Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wLhFJHOCf8Mvic7Bxxl953sQVNE.roa
File: wLhFJHOCf8Mvic7Bxxl953sQVNE.roa (raw, json)
Hash identifier: Fy4Cm01Yq9PxvMxA/UmJWCUShH9VaBaPMOnFUQi/Pb8=
Subject key identifier: C0:B8:45:24:73:82:7F:C3:2F:89:CE:C1:C7:19:7D:E7:7B:10:54:D1
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0184AEF129EEFF195A571202B583D602B309
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wLhFJHOCf8Mvic7Bxxl953sQVNE.roa
Signing time: Fri 25 Nov 2022 13:19:11 +0000
ROA not before: Fri 25 Nov 2022 13:19:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 5.10.244.0/22 maxlen: 22
5.10.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ae:f1:29:ee:ff:19:5a:57:12:02:b5:83:d6:02:b3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Nov 25 13:19:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0b8452473827fc32f89cec1c7197de77b1054d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:0f:6c:c1:84:83:a8:bb:79:30:cf:70:67:
48:52:44:1e:f1:8e:70:a8:bd:d6:2d:16:7c:78:d1:
80:07:7f:56:f4:ec:25:cf:aa:fe:58:74:75:bd:be:
7a:0a:45:a6:0c:f2:35:0c:cb:b5:42:ff:c0:0c:02:
89:bc:9b:92:c6:c2:4e:06:31:4f:0f:90:52:48:62:
85:d8:40:06:92:bb:40:42:7c:f6:62:1c:82:12:da:
4c:01:d5:a7:a3:b6:26:8d:d3:de:44:60:d2:69:64:
69:9d:26:f9:6b:ce:73:27:13:79:83:6f:d2:0a:84:
d0:1e:ba:e5:dc:0d:9c:21:cd:91:32:d8:5b:b7:df:
88:6e:8c:15:b5:d4:19:77:94:9d:f3:6a:73:7b:ec:
8e:3a:0a:92:f7:10:e2:f3:df:a1:66:32:84:e3:79:
76:a4:a5:a9:f3:29:eb:17:36:ec:64:ef:74:26:38:
29:17:fe:10:f8:69:b0:ee:10:dd:7a:8b:19:a4:64:
31:fe:e6:48:9c:b3:e8:e5:52:18:f6:ad:24:e8:18:
00:5d:cc:91:f5:a2:f4:65:77:4f:61:ec:f3:ee:6f:
41:23:e8:62:ed:30:cc:7b:d7:6f:f5:6e:49:e0:82:
26:de:60:48:a6:3a:dc:c0:4c:16:3d:99:4f:fa:a0:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B8:45:24:73:82:7F:C3:2F:89:CE:C1:C7:19:7D:E7:7B:10:54:D1
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wLhFJHOCf8Mvic7Bxxl953sQVNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.244.0/22
5.10.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:b9:b1:f3:a0:8c:e9:f5:02:1a:d8:40:58:ff:30:09:1a:d7:
ac:8b:5e:4c:8e:c9:96:b5:b3:9a:3e:76:d1:10:46:99:ce:4a:
40:38:cc:06:75:37:8f:b1:f6:2e:5c:18:e7:46:cf:54:bf:a9:
4a:be:6b:47:0a:18:92:f1:7f:69:6d:28:05:99:a5:54:b4:a8:
ac:24:a8:f8:ae:28:11:85:78:f4:f4:c1:d4:7d:75:73:ba:3e:
6f:24:b2:03:a8:3a:64:05:72:83:21:a5:ba:95:ff:58:80:f0:
8b:e6:5c:d2:b1:7c:bb:ca:0c:07:77:fc:95:74:29:a3:a2:48:
f7:f4:f2:92:1c:47:03:e4:80:ed:b3:b3:2a:3d:a3:6b:c9:37:
cb:6f:e3:0e:cd:50:2c:49:b8:77:4b:7b:76:29:df:59:cd:bf:
b9:95:49:26:1f:f9:ca:b2:5f:d6:f7:b7:f4:1e:5a:c4:d3:21:
a6:2d:9d:a3:ef:8c:6f:e0:6e:4e:8a:93:c2:86:76:db:71:83:
6f:23:1a:e2:bd:f6:c2:8d:a0:c0:16:8b:1d:35:58:b4:fe:6f:
74:f5:6b:7c:77:73:a0:3d:b3:04:a7:47:d1:08:49:eb:87:11:
8a:e3:18:76:49:c8:1a:06:2e:c9:2d:4d:af:41:43:0d:c2:c2:
d0:c8:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org