Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/wsJASnUvz0nqnmEcdLH1ckO9weU.roa
File: wsJASnUvz0nqnmEcdLH1ckO9weU.roa (raw, json)
Hash identifier: L1US1kCiwihLCdsD+gmW1CjP3DSa/uy2RaVgE3aR8t0=
Subject key identifier: C2:C2:40:4A:75:2F:CF:49:EA:9E:61:1C:74:B1:F5:72:43:BD:C1:E5
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 09FA4648
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/wsJASnUvz0nqnmEcdLH1ckO9weU.roa
Signing time: Sat 01 Jan 2022 11:55:57 +0000
ROA not before: Sat 01 Jan 2022 11:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 86.104.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167396936 (0x9fa4648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Jan 1 11:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2c2404a752fcf49ea9e611c74b1f57243bdc1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:b0:8f:6b:f5:63:17:83:c4:51:3b:f0:dc:
e9:70:cb:29:7d:86:b0:ee:1d:70:a9:67:46:67:43:
25:07:18:5b:24:11:2e:1a:a7:97:80:f9:07:8c:c7:
70:67:92:63:31:40:19:17:62:be:70:4d:87:b4:02:
48:c2:5d:a5:fd:db:2a:6b:9d:09:90:dd:08:a6:8e:
73:d4:c7:bf:36:78:de:e1:92:93:2d:b9:01:d6:7f:
a9:f7:48:84:7f:c2:72:fe:89:4a:ad:9e:82:8b:c8:
3d:62:44:6c:23:9e:55:09:46:cd:2c:a0:3b:83:5d:
3c:4a:b0:99:9b:c3:02:cc:7a:2f:9a:e6:0a:aa:1f:
b2:2a:27:59:b3:82:7d:d4:a0:5b:a8:f2:05:b5:04:
10:03:1c:f8:d2:df:fa:5b:21:5d:9a:e3:02:9b:ff:
c7:61:2f:28:8a:a7:db:a0:b1:14:62:f2:ac:39:1e:
c5:78:eb:a6:3c:b6:b7:89:c6:e0:b5:17:4b:40:3e:
e2:3f:28:49:5e:78:96:0d:7c:a1:2c:27:17:d6:47:
69:af:be:92:73:7a:72:21:a5:1f:d3:d9:54:0a:ab:
2f:53:f5:61:4a:a0:65:d1:23:1a:dd:ba:e5:8e:bc:
df:72:3f:24:a1:85:54:44:fb:64:af:4a:7f:b6:6a:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:40:4A:75:2F:CF:49:EA:9E:61:1C:74:B1:F5:72:43:BD:C1:E5
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/wsJASnUvz0nqnmEcdLH1ckO9weU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.14.0/24
Signature Algorithm: sha256WithRSAEncryption
08:37:6f:c6:53:f8:bd:a7:d8:13:b8:a7:81:d4:14:ed:10:59:
9e:47:ac:07:a6:a9:9a:2d:da:65:90:1e:c2:8d:10:1a:61:05:
e4:19:f1:28:a4:e0:74:5d:40:c9:fb:d3:13:82:10:22:d2:c7:
7c:8b:61:b5:5a:6c:7f:fe:93:28:10:31:9e:e6:49:7a:e2:7a:
d8:e4:9a:b5:6d:ac:c6:dd:18:8c:4d:64:51:4b:0d:f3:cc:f3:
12:12:7b:26:42:1d:66:e6:40:a4:a7:d0:38:81:6e:bf:1a:f2:
c1:dd:8a:51:4a:8b:e5:83:d8:4e:1e:1f:41:ec:c8:f7:24:20:
cd:cd:ec:44:2d:38:b7:c7:b5:2a:a4:6b:8e:52:8a:55:24:5e:
58:60:bd:45:be:88:c3:56:29:d5:a0:47:ca:81:ec:9c:37:a0:
8e:df:56:36:e0:0a:b2:63:44:83:26:af:01:ee:03:76:3c:f9:
98:35:6e:4d:7c:d6:7d:ab:44:bd:55:5f:fb:5b:0c:e0:7b:b8:
ec:76:56:f9:79:65:b1:b7:2e:07:80:15:74:95:4f:16:06:fd:
f9:41:b7:87:69:4f:5b:f1:9f:41:23:dc:c7:aa:42:76:b3:66:
fa:8e:34:14:c7:c1:b7:d3:81:e9:f2:bb:fd:9c:76:33:4f:b3:
41:3d:67:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-fra.rpki-client.org