Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/wbY4cvXJF-_0O-Lmtk8Lkvoy8Wg.roa
File: wbY4cvXJF-_0O-Lmtk8Lkvoy8Wg.roa (raw, json)
Hash identifier: ZwPt+QGyhenT0g3Znfri905nHUU0kV0sCZFsDEf4K5E=
Subject key identifier: C1:B6:38:72:F5:C9:17:EF:F4:3B:E2:E6:B6:4F:0B:92:FA:32:F1:68
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 0F0ED4F5
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/wbY4cvXJF-_0O-Lmtk8Lkvoy8Wg.roa
Signing time: Tue 08 Feb 2022 09:18:59 +0000
ROA not before: Tue 08 Feb 2022 09:18:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38917
IP address blocks: 185.24.112.0/22 maxlen: 24
109.111.64.0/19 maxlen: 24
87.255.224.0/20 maxlen: 24
87.255.224.0/19 maxlen: 24
87.255.240.0/20 maxlen: 24
87.255.252.0/24 maxlen: 24
217.175.32.0/20 maxlen: 24
87.255.248.0/22 maxlen: 24
176.110.208.0/21 maxlen: 24
185.86.112.0/20 maxlen: 24
2a04:2cc0::/32 maxlen: 32
2a04:2cc3::/32 maxlen: 32
2a04:2cc5::/32 maxlen: 32
2a04:2cc6::/32 maxlen: 32
2a04:2cc2::/32 maxlen: 32
2a04:2cc1::/32 maxlen: 32
2a04:2cc7::/32 maxlen: 32
2a04:2cc4::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252630261 (0xf0ed4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Feb 8 09:18:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1b63872f5c917eff43be2e6b64f0b92fa32f168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:5d:f9:42:e7:1e:bd:c2:5e:d0:29:fe:b6:
24:c0:a8:cd:93:ba:b0:f9:b0:ea:38:d8:04:8b:a8:
31:e2:a3:57:e2:3a:48:71:89:44:db:00:fc:9a:d5:
3e:9f:6b:f5:e0:6d:4b:5c:0e:9b:f4:84:bc:e4:30:
5a:fb:e5:54:15:67:b5:9f:61:9a:df:c4:21:a9:79:
b5:0a:2f:e7:2c:ca:8e:ac:78:34:38:7d:7c:74:ff:
c0:c8:b9:2d:2b:1a:53:65:76:b2:ac:fe:ad:34:85:
27:2c:10:5b:98:5d:96:1f:13:45:02:1f:c9:77:0b:
8b:9d:f9:a3:e7:f8:25:03:6b:5a:47:c5:f7:72:df:
40:c0:f3:ce:99:34:b0:57:c4:a0:0d:15:e4:06:12:
6d:04:db:9c:29:33:71:ec:e6:8f:91:38:6c:53:9b:
94:b8:f4:a6:88:f0:bc:32:64:fc:85:0b:1d:78:c5:
cf:96:d8:2f:d7:71:ba:cd:5a:fd:ce:f6:bd:c7:aa:
fa:5e:c8:6e:40:c2:1d:20:d8:ab:04:aa:7f:6c:73:
b2:42:66:43:30:c1:d2:d1:2b:04:8c:c9:5f:39:8a:
71:99:a5:95:a9:37:43:a6:76:62:a0:97:79:a2:3b:
1b:95:9b:2c:1e:84:10:4f:9c:08:5f:48:13:03:1d:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:38:72:F5:C9:17:EF:F4:3B:E2:E6:B6:4F:0B:92:FA:32:F1:68
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/wbY4cvXJF-_0O-Lmtk8Lkvoy8Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.255.224.0/19
109.111.64.0/19
176.110.208.0/21
185.24.112.0/22
185.86.112.0/20
217.175.32.0/20
IPv6:
2a04:2cc0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:60:89:b9:0b:7d:72:63:5c:c3:bb:f3:5c:25:63:80:a8:46:
a0:80:0a:7e:44:6b:3b:59:96:d9:5b:60:32:34:f1:20:03:ee:
02:d6:53:7f:a9:2d:8d:f1:6e:50:46:ac:aa:1e:4c:84:21:9f:
65:b2:b3:ea:83:75:b3:41:d7:b1:69:bd:f1:99:d8:38:b4:49:
f3:a4:7d:54:6e:6e:e2:61:32:57:99:a1:da:34:70:f7:9a:4f:
1f:ac:eb:26:20:6c:7d:52:e6:33:1c:eb:14:8b:de:40:8a:8a:
68:d5:0d:73:e5:9c:0d:97:ea:a0:d2:18:2a:89:23:4a:2c:93:
b2:d5:dd:17:56:a2:b7:1a:8b:e2:51:75:33:81:09:9f:bc:2d:
ea:79:95:85:56:70:5d:99:52:39:99:3f:00:b5:f3:e8:7d:6b:
4a:02:8f:f0:31:6a:ec:36:e9:b7:18:2a:4b:42:bc:09:36:4a:
4f:0c:67:0c:58:db:27:f1:19:76:29:3e:be:2f:cc:54:1e:66:
49:dd:da:78:c7:6a:9d:73:01:4d:0f:5e:af:29:f9:22:c6:26:
03:0c:af:ca:b6:0f:57:bd:61:79:1b:73:92:3f:00:d5:3f:61:
20:0a:cd:76:4b:90:10:5a:c8:61:03:fb:e8:1a:24:ac:8e:4f:
c3:b4:e9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:01 2024 by rpki-client on console-fra.rpki-client.org