Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wqHlJS-FynC6DeVVAAs-ewLoAIw.roa
File: wqHlJS-FynC6DeVVAAs-ewLoAIw.roa (raw, json)
Hash identifier: NHuCCgTx2I68iNNu1/Z2aUAXX4V821t98cgmSvzSJ1o=
Subject key identifier: C2:A1:E5:25:2F:85:CA:70:BA:0D:E5:55:00:0B:3E:7B:02:E8:00:8C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185076BA512FB232641FDBF97F9269C6D38
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wqHlJS-FynC6DeVVAAs-ewLoAIw.roa
Signing time: Mon 12 Dec 2022 17:39:33 +0000
ROA not before: Mon 12 Dec 2022 17:39:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138867
IP address blocks: 85.158.148.0/24 maxlen: 24
85.158.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:07:6b:a5:12:fb:23:26:41:fd:bf:97:f9:26:9c:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 12 17:39:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2a1e5252f85ca70ba0de555000b3e7b02e8008c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:df:66:6e:87:6d:7d:85:44:29:f0:0a:46:66:
20:6d:a8:7a:0c:9c:d0:24:28:c6:dc:11:79:fd:bc:
fa:d1:3f:f8:ad:cc:13:d5:31:18:be:4a:22:2e:4f:
19:35:1f:eb:6d:f1:d7:cd:bb:3b:dd:9a:b5:72:75:
0e:0f:52:6f:ca:98:1e:c9:57:b3:af:bd:e8:8c:b7:
d2:fa:44:73:da:18:cf:f3:c0:8b:ba:c8:4a:06:5a:
f3:6b:22:f3:33:dd:76:0d:29:11:f8:56:6c:32:17:
06:23:05:06:de:94:a6:d8:42:50:e9:bd:6c:67:08:
43:aa:12:9d:70:53:f5:7c:c6:98:45:e4:a6:71:d8:
bf:c9:76:61:cd:4a:e8:8c:fd:ec:74:f3:68:13:94:
15:95:1c:47:92:5c:9a:2b:23:76:2e:1f:79:41:c7:
2c:e3:19:76:41:79:52:5e:90:c6:97:86:f2:cd:78:
52:88:15:3e:fe:a3:dd:a8:c2:b2:a7:de:a2:4a:2b:
15:51:98:f1:df:58:76:15:6b:e6:d8:2e:6d:5e:a7:
28:b6:ec:e3:70:22:a1:ee:f8:26:f9:4b:39:78:96:
8c:b9:d7:36:5f:2f:21:13:eb:e8:de:e5:13:29:33:
51:50:48:3e:74:ad:ea:c2:15:f6:52:4d:06:fe:ce:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A1:E5:25:2F:85:CA:70:BA:0D:E5:55:00:0B:3E:7B:02:E8:00:8C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wqHlJS-FynC6DeVVAAs-ewLoAIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.148.0/24
85.158.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b2:00:87:62:e0:af:13:33:d9:2f:00:57:a5:e0:ec:a4:69:
8d:c1:cc:5a:af:83:c7:90:5c:8c:1f:cd:fe:a9:b9:f2:7f:a2:
eb:03:59:d1:9a:f6:a3:47:15:bd:f9:f4:32:20:66:46:48:61:
60:a2:4d:0b:6b:e9:cf:c3:73:42:c5:a8:20:a3:ae:34:3f:53:
02:01:5d:42:0b:ee:78:58:37:f1:60:31:da:20:2e:29:0b:c1:
8a:8c:70:cd:f4:44:79:c5:ca:9d:d8:e9:a3:dc:ce:9d:5e:b0:
9f:2c:cf:69:ec:ae:41:ea:fe:87:d7:02:f4:f5:65:48:06:2e:
43:94:3f:62:cb:d6:1b:9f:d8:c3:af:61:8d:df:d2:5e:25:02:
b5:62:c5:60:2a:71:6f:14:94:37:c0:66:9d:f6:af:74:dd:88:
4a:66:58:6f:1c:b3:f5:86:cc:7d:86:1b:12:d9:66:13:b1:bd:
3c:6e:fe:43:20:c7:a7:ad:55:29:c6:68:3f:57:38:47:a6:55:
b1:46:1f:a7:b3:c9:9a:ed:e2:3f:79:40:57:1c:18:4c:4f:19:
b9:29:71:44:f0:c9:5e:5f:f8:cc:18:18:9d:d4:48:32:44:8e:
df:07:1c:93:b6:56:ae:3b:f2:5e:50:e1:b6:c2:bb:37:36:39:
c1:63:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org