Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/W405FX7MoePZpBqjdVMB-J4R5EY.roa
File: W405FX7MoePZpBqjdVMB-J4R5EY.roa (raw, json)
Hash identifier: k5Px+I3TGvHKP/LG155pl5KhZgfiYSZn8nC5hFa0x5w=
Subject key identifier: 5B:8D:39:15:7E:CC:A1:E3:D9:A4:1A:A3:75:53:01:F8:9E:11:E4:46
Certificate issuer: /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial: 0184C8691A9A4A434EEFA7F814CBA4985AF3
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/W405FX7MoePZpBqjdVMB-J4R5EY.roa
Signing time: Wed 30 Nov 2022 12:00:41 +0000
ROA not before: Wed 30 Nov 2022 12:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56548
IP address blocks: 185.199.208.0/24 maxlen: 24
185.199.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:69:1a:9a:4a:43:4e:ef:a7:f8:14:cb:a4:98:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Validity
Not Before: Nov 30 12:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b8d39157ecca1e3d9a41aa3755301f89e11e446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:46:ca:7a:09:15:a9:f8:3f:4f:85:96:1b:
47:62:59:ab:de:7c:17:99:e2:e5:6d:2c:a8:eb:cd:
15:9e:44:c4:81:59:95:09:63:ca:cc:65:10:7c:8d:
35:ab:8b:e5:4c:cb:1d:0d:94:d7:1f:4d:7f:7a:63:
07:d7:2d:5d:d9:77:eb:50:bf:0c:5f:92:8a:20:62:
0c:9b:c8:64:5d:f6:d6:c5:ec:72:70:51:e4:7b:ad:
a4:eb:44:fc:af:b1:f3:74:b6:77:99:fa:1d:7a:d7:
b3:6c:81:cf:62:be:10:2c:2b:a4:62:e2:38:dd:18:
0a:c7:b2:93:d3:66:3a:29:7d:18:82:18:6a:7e:b6:
1a:53:54:bf:bb:29:e8:46:4b:aa:14:0c:27:25:31:
cb:71:b2:6e:4b:f2:d4:13:cd:bf:c7:01:af:c7:f8:
f5:6c:e3:8d:e6:5c:e4:6f:02:e3:a9:13:4d:2e:b9:
e1:96:c4:af:05:44:d6:ba:fb:03:88:ce:df:b2:69:
f1:dc:00:05:32:4b:3f:da:88:27:5e:3e:7d:e0:08:
f5:14:ff:89:8d:30:fd:8a:5d:0c:22:e2:22:d2:1e:
4c:53:77:7f:14:89:77:18:72:9c:f7:a3:45:46:ed:
f9:9d:b7:91:6b:a8:87:67:43:48:f9:53:c6:1a:ea:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8D:39:15:7E:CC:A1:E3:D9:A4:1A:A3:75:53:01:F8:9E:11:E4:46
X509v3 Authority Key Identifier:
keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/W405FX7MoePZpBqjdVMB-J4R5EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.208.0/24
185.199.211.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a5:15:ab:cf:e7:f0:69:23:09:e4:34:4f:5d:24:9a:92:18:
71:31:8b:89:39:2e:cf:90:d8:19:8a:8f:9a:4e:84:a6:cf:d0:
9a:f3:8d:a7:d1:98:d5:50:69:df:67:fb:54:6d:8c:91:28:e7:
b8:3c:1f:cc:6a:e0:9c:cb:0b:bb:65:be:08:95:e7:d9:c8:88:
39:06:d3:3f:ff:a2:85:2a:4f:4b:e1:78:d4:21:cb:0a:cd:5a:
5f:db:78:7b:03:cd:f4:a9:7e:2a:a4:21:e1:85:69:2f:21:ae:
0a:ba:0f:63:dd:ce:e8:56:9c:30:8f:36:17:7c:19:fc:66:b8:
10:36:88:9f:75:7a:6b:98:9d:33:69:9c:bb:b5:9e:01:7f:ee:
49:a8:ad:f8:83:df:0d:75:7e:06:b6:fe:ca:e8:11:df:88:06:
6f:9b:46:8e:44:c1:1e:2e:5e:8e:98:80:e9:4e:8d:21:04:df:
d0:b7:67:9d:7e:0d:4b:60:2b:07:17:73:90:db:4b:e2:8c:94:
e8:67:a6:e9:41:bd:8c:82:5f:8e:04:dc:d6:32:66:2d:11:63:
69:40:3d:08:c1:58:c8:97:f8:fc:a2:ca:d0:b2:a1:a9:21:56:
09:9c:70:c8:ae:e8:e4:1a:7b:d0:c0:50:c1:58:ca:69:58:3d:
fd:b7:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:51 2024 by rpki-client on console-ams.rpki-client.org