Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/CtmmgSpyUOHsf8zrvbkQWvDtm-w.roa
File: CtmmgSpyUOHsf8zrvbkQWvDtm-w.roa (raw, json)
Hash identifier: QXXTODW4exakI9JI+C61bA2YGfrEziHWiZoVBcKwQYc=
Subject key identifier: 0A:D9:A6:81:2A:72:50:E1:EC:7F:CC:EB:BD:B9:10:5A:F0:ED:9B:EC
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 06362B4B
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/CtmmgSpyUOHsf8zrvbkQWvDtm-w.roa
Signing time: Sat 01 Jan 2022 01:57:40 +0000
ROA not before: Sat 01 Jan 2022 01:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43242
IP address blocks: 185.171.92.0/24 maxlen: 24
185.171.93.0/24 maxlen: 24
185.171.92.0/22 maxlen: 22
185.171.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104213323 (0x6362b4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Jan 1 01:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ad9a6812a7250e1ec7fccebbdb9105af0ed9bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:76:2a:5a:ac:7a:46:ca:03:4d:e5:29:ce:
50:2a:1d:4e:b5:e9:90:8d:5f:c3:5c:62:87:77:49:
cd:38:b6:7e:f0:36:5c:c9:77:3c:0f:41:da:7b:f5:
fa:0a:b3:74:d1:0a:81:4b:fc:62:6e:c5:3f:4c:d2:
a6:4c:80:8f:63:63:79:1d:57:e2:fb:7e:bb:31:f9:
4a:54:df:67:f8:92:77:62:b6:36:61:2a:03:2c:8a:
d3:24:c5:c9:cc:2a:5b:b9:9d:ec:82:43:93:d7:3c:
1e:5b:e0:96:6e:00:97:98:d9:4e:e0:b6:e6:98:a6:
ff:38:ee:13:66:08:e5:1c:ff:07:95:97:f2:7b:3c:
93:9a:4b:c0:7c:0f:3b:65:16:5e:d9:8b:bf:20:83:
c1:05:0e:44:e0:f2:d8:10:31:0f:cd:99:a7:ac:55:
78:e5:de:d9:02:0f:6e:1d:98:f8:64:65:39:24:68:
de:5a:c5:7b:32:e1:c5:48:3e:1f:4f:f1:79:0a:71:
b8:ce:0b:bf:b9:c3:d3:6b:f9:96:39:27:99:ac:87:
2f:cf:7c:15:44:6d:6d:ec:6e:22:f2:ce:76:b2:5b:
56:45:de:03:46:1d:bd:6b:c5:53:c8:34:00:46:12:
8c:ce:3d:07:f1:6a:cc:9f:b1:45:84:fc:8f:b9:09:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D9:A6:81:2A:72:50:E1:EC:7F:CC:EB:BD:B9:10:5A:F0:ED:9B:EC
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/CtmmgSpyUOHsf8zrvbkQWvDtm-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:78:9b:aa:49:03:a9:57:c5:a9:bd:8f:b5:d8:49:a1:a2:2b:
a4:1d:cb:7b:e4:e8:67:dc:ec:22:73:c5:24:a5:fc:f9:f1:ca:
1a:03:29:e9:b7:3a:b7:76:ee:80:35:94:c6:d3:43:8a:55:2f:
f5:78:3a:a4:ea:c5:72:f4:a6:62:a0:4e:25:3a:8d:a7:f8:b1:
59:cc:e7:f7:71:98:c1:97:e4:b9:0b:73:2a:6b:1d:f4:f2:36:
40:53:e7:fe:44:2f:3d:73:b2:ab:97:af:9e:97:e5:77:70:17:
05:01:78:3a:f9:e6:1e:1d:51:22:09:a8:e3:32:0c:44:04:2d:
97:f4:d3:83:d3:f4:5b:0c:46:03:dc:7a:db:e7:e5:2a:83:c5:
6f:2b:6a:d0:4e:9a:8b:13:49:d6:fa:dc:d7:e9:4e:02:df:69:
f3:3a:7c:56:30:c7:a3:6e:27:a2:4a:78:90:d5:eb:86:a4:61:
e2:c3:fd:e9:53:8a:dc:5f:f1:7b:b1:ec:eb:a6:2c:02:a0:3e:
ab:11:91:9e:3a:2c:22:1c:ab:b6:ec:9d:ed:ae:cb:32:47:12:
03:70:b1:36:ca:db:0b:5d:21:8a:42:da:6f:31:56:b5:b6:5a:
29:a7:0c:de:33:f2:5e:90:cd:ae:44:cf:fb:6f:82:55:9c:7e:
5b:c3:93:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:30 2024 by rpki-client on console-fra.rpki-client.org