Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bwNufDE3d5kJtG1WNFXLk40P140.roa
File: bwNufDE3d5kJtG1WNFXLk40P140.roa (raw, json)
Hash identifier: cS/q4omSyljzJu+tWs38tZ7Vav5o4l1IDbTm6ntVkk0=
Subject key identifier: 6F:03:6E:7C:31:37:77:99:09:B4:6D:56:34:55:CB:93:8D:0F:D7:8D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0184928DB8988DF910492D477C83DC6915DA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bwNufDE3d5kJtG1WNFXLk40P140.roa
Signing time: Sun 20 Nov 2022 01:01:12 +0000
ROA not before: Sun 20 Nov 2022 01:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 131477
IP address blocks: 185.188.5.0/24 maxlen: 24
185.255.152.0/23 maxlen: 32
185.255.153.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:92:8d:b8:98:8d:f9:10:49:2d:47:7c:83:dc:69:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Nov 20 01:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f036e7c3137779909b46d563455cb938d0fd78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:22:1d:8f:73:92:c8:5e:c3:95:35:bf:f3:
60:e6:d7:3b:d2:3d:50:a4:8e:fe:16:e6:36:67:3a:
54:4e:03:52:af:99:4f:29:c0:52:0a:a9:0c:64:b4:
9a:7d:f0:b4:b6:ed:f4:8d:e3:03:3a:6c:ff:e8:76:
9d:62:0d:19:48:5a:a5:9e:93:49:24:98:05:42:50:
66:f5:47:78:bb:8f:7c:a8:6a:47:17:e0:32:a7:23:
4a:fd:dd:45:ae:db:65:7f:25:04:8d:35:ae:9a:bb:
17:eb:e5:f9:16:6e:b8:02:8e:5f:dc:56:99:06:88:
d2:94:49:17:12:07:96:35:03:84:f2:6b:d5:72:82:
e5:5c:6e:e5:0b:fe:2e:23:ba:73:93:bd:aa:7b:14:
83:ac:af:7a:0d:b8:52:a7:91:38:ed:51:48:bd:51:
34:8d:55:34:07:08:b8:cf:bb:e9:6c:02:27:9d:a0:
6d:b5:0c:dc:54:15:13:24:e6:e2:68:f9:eb:4b:48:
a4:f4:c9:a2:33:af:0e:4f:59:b0:9d:43:4f:11:2d:
53:5a:4d:a8:8e:7d:36:56:76:c7:19:a4:8e:4f:be:
f3:aa:5d:a3:7c:df:f3:6d:2e:d6:42:90:ab:46:0c:
d2:06:f3:15:6d:39:0f:e0:3f:53:4c:d0:a9:93:31:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:6E:7C:31:37:77:99:09:B4:6D:56:34:55:CB:93:8D:0F:D7:8D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bwNufDE3d5kJtG1WNFXLk40P140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.5.0/24
185.255.152.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e5:c2:6b:f9:d4:4f:a3:8b:1e:88:ef:41:7d:aa:ec:d1:0c:
23:11:3b:eb:e6:ec:46:75:b7:6b:4c:2b:9a:e1:0f:df:93:b6:
b7:73:7c:e4:be:4b:a8:08:b1:26:2f:ef:a9:36:46:3a:84:85:
b4:f7:41:4e:00:6c:4c:7b:03:7f:bd:d2:93:cc:da:e3:39:fe:
08:e2:cc:2a:d9:24:e6:08:f3:e1:de:70:35:17:09:1c:4d:ac:
32:2c:2e:a0:f8:96:4a:4e:9a:1a:e8:23:b8:b3:79:8a:d2:0f:
1d:d8:c4:33:53:ad:84:de:9e:c2:f1:9f:0e:29:73:28:b8:12:
86:f4:df:6b:a8:0b:0a:db:a4:62:42:8b:70:36:5c:7b:77:e5:
fd:32:8f:c4:10:10:7e:5c:31:a6:65:94:93:a6:11:f4:e6:53:
4a:bf:27:8e:d3:47:99:e4:13:cf:32:08:cd:46:d7:79:96:c3:
a1:be:d1:97:fb:44:71:a7:be:54:ef:4b:d0:dd:5f:c9:03:12:
86:7f:52:aa:9c:8c:03:e2:f3:ff:51:a6:12:48:ad:e8:20:ae:
e5:4a:02:d1:d8:27:20:5e:e1:9a:0b:95:70:00:34:b7:37:fc:
7a:73:c6:07:ae:c0:f8:ed:1b:92:e7:84:88:46:11:bc:f0:4e:
41:7c:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org