Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/wdy68wY5kTH8VFI642z3LoogaaY.roa
File: wdy68wY5kTH8VFI642z3LoogaaY.roa (raw, json)
Hash identifier: 2NHOw9Wnae6M3g50TnhORvEIr/PVqs9DHfkpaEo0VUA=
Subject key identifier: C1:DC:BA:F3:06:39:91:31:FC:54:52:3A:E3:6C:F7:2E:8A:20:69:A6
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0DF3EDEC
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/wdy68wY5kTH8VFI642z3LoogaaY.roa
Signing time: Sat 01 Jan 2022 08:04:09 +0000
ROA not before: Sat 01 Jan 2022 08:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13335
IP address blocks: 185.118.228.0/24 maxlen: 24
185.118.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234089964 (0xdf3edec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jan 1 08:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1dcbaf306399131fc54523ae36cf72e8a2069a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:66:c4:06:1d:96:d0:55:38:40:ac:4a:fc:99:
c3:a8:ef:fc:21:74:28:81:1b:4f:32:c1:d5:07:9e:
ef:bc:7d:b3:bc:0f:61:c8:23:04:9c:bb:6d:d5:21:
7b:d7:78:2a:5f:2b:17:54:12:b8:10:81:ea:a3:f9:
ab:58:3f:70:2e:fc:ad:49:2e:9c:3f:ab:2b:1f:0f:
b7:e2:5e:57:d4:52:cd:cd:00:c3:53:56:9c:1f:80:
95:f5:1d:81:61:5f:dd:73:df:98:53:76:cd:99:56:
73:3f:c6:3b:f1:8b:48:e9:94:26:b1:8f:42:96:a8:
e4:9d:14:5a:c2:03:63:db:fd:9b:62:b9:ec:64:f0:
a2:f1:f0:fd:89:b7:21:a2:44:2b:43:8f:ef:64:d4:
88:34:43:85:79:5f:03:c5:2c:df:3e:6d:8c:99:17:
0c:07:3d:19:c9:d4:fe:54:ec:1b:b8:8d:0a:af:9d:
f2:05:4d:d6:f6:5c:3c:32:da:9e:54:1c:bb:a8:a8:
3b:c9:f7:8e:1a:95:15:75:6b:99:4e:af:80:aa:21:
b2:94:02:9a:4b:3a:6f:b7:ad:80:22:e1:fd:07:0e:
fb:b1:86:87:e3:6c:70:92:98:0d:41:53:48:d7:88:
e1:20:a7:d8:95:4c:78:12:29:fd:6c:2d:e6:d8:57:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DC:BA:F3:06:39:91:31:FC:54:52:3A:E3:6C:F7:2E:8A:20:69:A6
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/wdy68wY5kTH8VFI642z3LoogaaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.228.0/24
185.118.230.0/24
Signature Algorithm: sha256WithRSAEncryption
37:de:8f:d8:9e:e2:a3:90:c7:ad:69:c1:be:b4:34:21:6b:e9:
e3:e4:eb:c6:1b:81:75:01:7b:f0:9c:78:47:40:78:f6:1d:b5:
00:15:e9:f4:b6:2c:71:5e:c4:87:56:82:3a:c9:08:f5:9b:e9:
25:6f:bc:ec:27:60:f4:15:a3:ff:6b:a9:d7:eb:ff:be:48:ad:
13:d8:4c:33:f8:31:6a:13:cd:72:90:a8:2e:0d:70:56:be:5f:
17:70:33:5a:a0:e8:da:b0:92:ba:1b:c4:74:56:4d:d9:a7:42:
f5:8b:6c:e9:33:65:4d:6c:e0:f0:c1:38:f9:93:c9:24:72:6a:
b5:d1:99:0d:76:6a:dd:0a:8f:ef:cb:a1:92:7c:17:52:df:4f:
83:c6:aa:71:af:9a:99:9d:c5:06:e9:fb:f9:75:ac:4a:a7:c9:
10:e8:c1:de:b8:fd:ff:b8:92:0e:80:f2:cf:87:dd:fd:d6:57:
a5:82:0a:a3:1f:56:d6:15:22:57:c3:71:63:87:16:43:ef:7a:
b2:ee:d0:b4:62:8a:cc:a3:6a:aa:98:f1:98:06:c7:cc:95:50:
40:ab:c8:bc:e0:7f:e3:de:32:6d:4a:10:eb:07:ff:d8:ec:77:
23:90:04:29:22:fc:dd:5f:8d:cc:e2:a5:38:f1:2f:a0:39:c7:
ba:bc:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:20 2024 by rpki-client on console-ams.rpki-client.org