Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/wz1FGO5uAZMAXQtEFzakG4P8GRA.roa
File: wz1FGO5uAZMAXQtEFzakG4P8GRA.roa (raw, json)
Hash identifier: Y53yc7uao8Icubzn35l7xyQT+9WrtM443Vwtf6tKCcM=
Subject key identifier: C3:3D:45:18:EE:6E:01:93:00:5D:0B:44:17:36:A4:1B:83:FC:19:10
Certificate issuer: /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial: 54D371
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/wz1FGO5uAZMAXQtEFzakG4P8GRA.roa
Signing time: Sat 01 Jan 2022 00:57:52 +0000
ROA not before: Sat 01 Jan 2022 00:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34113
IP address blocks: 185.97.104.0/24 maxlen: 24
185.97.105.0/24 maxlen: 24
185.97.106.0/24 maxlen: 24
185.97.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5559153 (0x54d371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Validity
Not Before: Jan 1 00:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c33d4518ee6e0193005d0b441736a41b83fc1910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:cc:a6:53:93:d6:fb:13:81:ce:2f:21:15:
dd:01:59:c7:bb:59:9b:e7:d8:52:84:67:c3:28:22:
49:f0:13:73:8a:af:cf:dc:4c:c1:d8:91:dc:02:70:
37:19:26:3b:b5:d7:ca:28:66:f8:48:23:bb:84:0f:
81:15:04:af:27:f9:a9:44:cf:f1:5d:a1:8e:26:71:
59:b8:bc:67:e0:43:15:96:22:56:86:ff:f4:19:a0:
b8:55:de:6c:5c:60:c5:1f:f7:96:58:96:a3:dd:22:
ce:2b:01:18:93:7a:59:22:99:2c:5c:0c:be:dd:3a:
84:9c:00:77:df:9e:26:5e:3a:71:a2:ac:bf:c4:25:
28:db:ae:08:ab:94:63:d7:06:b9:23:9a:50:40:0a:
ab:5b:b9:66:a7:6e:b0:6e:7a:36:85:4c:4c:a9:b5:
f8:d3:2d:d5:76:5f:0d:db:8a:46:09:29:6f:65:1e:
66:4b:97:14:5f:44:d4:34:f3:35:84:72:c0:67:29:
aa:c8:fb:32:ec:59:64:2f:7f:22:81:a1:b9:21:0b:
fa:a2:7a:46:e8:05:a1:aa:ef:4f:b7:29:5b:3d:88:
f4:9b:d0:d7:cb:e8:ba:9c:83:bc:92:8c:f3:c7:10:
c5:46:79:fc:5d:db:ed:d6:45:8a:f8:d1:81:63:23:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:45:18:EE:6E:01:93:00:5D:0B:44:17:36:A4:1B:83:FC:19:10
X509v3 Authority Key Identifier:
keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/wz1FGO5uAZMAXQtEFzakG4P8GRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.104.0/22
Signature Algorithm: sha256WithRSAEncryption
94:8c:4d:77:d0:c5:e6:7f:14:c3:67:60:25:f9:ab:c3:58:3c:
b2:ec:ba:85:c7:cc:f7:ea:59:fb:15:64:fb:78:e3:1c:4e:5c:
49:f3:1d:a9:43:f6:a5:d2:09:17:d1:de:c9:06:27:15:3f:cf:
17:1a:7c:7f:f8:60:75:9f:e9:85:a9:0c:2d:68:89:3e:a3:14:
71:90:53:74:97:0c:50:fc:40:44:d7:a7:64:44:01:ab:54:2c:
6f:8e:4b:b0:8f:99:4c:08:78:d6:55:7d:be:b9:13:4a:4b:48:
85:dd:0e:a0:7f:9b:85:28:7f:a5:34:af:e2:38:1f:0f:16:8d:
2c:1c:74:76:21:a3:e7:c0:a9:f0:26:1f:f4:7f:82:3c:ce:da:
0b:d8:32:23:99:9d:9c:11:17:33:c9:0c:e5:8f:47:31:ca:51:
b9:58:38:a1:7a:40:96:d0:25:57:37:8f:56:61:a3:c1:b2:65:
98:46:f2:31:24:f1:d9:f8:2f:f8:f2:c6:52:01:32:10:b5:89:
b9:23:a5:f6:ff:35:54:b1:44:21:9a:e3:45:41:8e:13:1c:a8:
c5:23:15:66:94:b9:5c:66:15:6e:dd:38:a5:3a:2e:af:f3:63:
6f:bb:0f:82:c2:b5:56:22:79:73:98:38:93:80:3b:b4:01:c6:
89:d5:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:39 2023 by rpki-client on console-fra.rpki-client.org