Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wSv3RiAQ2_kAIzQnyt4-lSLwgOY.roa
File: wSv3RiAQ2_kAIzQnyt4-lSLwgOY.roa (raw, json)
Hash identifier: HeIlUpY3HDP8RB2TUM+vFxoX97rSHoD+q5Rzpi+Mb1I=
Subject key identifier: C1:2B:F7:46:20:10:DB:F9:00:23:34:27:CA:DE:3E:95:22:F0:80:E6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1CFC74C4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wSv3RiAQ2_kAIzQnyt4-lSLwgOY.roa
Signing time: Thu 03 Feb 2022 10:13:57 +0000
ROA not before: Thu 03 Feb 2022 10:13:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 185.221.67.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486307012 (0x1cfc74c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 3 10:13:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c12bf7462010dbf900233427cade3e9522f080e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:e0:99:09:ad:8e:d0:0e:63:f2:f2:67:78:
9e:49:a4:55:a1:42:2c:a8:0e:82:ce:6e:f1:c4:f2:
b9:c2:21:fd:f3:42:a6:47:d5:a2:02:eb:e7:77:34:
94:6a:84:59:19:e6:3a:ad:c1:76:b1:8d:15:9a:16:
0f:a8:24:d8:34:72:12:d9:8a:56:6c:ed:e6:f2:f1:
ef:24:25:b3:c1:07:e3:6f:b4:5a:60:11:df:a1:a4:
52:76:82:93:fd:ce:c2:a8:b9:3f:5b:f2:82:33:4d:
5b:d9:71:91:79:b5:24:58:b8:c6:be:e9:fa:55:f5:
f3:af:04:31:73:c0:22:a1:08:19:ce:39:c1:be:0b:
9e:c4:4b:59:d8:70:f2:9e:a7:7f:e9:ac:27:7c:a7:
9f:e1:86:16:89:a3:88:3f:b6:2b:5f:fc:c6:a7:6d:
e1:3c:b0:8f:87:12:43:7e:8e:3f:bd:9d:8e:51:1a:
c4:73:1a:94:44:a7:53:c8:f0:0d:6e:06:c5:15:48:
5f:08:7b:72:9c:04:2b:d7:8b:fd:41:4b:b1:4b:d6:
40:fb:c0:58:7e:bf:c9:e3:30:9b:54:40:51:71:9d:
6f:fd:17:96:d8:04:00:3b:a4:a3:81:8c:2a:b6:c4:
a9:73:9d:f5:9a:8c:b8:fc:ca:0e:dd:43:24:eb:7d:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2B:F7:46:20:10:DB:F9:00:23:34:27:CA:DE:3E:95:22:F0:80:E6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wSv3RiAQ2_kAIzQnyt4-lSLwgOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.49.0/24
185.221.67.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a1:28:0d:b5:f9:8a:7b:19:fb:a2:23:ea:46:07:0b:42:4f:
4b:98:2a:ce:bf:86:d9:a4:78:fc:80:b0:2a:58:bc:53:5b:3c:
8d:9c:c4:0f:7f:0e:23:de:ec:f4:a6:a2:e4:f0:39:ca:2d:7b:
3f:c4:50:d1:12:bd:75:2e:31:54:cd:28:9d:3e:31:d4:ad:42:
da:b9:c3:8b:45:64:8b:9f:a5:7b:ac:8f:dd:b8:21:74:f4:2a:
35:aa:2e:c5:7e:8f:a9:6c:15:d6:83:50:1d:85:51:ea:ed:c3:
fb:a0:3b:04:ff:60:15:4c:98:61:1a:5a:8e:d9:d8:03:47:8d:
01:14:4f:21:01:fd:ba:24:4b:5e:d8:75:46:06:b4:65:cc:2f:
26:c9:9f:4d:ab:6e:28:d0:6a:c4:08:c5:7f:dc:a7:ea:81:1f:
dd:8c:b3:9e:12:5e:49:99:3e:1a:94:68:5e:89:1e:0e:b5:ce:
6f:99:a1:87:40:9f:97:31:22:45:8d:d6:0d:ba:82:71:8f:b6:
ad:89:4f:56:cd:31:16:0d:26:2c:ce:38:39:66:44:b2:2f:7f:
2e:e3:a1:11:3e:c9:80:78:eb:a1:10:69:b7:e5:9a:67:41:ac:
b5:8a:0e:ac:03:48:ce:91:6d:24:b2:0f:59:ac:b9:aa:be:e5:
90:d9:a1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:50 2023 by rpki-client on console-fra.rpki-client.org