Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WTFy3wlOzBOHxfajAX-KtwrOTXY.roa
File: WTFy3wlOzBOHxfajAX-KtwrOTXY.roa (raw, json)
Hash identifier: sWfxXz2GZnN+M0tP+PSyhxdaqT+zeKon7EOpLveeDGw=
Subject key identifier: 59:31:72:DF:09:4E:CC:13:87:C5:F6:A3:01:7F:8A:B7:0A:CE:4D:76
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0183AEEA4A07237B9EAC80CF3BA66EDB1454
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WTFy3wlOzBOHxfajAX-KtwrOTXY.roa
Signing time: Thu 06 Oct 2022 20:08:53 +0000
ROA not before: Thu 06 Oct 2022 20:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44901
IP address blocks: 85.187.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:ea:4a:07:23:7b:9e:ac:80:cf:3b:a6:6e:db:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Oct 6 20:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=593172df094ecc1387c5f6a3017f8ab70ace4d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:a1:1e:14:46:8d:58:d8:4c:80:8d:1a:72:
75:2d:d2:ac:0f:fc:3d:66:18:a5:5f:fe:71:03:05:
06:ba:ef:8e:9f:65:ae:46:d4:6c:a1:65:63:d0:74:
fc:8e:aa:54:53:e4:33:de:c0:8b:41:d7:a9:8c:c6:
59:f8:6a:79:46:d9:a0:04:75:d7:5f:7d:61:62:e5:
53:aa:82:b8:49:4c:9d:48:5d:3e:9c:eb:a2:de:15:
e4:ed:be:7a:70:4f:1e:43:16:f1:65:1d:d3:7e:df:
d1:f9:c7:3f:91:b7:a9:a9:b8:df:b2:96:2e:9d:21:
9e:22:56:aa:ab:4f:40:2e:2a:78:31:70:7c:9c:62:
55:64:7d:ee:7d:c6:dd:7b:ff:a0:87:ae:28:2b:03:
16:dc:27:27:b2:ae:9f:4c:99:86:78:3b:86:6a:a7:
cd:4d:5d:2e:d1:27:7f:7b:6d:64:40:1d:ca:0d:09:
75:d2:f0:5d:f7:32:66:32:b9:09:7c:80:eb:58:06:
36:27:98:95:ef:4c:83:c0:cb:2f:2c:ef:7b:fd:99:
cf:50:31:ae:f2:26:be:49:4d:a9:da:5a:16:88:a4:
93:84:1c:cb:0e:d3:b7:e0:24:1e:30:64:c1:90:91:
50:11:c5:2b:50:c4:6a:51:36:3b:6d:a5:a0:d4:81:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:72:DF:09:4E:CC:13:87:C5:F6:A3:01:7F:8A:B7:0A:CE:4D:76
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/WTFy3wlOzBOHxfajAX-KtwrOTXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
73:19:df:63:e6:fb:7d:02:fb:6c:49:ba:ca:e7:15:7e:34:41:
2b:b5:30:92:68:1f:d7:d7:ac:64:63:d7:a0:b9:87:92:9f:18:
e1:bd:79:c9:e9:f6:93:dd:e6:e0:c8:db:d0:fa:45:ff:56:31:
d8:5e:b8:e5:e3:cc:a8:b0:00:93:54:dc:cd:2e:2d:e6:a1:27:
aa:9f:82:ef:1a:5d:64:d2:ad:12:64:99:6c:49:21:af:f9:48:
9b:ba:34:c8:32:7b:a9:a8:7c:55:ab:8a:9e:43:84:3b:17:ff:
fb:a9:18:29:9a:37:2f:dc:d4:61:db:34:8a:62:8c:66:2b:ae:
5b:6c:fb:b8:58:a3:6d:84:10:c6:09:a0:42:7b:0f:93:15:84:
ad:83:92:99:1a:4f:95:d5:e4:42:1b:65:65:de:3e:a6:14:7a:
62:de:25:ce:d1:f4:c9:71:26:65:aa:bc:cf:2e:c7:b9:b9:85:
e7:4d:79:53:e6:59:6e:75:67:e5:12:43:4e:1b:60:f1:68:91:
e0:9a:68:0e:0f:b5:82:70:a0:17:77:2b:08:e7:2f:44:fd:23:
75:71:54:1f:8c:81:98:71:95:df:8c:74:f3:4b:de:be:7a:75:
f4:f0:1f:43:82:4d:1d:4d:86:84:54:fa:5e:a7:68:50:2b:6a:
c0:49:56:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org