Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/WEshX3TE-MuD9ud5hdln40L8thc.roa
File: WEshX3TE-MuD9ud5hdln40L8thc.roa (raw, json)
Hash identifier: OdzK6WgTvBM+VLCgDeIvfoI1nv1GHT93bYsfLyeq2ao=
Subject key identifier: 58:4B:21:5F:74:C4:F8:CB:83:F6:E7:79:85:D9:67:E3:42:FC:B6:17
Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial: 01A846C4
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/WEshX3TE-MuD9ud5hdln40L8thc.roa
Signing time: Sat 01 Jan 2022 08:02:36 +0000
ROA not before: Sat 01 Jan 2022 08:02:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 31.25.14.0/24 maxlen: 24
31.25.13.0/24 maxlen: 24
31.25.12.0/24 maxlen: 24
185.197.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27805380 (0x1a846c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Validity
Not Before: Jan 1 08:02:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=584b215f74c4f8cb83f6e77985d967e342fcb617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:3a:d0:da:58:c9:f5:04:70:b6:63:aa:35:
36:15:c7:97:58:84:39:ed:34:00:b4:8e:25:13:0e:
41:36:e9:85:8d:85:e2:b3:49:49:d7:33:38:74:b4:
6a:c0:08:9a:b7:98:85:01:34:52:0f:df:97:89:0a:
33:88:ae:67:11:b7:86:be:b1:69:59:43:cd:80:2b:
23:c3:42:7f:64:11:1b:7d:bc:f1:83:76:85:ce:d8:
92:68:0e:d1:b7:2d:e7:82:b1:b3:c9:b9:e4:8c:67:
29:dd:84:c1:39:09:44:d8:fd:75:be:b6:a8:c8:c1:
c4:95:b5:7f:b0:b8:fa:3a:5a:ea:63:c5:df:bd:82:
ce:e4:8d:fc:b2:99:1c:fe:f0:6a:04:85:7b:20:e0:
86:96:43:b4:9c:8f:0a:b9:12:f7:cc:77:e0:ca:18:
97:8f:c6:89:0c:89:21:0b:84:f1:22:76:91:1a:8d:
c6:a7:d7:bd:f9:04:d7:6f:ca:dd:f5:b8:0b:4a:33:
eb:55:2b:d9:83:10:e1:80:94:12:9c:87:b3:1f:a4:
41:19:3a:cb:3f:31:85:07:0b:3e:ae:5a:49:a5:09:
da:17:4b:3f:f6:9e:c3:59:ae:04:ee:81:fc:23:12:
ff:13:cb:d3:88:e9:c6:10:8e:0b:06:30:e2:3c:f9:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:21:5F:74:C4:F8:CB:83:F6:E7:79:85:D9:67:E3:42:FC:B6:17
X509v3 Authority Key Identifier:
keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/WEshX3TE-MuD9ud5hdln40L8thc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.12.0-31.25.14.255
185.197.148.0/24
Signature Algorithm: sha256WithRSAEncryption
03:e4:2a:92:fb:ed:4d:f6:aa:f9:ee:90:ff:76:65:19:02:91:
4a:ff:ac:9d:35:e8:02:e3:73:e6:3a:b9:58:7c:ce:cf:cd:6e:
69:6f:ad:82:58:7a:54:ec:b5:1d:b0:17:ea:5b:7e:7b:08:d1:
2e:c3:c3:6a:b8:20:ef:16:f3:6f:ad:0c:28:de:f3:53:8e:1c:
30:0f:a8:f3:c9:89:bc:8d:6d:76:50:b9:bd:9a:b3:1c:9f:bf:
4b:9b:ea:3b:80:9b:34:b2:d4:dc:52:82:66:53:fe:40:c6:49:
4c:90:a8:d7:14:26:5c:78:09:87:20:b2:b9:67:b0:16:fe:c5:
27:5c:88:1e:76:06:ae:ab:86:16:9a:23:dd:f5:02:7f:ef:60:
1f:e1:75:ab:72:8f:fa:75:1c:6a:0a:26:fe:cd:84:12:1b:2a:
ac:96:af:ad:7d:78:29:7d:32:ef:c2:fe:a7:2d:60:42:ed:37:
04:b8:84:7b:37:95:c6:d3:e2:4c:19:4f:b7:84:7d:9e:17:97:
62:1e:90:48:1c:c7:e3:a5:65:e2:74:46:e9:e8:53:b6:dc:e5:
03:db:b7:07:9b:c9:b9:b4:62:24:bb:72:b9:6d:c9:42:b9:0a:
48:d6:38:75:4a:a1:cc:68:d8:3e:a4:39:8c:40:00:39:ec:d6:
ed:6d:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org