Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/WWGASjBB-SMIRRwyaAqVjfg-RX0.roa
File: WWGASjBB-SMIRRwyaAqVjfg-RX0.roa (raw, json)
Hash identifier: e/J1+LEJ69Mg0iffrAgDKPwHgJskJEr3DmcYOpr8d2g=
Subject key identifier: 59:61:80:4A:30:41:F9:23:08:45:1C:32:68:0A:95:8D:F8:3E:45:7D
Certificate issuer: /CN=995ecde87cb10677895b662e7e77a346bc4ab1f8
Certificate serial: 0184BDB2A196288131AA4DCC11C0A2E25A72
Authority key identifier: 99:5E:CD:E8:7C:B1:06:77:89:5B:66:2E:7E:77:A3:46:BC:4A:B1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mV7N6HyxBneJW2YufnejRrxKsfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/WWGASjBB-SMIRRwyaAqVjfg-RX0.roa
Signing time: Mon 28 Nov 2022 10:05:11 +0000
ROA not before: Mon 28 Nov 2022 10:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44396
IP address blocks: 194.48.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:b2:a1:96:28:81:31:aa:4d:cc:11:c0:a2:e2:5a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995ecde87cb10677895b662e7e77a346bc4ab1f8
Validity
Not Before: Nov 28 10:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5961804a3041f92308451c32680a958df83e457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:b4:dc:68:b8:4b:f4:67:02:3d:95:62:e7:
a9:34:56:bf:d9:c2:ea:3a:eb:be:65:5a:c3:c0:00:
a6:f8:01:0e:79:48:a2:a3:ac:61:c3:75:5d:87:a3:
f8:08:9d:04:52:d8:69:1e:5b:c1:3c:3a:5a:9d:83:
9a:6b:cb:69:6c:4d:f5:77:f9:20:29:f1:97:b4:1b:
b8:b8:4b:9a:94:c1:4d:b5:a8:ce:9c:09:dc:32:61:
2d:6b:7c:26:77:d1:15:81:b4:19:14:d1:44:cc:dc:
0e:1a:77:2a:1c:d8:d9:b6:50:25:ea:d3:3b:e9:75:
d0:d0:d5:60:3e:2c:1c:a5:c2:c5:76:1a:78:56:c4:
7d:89:a3:37:8d:82:38:a0:22:ec:a0:9d:39:1e:d0:
38:1c:d8:f6:cd:d2:8c:af:28:5a:01:85:99:c0:c3:
a0:fe:db:ee:f9:bf:10:c2:cf:d1:66:68:9d:2e:de:
b8:3d:5b:33:84:b9:fe:f8:f3:99:80:68:fd:4c:11:
e7:33:dd:a6:b9:c8:2c:4c:f0:d8:22:82:0a:07:31:
74:b9:ac:83:30:91:32:0b:56:62:ad:b9:59:f2:58:
5c:9a:bb:57:18:d0:92:69:45:10:9a:7f:76:88:b3:
3f:11:81:14:43:84:41:cd:97:9d:7d:da:06:78:af:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:80:4A:30:41:F9:23:08:45:1C:32:68:0A:95:8D:F8:3E:45:7D
X509v3 Authority Key Identifier:
keyid:99:5E:CD:E8:7C:B1:06:77:89:5B:66:2E:7E:77:A3:46:BC:4A:B1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mV7N6HyxBneJW2YufnejRrxKsfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/WWGASjBB-SMIRRwyaAqVjfg-RX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/51b5e1-03da-4150-bd21-15fe72b15468/1/mV7N6HyxBneJW2YufnejRrxKsfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.206.0/24
Signature Algorithm: sha256WithRSAEncryption
27:bc:cc:3d:e0:b9:1f:b1:18:13:dd:4c:81:a9:29:dd:03:ad:
2b:af:c0:0d:f9:8c:ba:75:3f:68:fd:77:a2:8c:ca:7f:87:2b:
42:84:7d:0b:49:8b:ac:1c:e9:de:a9:ca:f5:08:15:63:a0:6f:
5a:82:4a:8f:85:d8:49:0d:14:83:77:73:7a:8f:c5:4c:75:06:
90:6a:6c:78:cb:b6:c5:13:e5:b2:42:cb:61:96:db:7b:21:e0:
cd:86:35:f3:d8:f0:04:b2:25:c9:74:ec:3b:c9:c8:86:fe:ba:
8c:52:c8:2e:8c:cb:ae:60:b0:dd:52:da:91:2e:41:aa:9a:24:
0b:f4:ad:5b:52:7b:fa:da:e6:ac:01:ff:11:73:46:73:06:4d:
fb:eb:ef:e1:8a:e8:a3:47:26:46:5a:21:36:3d:7e:4b:b9:bb:
7a:d6:6c:c6:36:68:1f:26:35:60:3a:e0:84:b9:0f:d7:a2:a9:
c3:2e:b8:94:79:7d:d2:6b:ac:6e:99:74:51:a9:44:99:b3:e8:
a0:eb:36:eb:f5:62:08:ac:68:6f:f2:c9:52:e6:63:ee:ce:e0:
95:9e:6b:38:ff:3e:01:b0:8c:77:b5:7d:34:c2:50:88:c4:17:
fb:5b:5e:e5:b0:96:71:67:19:b9:05:2b:ba:34:3f:20:2c:a8:
4d:b6:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:47 2024 by rpki-client on console-fra.rpki-client.org