Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/wd0BwCWIyKNj6NQlzry3olFVRxI.roa
File: wd0BwCWIyKNj6NQlzry3olFVRxI.roa (raw, json)
Hash identifier: T2cNq1i6UWL6LlUi7rMvczyn5qnudqVeJbpULxDiL5U=
Subject key identifier: C1:DD:01:C0:25:88:C8:A3:63:E8:D4:25:CE:BC:B7:A2:51:55:47:12
Certificate issuer: /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial: 05831E81
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/wd0BwCWIyKNj6NQlzry3olFVRxI.roa
Signing time: Sat 01 Jan 2022 01:51:42 +0000
ROA not before: Sat 01 Jan 2022 01:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42764
IP address blocks: 185.43.16.0/23 maxlen: 23
185.43.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92479105 (0x5831e81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Validity
Not Before: Jan 1 01:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1dd01c02588c8a363e8d425cebcb7a251554712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:3d:6c:d7:04:72:8d:c8:01:c4:d5:d2:b8:
b3:82:06:d9:7c:ad:74:56:71:21:43:bd:45:29:fc:
73:8e:4e:2e:9f:06:24:65:e0:7f:7c:db:d2:0f:97:
70:48:01:55:d8:cf:40:3c:4c:d2:b7:73:ae:b5:8d:
cf:fe:a9:4e:3d:ae:1e:c4:9d:ce:80:10:4a:80:f8:
e6:af:ad:3f:2f:0d:de:35:2e:d3:57:fa:fd:60:34:
95:2f:c1:85:a6:fc:64:68:c3:8b:e0:7b:b7:8f:9d:
6e:ce:bd:65:a7:0d:23:df:61:1c:e6:f2:cd:6f:1a:
53:9c:d2:77:64:c6:83:18:f8:0c:dd:34:0a:16:9e:
df:51:12:fc:43:00:4b:ce:71:6d:07:00:74:92:ef:
c8:46:65:4a:1d:b2:e4:a6:a6:59:a9:e1:60:5f:94:
4c:88:f6:bb:43:d3:eb:68:9a:33:f4:79:73:64:2a:
a0:b3:56:88:7d:40:26:29:a7:40:44:20:e6:d6:e1:
0b:88:80:26:d1:34:de:ed:e1:aa:fe:e4:ef:f5:07:
bc:dd:01:9c:03:bd:29:41:0f:08:9d:4b:cd:1d:fb:
1b:bd:d0:6f:d7:e3:40:27:c7:ee:99:cb:38:21:55:
a4:11:15:2e:9c:95:22:f0:e4:3d:51:e4:ae:6d:3f:
00:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:01:C0:25:88:C8:A3:63:E8:D4:25:CE:BC:B7:A2:51:55:47:12
X509v3 Authority Key Identifier:
keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/wd0BwCWIyKNj6NQlzry3olFVRxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.16.0-185.43.18.255
Signature Algorithm: sha256WithRSAEncryption
2a:6a:d6:64:e2:4a:e0:64:3f:6a:33:e2:65:f5:dc:b2:57:c3:
d9:be:89:2e:c9:29:33:1e:b8:78:df:67:61:ba:27:99:2e:3f:
ae:a0:15:4a:7d:6a:b2:0a:14:c4:d1:3c:cf:f0:a7:68:e2:9c:
d4:40:db:35:6a:af:dd:62:f7:1d:b0:f6:da:bb:c2:bd:22:48:
c5:71:6f:67:56:eb:3a:84:6b:47:81:b2:06:a0:77:84:94:ba:
a2:68:3e:7f:90:b4:4d:3c:42:e7:d7:b8:4c:a7:d5:49:6f:e5:
a0:a3:66:94:98:0d:2f:b1:2d:e3:66:e3:51:5a:8b:ba:13:17:
99:d0:ee:5d:fe:55:0c:d1:ac:bf:ce:c2:35:74:c2:b5:b2:de:
5c:11:98:6f:6e:12:0e:3a:af:01:71:6b:39:74:b8:91:5c:d3:
87:93:fc:3d:12:ad:8b:5e:d2:56:2c:35:22:32:a3:0f:7e:b3:
d9:f2:2b:df:b2:11:38:7b:8c:80:0f:c3:02:e3:f7:f6:23:dd:
cc:73:e2:21:af:72:aa:4d:c8:75:aa:76:4a:bd:fd:70:98:a8:
da:dd:3a:fa:a3:aa:e4:d3:75:48:f3:a8:ca:2e:53:39:e1:d1:
ba:e4:10:e3:b6:65:6b:a7:38:73:fe:8d:a6:22:93:af:c7:1d:
51:45:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org