Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Wo6oUNEoshzcrKOCuICsvax-1dE.roa
File: Wo6oUNEoshzcrKOCuICsvax-1dE.roa (raw, json)
Hash identifier: m0/VSlOpHcRtEoeov1l4KjRzzfG3CCQXNNZMU6CFwHg=
Subject key identifier: 5A:8E:A8:50:D1:28:B2:1C:DC:AC:A3:82:B8:80:AC:BD:AC:7E:D5:D1
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 1A8AC11A
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Wo6oUNEoshzcrKOCuICsvax-1dE.roa
Signing time: Sat 01 Jan 2022 11:03:42 +0000
ROA not before: Sat 01 Jan 2022 11:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42167
IP address blocks: 5.226.143.0/24 maxlen: 24
178.239.171.0/24 maxlen: 24
185.216.147.0/24 maxlen: 24
2a0b:b840:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445301018 (0x1a8ac11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 1 11:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a8ea850d128b21cdcaca382b880acbdac7ed5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:79:dc:86:dc:9b:96:b9:dd:57:84:5e:50:
ab:9c:b9:ad:1f:c4:05:42:b6:78:46:fe:cc:0c:ee:
26:db:95:46:e1:9b:b0:b4:5b:ac:86:05:fc:eb:5f:
92:ca:bd:ea:2b:8b:dd:10:58:e7:cc:ed:fd:49:d9:
7e:ae:3a:7c:66:32:db:13:3f:6b:2b:14:10:a9:03:
e3:41:7c:23:8f:15:a0:0e:ea:8c:a8:f5:7c:7f:52:
69:20:54:0d:71:be:96:6f:f0:50:f1:ad:cd:00:89:
58:00:b3:03:3a:e2:25:7e:9a:ce:fb:a1:43:a1:5b:
cb:a5:6c:fb:0d:db:d8:a7:3c:16:34:c6:e6:59:09:
70:ff:86:56:56:24:0d:11:bc:9a:3b:95:de:21:e3:
24:47:dd:b2:5f:79:48:5f:9d:6e:27:f7:1b:dd:47:
5f:95:fb:e4:c6:fb:8b:c2:f6:f5:70:4e:a1:14:0e:
86:f3:02:da:b6:d8:74:e9:19:33:18:51:3f:b2:b7:
e3:d8:03:55:49:fe:48:69:8b:bf:5c:ab:63:43:ed:
91:3a:2b:86:a2:ed:1b:f2:29:61:36:10:b3:a3:ee:
2e:22:93:fc:f9:73:0e:fb:93:26:40:8b:fc:15:a6:
7b:00:66:9e:cf:e9:1d:c8:b0:a3:6d:33:e7:dd:c4:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:A8:50:D1:28:B2:1C:DC:AC:A3:82:B8:80:AC:BD:AC:7E:D5:D1
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/Wo6oUNEoshzcrKOCuICsvax-1dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.143.0/24
178.239.171.0/24
185.216.147.0/24
IPv6:
2a0b:b840:1::/48
Signature Algorithm: sha256WithRSAEncryption
0f:8c:3d:50:35:15:66:3e:37:57:40:34:ac:a5:5a:c9:51:e3:
ec:97:66:6a:9d:26:73:b7:a7:fc:db:f2:26:85:1a:95:f6:73:
cc:bc:87:37:20:1b:4b:c1:ee:a5:82:20:ac:18:fe:c8:36:04:
25:2b:b5:ab:33:a3:ec:0a:df:05:7b:d2:e6:43:b0:02:cc:a4:
af:2c:60:12:da:16:f5:3d:dd:21:a0:98:24:39:7a:01:32:f1:
1a:1f:04:38:0b:56:73:08:46:d9:55:d7:9c:42:01:ef:89:89:
1e:de:ef:ff:1d:44:3b:35:53:00:17:17:1f:53:40:7c:49:81:
68:09:d6:26:09:b5:31:93:8a:74:c1:a8:a0:ef:45:ad:84:4e:
06:5f:f4:75:b1:b7:f8:12:ec:dd:bc:1e:64:bd:1b:a0:ca:6c:
b6:ce:33:53:8f:0b:32:2c:ca:59:5e:1c:a2:77:db:c6:86:d3:
be:a5:6c:82:fa:51:c1:87:c7:9a:db:fb:e7:48:3e:28:12:19:
c1:2a:6d:b4:59:19:7b:33:80:fd:aa:02:0e:46:41:88:5a:3b:
12:9a:92:f7:31:3d:2f:30:2e:63:5b:b6:07:83:94:a3:8d:8e:
96:db:f2:7a:17:da:43:b0:86:ad:c9:67:88:cb:22:ae:b6:e2:
c6:f6:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org