Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w9kkcuc_Ux6tkJGw4E4aBxs-Yf4.roa
File: w9kkcuc_Ux6tkJGw4E4aBxs-Yf4.roa (raw, json)
Hash identifier: 33X06h3spGOM3TvUZ+pAUWxuMbZ/SF0anximAZnv5AE=
Subject key identifier: C3:D9:24:72:E7:3F:53:1E:AD:90:91:B0:E0:4E:1A:07:1B:3E:61:FE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0A5D6EF9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w9kkcuc_Ux6tkJGw4E4aBxs-Yf4.roa
Signing time: Tue 10 May 2022 11:40:02 +0000
ROA not before: Tue 10 May 2022 11:40:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59592
IP address blocks: 5.231.200.0/24 maxlen: 32
5.230.206.0/24 maxlen: 32
5.230.220.0/24 maxlen: 32
185.13.158.0/24 maxlen: 32
5.231.87.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173895417 (0xa5d6ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 10 11:40:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3d92472e73f531ead9091b0e04e1a071b3e61fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:eb:21:81:3e:42:06:03:18:58:a9:f4:bc:
3f:84:55:93:02:64:f2:0e:48:c0:a7:5a:e2:ff:17:
64:c1:fd:e0:f5:24:61:d0:5f:ba:df:3a:6e:48:0f:
b8:d3:e6:5c:8c:d8:1c:80:11:48:12:bc:db:7a:9c:
e5:9c:ae:f7:3f:dc:be:3f:d0:6e:8b:52:e2:8f:bc:
b5:60:1d:3f:22:72:85:d3:6e:30:7f:16:95:97:b2:
38:fa:d5:84:5f:c5:e6:a6:78:04:0c:4a:d1:eb:60:
87:ca:7f:b0:f0:92:1d:fb:bf:8c:49:51:80:93:b3:
a3:93:95:c4:43:55:3f:a4:a9:1c:17:6a:7b:90:fe:
4f:e0:c9:2f:36:29:59:8e:bd:88:c0:dd:28:42:56:
e1:7c:3b:5d:09:50:b0:27:6b:49:b0:1f:43:3a:c7:
7f:26:9b:24:a9:da:f3:c8:63:71:ca:8d:7d:d3:44:
57:e7:ad:87:69:7f:a2:b5:5a:85:d8:b2:ad:d4:e5:
d4:1f:a1:ad:d8:69:72:19:98:5e:7d:c6:d6:93:95:
98:f7:79:2a:57:8b:c3:97:12:96:eb:f0:f2:db:7f:
be:f5:d5:39:f5:db:e5:c9:de:bd:e7:92:68:0f:25:
9b:ac:bd:51:b1:80:bc:f8:ef:32:e8:66:e3:87:a8:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D9:24:72:E7:3F:53:1E:AD:90:91:B0:E0:4E:1A:07:1B:3E:61:FE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/w9kkcuc_Ux6tkJGw4E4aBxs-Yf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.206.0/24
5.230.220.0/24
5.231.87.0/24
5.231.200.0/24
185.13.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:16:ee:80:d6:57:c9:df:b8:57:43:78:df:14:4f:7e:42:b5:
e1:7c:18:3b:55:97:74:57:bc:56:b8:08:43:12:79:ca:22:a1:
c9:74:55:86:23:01:a9:2f:07:c7:50:c2:7c:19:96:76:a6:03:
32:8c:aa:74:1b:36:26:e0:c1:01:13:d9:41:42:5d:36:b1:d3:
30:de:a9:7f:e7:50:9b:46:28:b5:17:ef:68:ff:f9:61:1f:77:
ac:34:d2:5c:d8:80:25:bf:d6:31:e6:f0:81:7b:56:43:52:99:
90:d5:71:66:27:3d:2d:2f:72:09:63:ee:e3:d3:97:01:97:16:
d4:f5:f5:8a:a3:ea:6c:3f:11:11:d9:89:50:ab:e3:53:38:88:
e9:e3:75:39:c5:9b:5e:e2:3a:ba:39:df:4f:f9:b4:39:20:7b:
b0:f1:61:14:59:95:2e:b0:3f:32:ac:ea:ab:a9:bb:4b:e2:e9:
26:56:94:ea:be:d4:77:f5:eb:85:24:f1:f8:a3:f5:54:56:04:
2a:3b:d5:6d:d7:a0:a0:9f:79:7b:f6:6b:f1:af:d3:a5:45:6c:
08:c0:a8:8a:62:98:8a:16:ba:6c:84:08:27:d2:b8:e0:e5:00:
d4:b7:60:23:b4:b7:e0:e7:17:15:a9:02:65:d2:7a:f7:81:7e:
91:0b:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org