Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/WHE23z7Mm2to4ehrVZYoJfWlBJw.roa
File: WHE23z7Mm2to4ehrVZYoJfWlBJw.roa (raw, json)
Hash identifier: 89fralYpzdBCSSwNwWzDlG3pTNJ3w5O+yg17xoP/NYE=
Subject key identifier: 58:71:36:DF:3E:CC:9B:6B:68:E1:E8:6B:55:96:28:25:F5:A5:04:9C
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 1A95169B
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/WHE23z7Mm2to4ehrVZYoJfWlBJw.roa
Signing time: Sat 01 Jan 2022 01:57:04 +0000
ROA not before: Sat 01 Jan 2022 01:57:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29470
IP address blocks: 185.45.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445978267 (0x1a95169b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 1 01:57:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=587136df3ecc9b6b68e1e86b55962825f5a5049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:69:dc:2a:f2:56:1c:02:9f:c8:08:11:db:11:
36:29:e8:c6:06:68:f1:41:33:5a:f3:82:a8:96:a3:
4d:e4:8e:c2:63:0a:32:fa:45:f3:8e:61:ee:bf:2c:
f2:ed:13:63:a7:39:f1:5f:23:91:6a:af:02:d3:89:
ad:e9:e1:e4:e6:21:4f:b5:ce:12:ca:2f:6f:6a:b5:
b5:d7:ed:b2:6f:dc:bf:fc:fe:59:4e:b5:8c:a0:47:
4f:eb:2a:e5:2e:eb:16:f7:6e:d8:14:1d:3d:f4:f5:
84:b8:40:15:f0:5b:72:e3:22:7c:17:0a:80:f4:18:
89:4c:3e:89:80:fd:0c:74:86:32:70:e9:12:4d:76:
ab:ee:15:6d:97:a3:58:3f:40:3f:f3:b3:56:8e:82:
74:9a:3b:b9:73:ae:b7:3c:76:87:68:c6:6e:d9:4c:
61:4d:e8:02:8d:a4:49:03:b1:91:10:13:95:da:51:
bb:5f:22:1a:fb:5c:96:51:72:7b:b7:2e:9e:05:17:
ac:6f:60:82:07:37:31:7a:35:ad:cf:6a:36:d4:92:
c1:48:4b:c4:7f:17:14:08:fe:0b:ba:ec:1a:5a:95:
8a:e7:6f:1e:c2:e0:b5:80:62:d4:91:67:fe:3c:02:
29:5e:2e:eb:85:37:53:1a:61:0b:3e:4e:ab:34:42:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:36:DF:3E:CC:9B:6B:68:E1:E8:6B:55:96:28:25:F5:A5:04:9C
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/WHE23z7Mm2to4ehrVZYoJfWlBJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c8:90:1d:bb:cf:37:11:39:21:d5:a9:e0:94:8e:59:4e:e9:
55:fd:d0:a7:9a:04:0e:fc:ed:d0:0c:87:40:49:2e:c2:5a:ff:
a1:28:15:6d:65:8b:46:1b:ba:8e:67:16:10:1d:68:04:c6:fb:
ed:92:91:dc:f9:6a:41:aa:62:a9:3a:ce:a0:89:aa:58:ff:31:
c6:15:e5:13:dd:1d:62:4e:12:f1:14:14:c4:f3:17:10:7c:53:
15:8d:59:c9:08:04:ab:97:1c:c5:9d:74:2c:97:d2:8a:c4:56:
e9:13:a6:87:b3:f1:98:e0:e3:22:09:74:09:36:d2:a8:bc:79:
02:95:50:88:6d:94:c5:8e:8f:c2:75:c3:aa:44:f2:05:80:6f:
35:c3:89:7a:be:61:96:12:e6:bb:e8:19:b9:21:a1:81:79:a3:
63:f0:72:52:78:b3:46:a1:db:20:32:e8:98:75:a3:28:40:65:
c9:8b:76:7c:dc:36:31:cd:3e:d1:5d:20:d7:4c:f6:40:f7:63:
68:67:4f:45:c8:ac:98:23:23:9c:cd:0d:34:dd:0e:ab:d9:a5:
90:02:5e:84:a2:fe:32:f3:69:d1:a1:39:3a:ea:9e:cc:ed:c8:
99:51:a6:a6:08:8a:33:51:ae:e0:dd:46:f5:da:13:a4:73:5a:
c3:be:ea:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:11 2023 by rpki-client on console-ams.rpki-client.org