
03:ae:7a:83:90:65:28:a9:cb:92:03:20:12:fe:b2:87:15:7f:
bf:b5:75:69:6c:2c:0b:00:64:51:4b:40:3c:ff:71:6d:0f:d8:
ed:65:1d:af:b6:f7:0d:93:e5:9b:b1:a9:e8:f9:5b:c8:1b:ab:
ae:3f:d5:71:8a:4c:d9:3e:5a:5f:85:ac:33:6f:c5:04:fb:8f:
0f:2f:7e:7a:f4:f6:77:60:65:78:8f:34:3e:f8:b7:ad:42:9a:
0b:d9:02:d7:c9:a3:36:50:6e:de:86:60:d6:08:73:ec:8a:53:
3e:bf:7c:b0:e1:9b:68:ed:4e:7c:a4:77:35:67:43:57:4b:59:
a7:26:40:73:57:7f:47:cb:e9:64:d4:6d:72:d2:82:91:6d:55:
f4:51:fc:61:6e:8a:b3:f5:34:fe:6d:ee:b0:1e:d7:78:89:29:
7f:15:f4:11:3c:60:59:5f:1a:f7:a0:a6:96:1f:d9:80:a2:84:
08:1b:01:50:0c:bf:b8:00:85:d7:85:e3:55:d1:2a:b7:61:e8:
dd:54:3c:1f:8f:a2:96:c5:1e:64:8f:c3:45:d0:a7:1d:9e:b4:
a1:97:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:03 2023 by rpki-client on console-fra.rpki-client.org