Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/WXP6Vbb-dlBUaN1-Sn_YSNvIiL8.roa
File: WXP6Vbb-dlBUaN1-Sn_YSNvIiL8.roa (raw, json)
Hash identifier: bNItQEq/Fcb9foH0/ihOLPSXP42NqsI5ZOV2VbCwytM=
Subject key identifier: 59:73:FA:55:B6:FE:76:50:54:68:DD:7E:4A:7F:D8:48:DB:C8:88:BF
Certificate issuer: /CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Certificate serial: 1029C395
Authority key identifier: 72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/WXP6Vbb-dlBUaN1-Sn_YSNvIiL8.roa
Signing time: Sat 01 Jan 2022 11:00:06 +0000
ROA not before: Sat 01 Jan 2022 11:00:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206521
IP address blocks: 185.183.200.0/24 maxlen: 24
185.183.203.0/24 maxlen: 24
185.183.201.0/24 maxlen: 24
185.183.202.0/24 maxlen: 24
2a0b:1b87::/32 maxlen: 32
2a0b:1b82::/32 maxlen: 32
2a0b:1b81::/32 maxlen: 32
2a0b:1b85::/32 maxlen: 32
2a0b:1b86::/32 maxlen: 32
2a0b:1b84::/32 maxlen: 32
2a0b:1b80::/32 maxlen: 32
2a0b:1b83::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271172501 (0x1029c395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Validity
Not Before: Jan 1 11:00:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5973fa55b6fe76505468dd7e4a7fd848dbc888bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:99:83:c9:aa:dc:bb:5e:36:53:05:d9:83:
df:82:1a:a4:7d:92:15:38:0d:3f:af:4a:06:f5:28:
d8:b7:0a:8b:4e:cf:bd:49:61:30:e8:75:13:41:f2:
87:56:8c:c0:b5:8c:bc:68:07:9d:1b:f7:ca:dc:f4:
0c:22:80:df:ed:fd:67:70:1a:64:17:8d:80:6e:ae:
8a:d2:fd:58:1b:ad:8c:2a:ad:59:fd:93:64:a5:48:
00:5a:d1:bd:83:65:fc:e1:9f:f3:db:93:cd:08:29:
fd:91:00:51:74:13:fb:51:47:f2:04:6c:42:a3:c9:
b8:6a:cc:b3:17:9d:02:cf:1f:a8:8b:a8:73:b8:ef:
37:d4:63:09:a3:15:25:5c:cb:99:46:d1:49:03:50:
56:ac:e1:fc:ff:bc:d2:38:98:e5:f4:ba:8e:92:72:
4c:55:ad:2f:7c:d2:2f:ee:88:63:39:6b:a9:fc:29:
ba:a4:ee:28:dd:b2:45:d3:1f:65:89:25:b5:45:90:
b7:50:de:63:84:5e:97:e6:10:3e:90:d4:f1:72:91:
ff:8d:f7:2d:1b:45:0e:31:e8:bb:d3:00:92:4c:c4:
e4:e1:b3:5e:73:65:b4:76:99:93:4b:1a:95:f1:4c:
a3:08:28:3e:17:79:f4:93:7f:8f:ae:56:ef:5f:ee:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:73:FA:55:B6:FE:76:50:54:68:DD:7E:4A:7F:D8:48:DB:C8:88:BF
X509v3 Authority Key Identifier:
keyid:72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/WXP6Vbb-dlBUaN1-Sn_YSNvIiL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.200.0/22
IPv6:
2a0b:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
8f:ad:a7:01:fd:6a:ed:41:37:74:cd:35:c3:20:ae:84:a1:46:
51:91:c8:35:f1:cf:b6:88:31:23:4e:38:2b:1e:ee:3b:86:e0:
b7:5c:9d:ce:c4:34:30:77:46:df:b5:5c:e7:4d:2c:f6:5c:1a:
90:13:53:fd:ed:ec:97:df:43:85:a5:6f:53:5e:64:2b:a5:f9:
74:30:0b:13:57:0f:41:1b:76:14:3f:a8:d6:61:50:5b:4a:f4:
d4:36:c4:32:70:6d:44:ed:c1:83:c2:da:cc:eb:9f:30:12:65:
27:56:81:fa:53:21:52:91:3a:e4:78:53:a2:89:1e:37:cd:f5:
5d:95:cc:10:16:f2:b3:70:1b:a5:9a:e5:3b:bc:54:70:41:89:
9e:c3:04:84:1c:46:1f:b8:6e:59:c2:6a:2a:e1:9b:76:4b:63:
fb:d2:0d:3d:97:8b:56:82:f7:68:bf:a6:cb:a3:15:f0:d8:68:
d0:33:2a:df:0c:da:3a:f9:99:9e:d7:97:81:7e:7f:80:99:2b:
c4:c1:dc:a4:fa:ea:38:c3:09:2a:23:b3:9b:97:e4:42:6b:7a:
61:2f:c5:e3:9e:b3:2e:fe:aa:a2:06:f0:a6:97:1a:e1:e3:d2:
fa:dc:3d:4a:91:56:f2:ac:72:d4:f8:c8:44:ea:fc:a3:f3:6b:
f1:64:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org