Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/wW_gf7LOXcePXnPwLdMxdz50G6s.roa
File: wW_gf7LOXcePXnPwLdMxdz50G6s.roa (raw, json)
Hash identifier: hl0ahLTT/9Zlz7ISZWfxXghJT1YP2vJ3btYi8EhpzvY=
Subject key identifier: C1:6F:E0:7F:B2:CE:5D:C7:8F:5E:73:F0:2D:D3:31:77:3E:74:1B:AB
Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Certificate serial: 025E99
Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/wW_gf7LOXcePXnPwLdMxdz50G6s.roa
Signing time: Wed 01 Jun 2022 11:11:20 +0000
ROA not before: Wed 01 Jun 2022 11:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212816
IP address blocks: 46.18.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155289 (0x25e99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229
Validity
Not Before: Jun 1 11:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c16fe07fb2ce5dc78f5e73f02dd331773e741bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:4c:ca:2d:f9:b9:1c:65:fe:f2:b8:f1:a7:
80:13:b6:4f:76:37:46:b6:2f:68:6f:03:cf:21:f9:
81:f7:a3:aa:28:bb:02:7a:3f:33:e3:b0:77:78:f7:
75:a2:1b:5c:2e:31:c7:37:04:fd:d2:9f:7b:0f:5c:
33:47:d6:76:a6:ca:18:74:ac:02:27:09:20:9a:78:
19:4c:6b:dc:cf:ca:7d:db:28:e0:c1:d7:03:25:9b:
74:e6:6e:a6:74:ef:45:61:59:4b:94:4b:98:f7:bd:
83:36:89:e2:71:e6:e8:1d:07:23:46:08:3c:92:1f:
50:54:ca:a2:9a:a8:7d:e7:ea:a9:06:f2:f2:58:ac:
79:94:bf:b9:86:25:d5:34:26:ff:51:a9:a0:61:fc:
87:82:49:9f:2b:37:94:1a:fb:f8:e0:bb:42:fd:1a:
91:61:21:60:83:79:43:0e:d9:e7:81:d1:80:be:0e:
de:80:8b:0b:99:eb:10:b2:6d:72:bf:a5:71:e8:80:
46:2b:4c:8f:8c:88:ad:35:75:7c:3c:3e:cc:a9:80:
20:c7:e7:df:2a:6a:14:29:1e:62:45:1c:97:d8:70:
60:7f:da:87:2b:84:2e:b6:dc:4d:bc:4e:30:68:f0:
e7:5b:65:7c:35:28:45:2e:85:e9:9b:aa:e5:c2:71:
9a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6F:E0:7F:B2:CE:5D:C7:8F:5E:73:F0:2D:D3:31:77:3E:74:1B:AB
X509v3 Authority Key Identifier:
keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/wW_gf7LOXcePXnPwLdMxdz50G6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.108.0/24
Signature Algorithm: sha256WithRSAEncryption
61:17:32:cc:eb:12:ee:23:a9:b6:84:13:25:c1:61:dd:71:e8:
ff:6d:47:c5:99:57:ba:d1:c7:27:bd:95:df:6b:aa:f2:c1:5a:
0e:91:e4:81:43:3d:f1:73:46:9c:b5:cf:6e:65:47:a9:c1:ae:
33:e5:d4:fe:0a:9b:17:dd:4c:46:fd:94:75:33:9c:9f:66:8f:
98:f1:43:5f:03:36:51:25:fb:d9:df:f1:2f:47:3c:ec:17:73:
58:7e:eb:d9:64:b7:30:f7:df:ec:09:d4:79:3f:4d:ab:d9:9f:
57:d6:70:66:b6:0d:96:ec:6f:80:31:3b:62:22:ec:f4:35:5d:
29:5f:e6:ab:b3:e8:8e:95:32:3d:98:d5:1f:0f:a9:7e:84:f1:
57:84:cc:b0:f3:78:4e:92:77:6c:6c:14:0e:49:9b:10:2b:a2:
20:4c:64:a1:07:ed:21:ce:26:9e:f4:3a:25:73:8c:14:d2:46:
0d:11:ad:75:c9:7a:fb:95:03:81:66:9a:3d:0a:ef:57:8e:9a:
ea:ea:99:dd:55:21:aa:80:66:3b:eb:22:a0:f1:f6:c8:54:23:
b6:4b:2a:51:b7:f5:54:70:0b:4f:e5:11:5d:6e:81:88:d0:dd:
58:5f:9a:be:0a:55:57:7e:cc:2e:28:48:8e:90:32:d0:9b:01:
8a:54:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org