Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/WFC-yLHUKpd05OetLZ-aXue1p3Y.roa
File: WFC-yLHUKpd05OetLZ-aXue1p3Y.roa (raw, json)
Hash identifier: W888wCh6yPFm9c9i5XAxcosLVP+EV7a7S+KV7ihmaBQ=
Subject key identifier: 58:50:BE:C8:B1:D4:2A:97:74:E4:E7:AD:2D:9F:9A:5E:E7:B5:A7:76
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 0F758BDF
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/WFC-yLHUKpd05OetLZ-aXue1p3Y.roa
Signing time: Sat 01 Jan 2022 09:57:25 +0000
ROA not before: Sat 01 Jan 2022 09:57:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197907
IP address blocks: 46.254.144.0/21 maxlen: 21
185.73.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259361759 (0xf758bdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Jan 1 09:57:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5850bec8b1d42a9774e4e7ad2d9f9a5ee7b5a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:4c:28:5f:a2:15:fd:63:f8:83:e0:24:3a:
47:a5:82:0b:1d:95:86:71:1b:29:c4:04:0d:39:7f:
8a:6f:a7:38:29:cc:15:0c:6f:f5:a4:0b:b8:59:91:
da:5a:a5:50:38:cf:a7:2e:9f:07:dc:22:f1:5d:30:
f7:60:20:ce:61:9d:9f:99:e0:cf:91:c5:d9:72:f3:
65:a6:d4:86:a6:b8:11:08:4e:bb:c4:35:ff:b5:8a:
de:85:72:17:99:9f:fb:03:78:8b:22:d4:e2:dd:29:
28:9b:de:4d:03:e5:79:f7:e0:c5:e4:7c:65:41:9f:
7c:35:c7:ea:d1:87:c4:65:5a:9c:48:40:1f:78:91:
b7:89:9d:e8:00:e0:d2:1a:f6:1e:da:b9:c3:9e:d6:
4e:ab:9a:71:c6:a9:78:52:1f:ed:13:97:d5:73:d8:
14:91:90:3c:74:b5:34:c9:a9:f5:dd:2b:e6:93:7e:
8d:9a:39:5e:e9:0d:dc:0f:83:e0:b5:40:93:a4:fc:
dc:bb:97:35:79:4a:71:85:0d:21:6d:cc:46:43:66:
4c:bf:ab:e6:45:40:37:68:bb:d6:5a:8e:dd:50:5a:
4a:f5:54:a3:60:86:69:23:3a:65:08:d5:ee:cc:2c:
22:df:46:e1:97:c0:1f:e6:12:cb:26:ce:96:cf:87:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:BE:C8:B1:D4:2A:97:74:E4:E7:AD:2D:9F:9A:5E:E7:B5:A7:76
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/WFC-yLHUKpd05OetLZ-aXue1p3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.144.0/21
185.73.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:70:54:23:21:31:25:9a:e6:83:65:26:27:e7:c4:66:35:e6:
fe:30:14:4b:af:c3:62:14:10:8e:af:4c:58:9f:d4:ae:14:fa:
eb:1d:44:97:b4:ab:a3:da:e9:34:e3:48:9d:1c:e8:94:cd:cb:
96:0e:63:b3:f4:7f:0e:7f:00:d8:b8:91:8a:33:65:d5:43:8d:
bb:cb:50:7e:7f:a2:86:72:a1:8e:79:77:f8:27:c2:2e:a3:bf:
76:3d:44:95:35:27:e1:1d:cf:7c:eb:72:cf:ef:da:84:c4:1f:
99:79:ce:12:7c:1d:2c:82:fe:ab:96:37:20:b5:6e:5e:6e:69:
8c:e9:68:9c:91:95:a2:29:8e:d0:a0:46:8f:b1:ad:e8:68:87:
16:9e:3b:90:08:52:99:a8:cb:a0:b0:d3:de:74:47:4a:94:1c:
91:8b:4b:78:29:30:35:a9:65:73:b7:71:be:5e:eb:1a:08:43:
4f:53:68:08:7d:04:f6:48:59:40:ef:b9:67:75:82:16:26:e3:
00:41:42:40:b8:a2:7b:69:00:f3:33:8d:50:09:8d:28:be:8e:
a1:fd:f0:03:dd:1d:b5:4d:ec:80:e8:f3:70:b1:77:ae:72:12:
2e:6c:f0:fe:f0:bf:9f:8d:c4:bf:78:b7:fb:53:c9:7e:f2:99:
9c:c1:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:14 2024 by rpki-client on console-fra.rpki-client.org