Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/WstswP8b0_mkZ9oPSblSOss_PWg.roa
File: WstswP8b0_mkZ9oPSblSOss_PWg.roa (raw, json)
Hash identifier: TaYG/9jXb3UUn+budHqtXWgQ1uJ1KDPvudQxJkqJSJ0=
Subject key identifier: 5A:CB:6C:C0:FF:1B:D3:F9:A4:67:DA:0F:49:B9:52:3A:CB:3F:3D:68
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 072B1357
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/WstswP8b0_mkZ9oPSblSOss_PWg.roa
Signing time: Sat 01 Jan 2022 13:04:31 +0000
ROA not before: Sat 01 Jan 2022 13:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20530
IP address blocks: 185.196.15.0/24 maxlen: 24
185.196.12.0/24 maxlen: 24
185.196.13.0/24 maxlen: 24
185.1.103.0/24 maxlen: 24
2001:7f8:49:1::/64 maxlen: 64
2001:7f8:49::/48 maxlen: 64
2001:7f8:49::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120263511 (0x72b1357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Jan 1 13:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5acb6cc0ff1bd3f9a467da0f49b9523acb3f3d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:8b:f1:f7:7e:f7:d3:d3:58:b6:c5:8f:81:
d1:fb:d7:20:06:e8:51:21:de:05:92:d0:af:0f:96:
d5:17:b4:ec:1d:4a:fe:12:aa:3e:62:70:d6:c2:ef:
c4:ad:87:93:bf:00:ac:98:7c:b7:6c:70:89:c2:58:
84:3e:b0:de:6a:79:4f:ef:aa:b5:e5:30:e8:67:d8:
a6:be:00:a0:88:b7:c7:6e:85:2e:76:3a:dc:8c:ed:
72:47:2e:de:54:d5:3e:ec:98:f0:5a:97:41:6e:08:
ce:5f:22:ff:73:c4:8c:97:e3:dd:24:93:32:f8:1e:
56:72:56:43:5e:a5:46:a9:69:57:5f:52:2f:41:fa:
53:a5:de:ba:25:ee:2e:aa:86:74:c3:89:54:82:3a:
e3:54:09:da:9f:83:75:78:df:ea:e4:21:a6:d9:db:
ed:17:0a:2e:96:c5:05:d3:24:5a:85:f3:f8:15:f7:
c4:e5:e2:c4:3d:d1:78:6c:ef:4b:a1:14:b3:a2:3e:
2a:ec:db:7b:29:40:e4:1f:c6:65:b1:cb:f3:59:f2:
d4:c7:be:77:e2:94:47:4e:f7:42:0d:4c:47:6a:ef:
ec:eb:2d:3b:b4:26:0b:db:ce:4c:05:cf:a6:10:64:
0b:a2:a4:7f:5b:c6:ac:af:38:72:9b:51:b3:f0:44:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:6C:C0:FF:1B:D3:F9:A4:67:DA:0F:49:B9:52:3A:CB:3F:3D:68
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/WstswP8b0_mkZ9oPSblSOss_PWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.103.0/24
185.196.12.0/23
185.196.15.0/24
IPv6:
2001:7f8:49::/48
Signature Algorithm: sha256WithRSAEncryption
60:6a:07:09:6b:6a:38:72:36:4b:8c:9e:bb:56:16:2a:d3:22:
25:76:df:50:4f:23:56:ae:4d:c7:76:a4:92:24:87:4f:2d:3d:
66:92:35:d1:d8:b8:f9:2f:8f:21:0b:a3:8f:8f:2c:40:e9:33:
3e:43:9f:1d:22:cb:19:ab:e5:ca:d8:07:ca:6d:73:04:53:03:
17:28:06:4e:64:13:0d:ae:c3:a5:6a:2b:7b:e4:2d:ee:eb:33:
87:21:ee:77:88:8a:be:60:c6:22:ce:d5:dd:7f:ed:c8:72:93:
10:c9:72:c2:04:0d:47:8d:ec:22:aa:e3:53:5e:59:ce:71:4b:
9d:b9:be:c5:92:c7:97:22:cd:42:b8:f6:cd:c6:db:11:c7:41:
38:0f:aa:29:45:19:a2:8f:3f:5f:4d:88:54:c3:4c:35:2e:57:
d5:b9:5b:e0:fd:e4:00:4e:d1:69:b5:43:3f:23:38:84:42:0e:
0d:47:b4:10:eb:af:23:a3:29:ba:aa:4a:6c:11:93:7f:b1:81:
b1:b5:94:ee:12:04:7e:3e:14:c4:22:5d:5c:ed:ce:d5:75:83:
75:5c:00:2f:aa:a0:89:89:06:07:4b:9e:e0:de:e2:d7:dd:a5:
80:31:26:f8:b8:08:9e:1c:b6:42:86:81:f9:89:e1:6e:e8:01:
eb:af:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:12 2024 by rpki-client on console-ams.rpki-client.org