Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/W6kPqd6hxP5cMva53XJfnJoxhSY.roa
File: W6kPqd6hxP5cMva53XJfnJoxhSY.roa (raw, json)
Hash identifier: 5G1yQ5r9l6F58nj1SJr/WXxVoFTZCcIYvcni+Ouo+tU=
Subject key identifier: 5B:A9:0F:A9:DE:A1:C4:FE:5C:32:F6:B9:DD:72:5F:9C:9A:31:85:26
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 03968F9B
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/W6kPqd6hxP5cMva53XJfnJoxhSY.roa
Signing time: Sat 01 Jan 2022 11:02:07 +0000
ROA not before: Sat 01 Jan 2022 11:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29044
IP address blocks: 195.68.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60198811 (0x3968f9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Jan 1 11:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ba90fa9dea1c4fe5c32f6b9dd725f9c9a318526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:5d:2b:c6:f4:b2:f5:2b:7c:10:42:41:c9:
8d:58:ea:57:a1:a1:3e:da:16:55:45:4f:a5:88:f8:
b1:3a:e0:ce:24:6f:a1:d9:df:d8:e5:1d:28:f4:3f:
97:5f:81:6d:e7:a2:66:6b:35:24:7b:fa:d3:51:b4:
58:9f:39:55:37:7b:c5:7a:09:a2:b8:16:67:43:b0:
c2:a8:9b:ad:95:45:67:d6:3c:c0:f9:04:56:41:7f:
d4:2d:79:bc:ed:04:65:8b:8c:f6:f8:30:90:fe:d9:
54:e7:2a:16:a2:8a:2a:82:6f:46:c3:4d:a3:5d:b6:
33:c7:a7:ec:5d:ce:26:b9:04:e2:87:76:e0:91:ba:
7f:7e:ce:95:f3:47:ed:8d:2a:0e:52:1c:47:4d:7e:
5d:03:18:76:27:1c:71:ef:cf:8c:02:d5:20:c7:db:
2f:05:1f:09:e6:b4:81:88:93:e5:96:b1:65:57:fe:
0c:1f:4d:9e:db:50:59:9b:ca:16:17:0d:d9:67:89:
87:6e:8d:c2:10:f7:01:c3:c5:80:78:a3:48:a2:a2:
c9:2b:90:a5:97:62:d8:63:2e:8c:c8:89:e1:05:0b:
f4:77:0e:bf:f0:20:b1:9d:39:3f:86:cf:55:13:81:
51:3a:d7:b0:6d:23:94:8e:c1:94:b9:54:21:a0:5f:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A9:0F:A9:DE:A1:C4:FE:5C:32:F6:B9:DD:72:5F:9C:9A:31:85:26
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/W6kPqd6hxP5cMva53XJfnJoxhSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.196.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:7f:7f:5a:9d:29:20:9e:77:5c:17:d7:05:1c:3b:ac:a9:97:
5a:bd:04:fe:18:2e:43:fa:58:40:fa:c9:54:fe:d1:7b:0d:1a:
9f:c5:53:12:90:78:6e:78:8b:0b:03:cc:1f:b1:b3:8f:02:78:
9a:03:36:aa:14:09:50:a8:7f:58:e7:1d:b4:01:2e:27:94:2f:
29:a9:2c:1d:73:5f:0e:5b:3d:92:64:06:9a:d2:9a:bb:33:e3:
63:ac:ff:cb:8c:2c:fc:39:97:a9:83:58:a1:e5:c5:ff:6f:7b:
d7:58:a0:ad:2a:bf:72:1d:76:18:7d:62:c1:c4:f2:0b:c9:ee:
6a:5b:6c:2d:db:3e:0f:f8:32:6f:17:a6:32:06:88:74:c5:39:
80:96:b6:f1:47:5f:66:6a:a8:72:d8:ee:4b:26:ea:e2:6d:ed:
bf:8b:9a:9e:ca:44:86:c3:b2:1f:2a:33:e8:da:26:67:db:cd:
5a:72:a7:8f:58:a9:60:32:aa:03:14:62:aa:e2:e7:16:3b:19:
2d:cb:39:ed:76:d4:63:4e:c3:14:09:80:c7:b0:6d:31:d0:de:
d1:1f:c6:57:64:4c:20:17:47:a2:3a:9f:3b:02:b3:a8:eb:ce:
e7:79:ee:c1:1d:87:ff:0a:c8:56:38:12:69:eb:91:cd:9a:e9:
40:ec:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:27 2024 by rpki-client on console-fra.rpki-client.org