Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/W8VKoaQ-QgROngUtJ9Byksr1Qcs.roa
File: W8VKoaQ-QgROngUtJ9Byksr1Qcs.roa (raw, json)
Hash identifier: ic02dnUEgoE0lCSxHBG04pN/iNF23KMkRX3VNeKUCYA=
Subject key identifier: 5B:C5:4A:A1:A4:3E:42:04:4E:9E:05:2D:27:D0:72:92:CA:F5:41:CB
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0C07B092
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/W8VKoaQ-QgROngUtJ9Byksr1Qcs.roa
Signing time: Fri 06 May 2022 14:06:19 +0000
ROA not before: Fri 06 May 2022 14:06:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212249
IP address blocks: 160.20.111.0/24 maxlen: 24
160.20.110.0/24 maxlen: 24
185.85.236.0/24 maxlen: 24
93.190.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201830546 (0xc07b092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: May 6 14:06:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bc54aa1a43e42044e9e052d27d07292caf541cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:38:70:4a:ce:16:d0:fc:7c:37:71:af:d6:
e8:63:2c:e6:cc:f8:01:76:75:77:82:03:9b:bc:c1:
4c:c7:6d:28:be:9b:0f:95:bb:4e:ba:d1:3f:87:90:
42:5a:ae:74:0d:d1:fd:a9:e6:5a:43:40:b3:30:83:
c6:e2:b0:c1:4e:3f:f0:d5:b0:96:e3:25:55:fb:fa:
74:fc:ad:eb:30:60:0f:bc:7e:0c:b3:35:49:83:b2:
85:03:56:f2:84:10:2a:6a:95:b8:56:bd:ff:81:d8:
aa:8e:b4:61:d9:ea:47:60:bf:e5:57:29:15:7b:0d:
15:10:11:be:a1:0a:5b:bf:9e:49:e6:93:02:6c:ea:
be:f1:02:1c:d9:84:f8:2b:ff:c5:7d:4d:1c:86:bd:
00:69:74:e4:e4:c6:11:a2:3c:c0:4b:1f:a6:0a:32:
90:ec:ff:ee:30:8a:90:fc:e4:2c:53:01:64:73:4c:
75:17:50:b0:cc:e5:53:ab:50:41:92:9f:54:e3:26:
86:31:b5:ea:03:d9:ca:35:3c:fb:09:48:2f:ec:60:
95:16:21:eb:81:49:45:b9:b6:b4:c3:91:27:3c:57:
1a:07:76:b5:8a:e4:d6:1e:dc:38:28:d9:4e:39:d9:
9d:be:9d:60:fb:7e:24:06:ca:af:29:e3:56:09:20:
fa:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C5:4A:A1:A4:3E:42:04:4E:9E:05:2D:27:D0:72:92:CA:F5:41:CB
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/W8VKoaQ-QgROngUtJ9Byksr1Qcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.15.0/24
160.20.110.0/23
185.85.236.0/24
Signature Algorithm: sha256WithRSAEncryption
60:2d:4e:2e:46:6f:a4:7f:17:e5:0a:de:5a:d8:b7:7f:10:cc:
15:dd:6f:2a:b8:61:fd:d0:ea:54:a2:11:18:99:1b:bd:0d:90:
9d:c7:2c:87:86:5d:c6:5b:9f:6f:3d:2e:db:73:37:6b:68:7c:
8f:cf:33:3f:c5:38:cc:8e:85:0b:9a:ba:f5:45:3c:47:f4:d4:
6f:20:a5:11:c4:f1:a0:22:c0:c4:67:be:2a:87:1b:af:07:bb:
60:47:5f:eb:27:6f:de:8c:2b:9a:6d:49:c2:5e:08:88:1a:ad:
8f:b6:d7:35:7c:77:67:73:39:22:75:d8:4c:f0:e5:31:4c:4b:
77:39:3e:a6:a9:00:d4:46:f5:09:8f:12:0d:d3:5d:05:ff:ca:
6f:db:f7:19:4f:c5:7a:d5:43:8e:5a:af:51:63:84:a9:98:ff:
10:3d:ce:c1:e8:f3:89:d9:46:94:ee:b9:1d:33:6b:6e:8b:11:
26:84:d9:7e:2d:b7:3a:d2:b9:fa:1d:de:83:e9:a7:8a:b3:61:
ef:47:fc:34:69:8f:6c:d6:68:0f:17:5f:26:ff:79:ba:f2:8d:
cb:d6:a0:cd:fd:8a:36:3b:46:f5:1c:41:f8:c7:6c:8c:f5:8c:
93:51:cd:dc:73:73:b4:65:d3:5d:03:90:b8:0a:d2:68:25:1b:
62:b8:e2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org