Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/wBV_WYoZrJTCKo-eIcZp6Z_0uVs.roa
File: wBV_WYoZrJTCKo-eIcZp6Z_0uVs.roa (raw, json)
Hash identifier: PLyuEo+q4wFm83Bm1JR0u/9oszKOzZ1SjQDeax1xUqU=
Subject key identifier: C0:15:7F:59:8A:19:AC:94:C2:2A:8F:9E:21:C6:69:E9:9F:F4:B9:5B
Certificate issuer: /CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Certificate serial: 08359F25
Authority key identifier: 2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/wBV_WYoZrJTCKo-eIcZp6Z_0uVs.roa
Signing time: Wed 29 Jun 2022 08:41:02 +0000
ROA not before: Wed 29 Jun 2022 08:41:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.36.227.0/24 maxlen: 24
193.36.179.0/24 maxlen: 24
193.36.185.0/24 maxlen: 24
193.36.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137731877 (0x8359f25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f08df165d497d7a9b99e0e71f15ba07d184615a
Validity
Not Before: Jun 29 08:41:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0157f598a19ac94c22a8f9e21c669e99ff4b95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c4:56:e3:3a:5b:7e:3a:13:ec:26:30:de:bf:
72:5b:3e:05:ad:60:3c:1a:45:58:6a:67:6f:4f:c4:
54:dc:c8:8b:f2:2f:91:58:9b:4b:0b:a9:5a:54:36:
f1:dc:95:19:2c:17:0e:60:18:72:77:2d:66:eb:39:
cf:d1:d3:31:91:18:8e:6b:bd:fc:b7:58:3b:3a:48:
8a:50:49:ba:e6:da:16:46:21:9d:d7:3e:e4:a8:73:
8b:b7:6c:9f:ac:42:03:6f:9f:29:9e:29:4d:0a:7e:
4c:47:7a:69:09:d3:de:61:4a:cc:f8:d2:65:b0:34:
d1:05:0a:0e:fa:01:58:f3:4e:a1:ae:66:3e:d5:38:
64:a7:a4:45:5d:66:f1:b0:bf:e7:a6:92:35:52:ae:
6c:7e:c7:d6:13:dd:31:d3:fd:5a:ed:76:a0:20:08:
d5:c4:ae:85:8e:e1:2d:c8:70:52:2c:74:60:bb:ed:
76:0c:c0:2f:89:a8:9a:b9:9e:6a:a6:c2:a4:0a:6a:
5a:86:30:97:45:10:82:cf:54:f9:4e:e1:90:e0:d5:
15:bc:c3:bb:a1:30:80:48:a9:9d:5f:6d:1e:32:75:
bc:a2:61:af:de:da:a8:c8:89:85:92:02:e5:75:f4:
ae:91:99:e6:15:23:0a:75:e5:19:b5:d5:dd:28:ed:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:7F:59:8A:19:AC:94:C2:2A:8F:9E:21:C6:69:E9:9F:F4:B9:5B
X509v3 Authority Key Identifier:
keyid:2F:08:DF:16:5D:49:7D:7A:9B:99:E0:E7:1F:15:BA:07:D1:84:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjfFl1JfXqbmeDnHxW6B9GEYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/wBV_WYoZrJTCKo-eIcZp6Z_0uVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8d0360-fbc2-46eb-9ac2-cac3e42ae03f/1/LwjfFl1JfXqbmeDnHxW6B9GEYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.179.0/24
193.36.185.0/24
193.36.187.0/24
193.36.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:7b:5d:9f:d7:90:e0:0f:d4:5d:db:40:c6:65:4e:ec:92:4f:
a0:e3:4f:d6:ad:d8:66:07:91:f7:56:ae:e1:24:cf:02:d3:5e:
76:c9:1c:50:7e:b0:19:11:33:ba:4e:6b:b3:27:80:fd:b9:cc:
4c:ab:e3:1c:d0:ee:8d:94:28:79:50:e7:d1:7d:42:c9:b4:a5:
d2:69:f4:49:a0:5f:2b:a2:ec:84:f2:35:88:e4:e2:2c:50:09:
d1:63:0c:b1:6b:59:c7:7f:44:84:32:b4:0f:6a:6b:10:74:ab:
05:e0:ca:e9:9a:d4:00:44:91:69:53:e7:de:b1:c6:5d:f8:8d:
af:3c:23:5c:44:97:72:c0:b7:14:0c:b4:89:3f:3c:76:d9:37:
4a:f6:e7:2f:27:f1:75:f9:38:35:4f:6f:bf:80:3c:f0:7d:68:
05:53:ab:a5:75:54:7b:47:0e:2f:2d:3d:7c:3d:4c:b0:d6:a1:
b5:b8:dd:0f:8a:e8:bf:89:ec:5f:22:5b:45:37:d6:49:9b:ae:
8f:94:32:dc:50:9c:47:41:2a:53:a9:25:f9:e2:c4:cc:b5:31:
07:02:bd:1b:49:bc:94:13:d6:84:f8:c5:73:3d:ff:88:57:12:
0e:8d:ad:3f:8d:5e:4b:19:30:59:1a:63:66:30:2c:01:29:a3:
e2:57:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:31 2023 by rpki-client on console-ams.rpki-client.org