Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WgRyP-n_Qi1Xc-R8_SGKS6nb3L4.roa
File: WgRyP-n_Qi1Xc-R8_SGKS6nb3L4.roa (raw, json)
Hash identifier: 2QYFEip4QQ8ON8lgbSYasqnbGyumpwdLuRcg9LWd6Lo=
Subject key identifier: 5A:04:72:3F:E9:FF:42:2D:57:73:E4:7C:FD:21:8A:4B:A9:DB:DC:BE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0183CDC7F631C883CDE154E9D62B2B53E7F2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WgRyP-n_Qi1Xc-R8_SGKS6nb3L4.roa
Signing time: Wed 12 Oct 2022 19:59:37 +0000
ROA not before: Wed 12 Oct 2022 19:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12874
IP address blocks: 185.223.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cd:c7:f6:31:c8:83:cd:e1:54:e9:d6:2b:2b:53:e7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 12 19:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a04723fe9ff422d5773e47cfd218a4ba9dbdcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2d:89:41:bd:8b:e1:a2:49:13:f4:e9:dc:08:
df:7d:0f:4f:52:ed:5f:5e:9a:23:de:1a:bc:29:cc:
11:80:6a:9f:7b:cd:3f:e8:37:ba:5c:20:01:1f:6a:
55:54:b1:77:a7:63:b8:58:3f:5e:c8:af:e8:a0:49:
8e:10:cc:b4:02:03:e9:bc:4e:a9:f2:a7:4d:5b:12:
62:87:29:9e:9b:d3:1b:70:09:d6:fd:5f:b0:78:7d:
2c:d0:2d:21:c7:85:0b:4f:c8:7b:e6:bd:57:22:d5:
be:55:62:bf:6d:38:9e:d3:48:fb:3a:c4:7f:98:64:
47:62:5d:55:3c:7f:e8:86:da:45:4f:19:2d:ba:5d:
6d:e7:b3:5d:11:8c:a4:98:e7:39:35:d1:e4:00:e3:
4e:a8:0d:ae:09:9e:79:b7:25:5d:6e:93:2f:5c:46:
d8:6c:57:2b:40:78:4c:e3:02:cc:cf:50:4b:d1:fc:
d8:c6:7c:d1:47:dc:1e:bf:e8:b5:cb:00:fe:a7:ce:
cc:21:03:fe:a1:73:01:fc:a7:d9:5c:07:e0:10:20:
ff:bf:e0:af:69:fa:41:18:1e:4f:bf:d9:b1:cb:dd:
b8:04:fd:23:51:bd:7a:05:f9:08:c4:87:64:60:8e:
a9:4c:17:43:d0:86:13:42:0a:c3:b0:51:03:21:60:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:72:3F:E9:FF:42:2D:57:73:E4:7C:FD:21:8A:4B:A9:DB:DC:BE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WgRyP-n_Qi1Xc-R8_SGKS6nb3L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:de:7c:a1:7b:17:b6:c4:ec:ca:a7:d0:ed:f0:e4:dc:a5:0d:
a9:17:e1:68:0e:de:16:83:b1:4b:22:eb:25:19:92:fc:45:26:
a8:b4:dc:c8:e6:d2:26:cf:69:51:dc:2f:0e:71:41:6f:de:56:
71:f5:42:a9:ba:60:9a:b2:29:5e:44:75:70:8e:35:d1:45:f1:
5b:57:e3:66:cb:fa:24:46:e5:4e:cc:34:cb:82:05:23:c8:16:
fa:b9:e9:c6:ca:f0:b8:27:be:22:4a:7f:ab:4e:5f:05:e3:0d:
c2:9c:09:d0:81:f7:5d:6e:e6:e0:00:8a:8d:4a:fc:e9:9d:1d:
84:3d:1f:31:81:ca:fe:b7:9a:0d:7b:f9:40:f1:23:e6:f4:33:
ac:c4:65:e4:c5:22:fd:93:73:2a:74:04:4a:bc:09:3a:dc:b3:
f7:92:7f:c0:b0:b6:f1:e9:5e:ae:c1:67:bb:db:0b:ac:92:ec:
21:03:b2:4c:05:7c:67:dc:c2:35:8c:8b:9a:85:e7:7c:fd:4a:
f5:78:4e:57:71:fd:92:fe:d9:d5:09:89:66:40:4d:d5:d3:35:
7b:51:b4:35:c8:19:65:87:40:fc:3c:09:a2:3d:52:8f:75:98:
f5:d8:ce:0c:ca:98:79:82:4f:2c:40:4b:80:ea:59:aa:9e:6b:
c2:f2:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org