Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/qWwm2D3mEXevKW62z999wow61gQ.roa
File: qWwm2D3mEXevKW62z999wow61gQ.roa (raw, json)
Hash identifier: Byv2qNBOjkTRfK8e8sxiBhVz4J7GVhyHDd46Hz3j3x0=
Subject key identifier: A9:6C:26:D8:3D:E6:11:77:AF:29:6E:B6:CF:DF:7D:C2:8C:3A:D6:04
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 0910548D
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/qWwm2D3mEXevKW62z999wow61gQ.roa
Signing time: Fri 11 Mar 2022 04:37:30 +0000
ROA not before: Fri 11 Mar 2022 04:37:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210791
IP address blocks: 92.119.96.0/22 maxlen: 24
185.32.136.0/22 maxlen: 24
185.78.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152065165 (0x910548d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Mar 11 04:37:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a96c26d83de61177af296eb6cfdf7dc28c3ad604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:f0:15:77:cc:39:d9:54:4b:09:7e:04:ab:
14:2a:5c:28:24:d5:02:b6:23:0c:4b:c2:97:74:63:
3e:6a:26:12:05:88:70:36:08:46:c8:8d:19:58:7c:
2f:95:44:e1:87:0c:bd:07:15:6a:e8:0d:82:4c:76:
aa:e2:55:c9:47:e4:0a:f7:74:21:6e:be:73:c1:a7:
a9:75:a0:81:df:78:6f:c4:27:d0:d3:52:30:47:65:
16:3c:1f:6b:01:4c:a5:34:8e:1f:67:87:69:be:35:
f9:e0:4e:6e:8d:96:c4:28:16:7b:59:ca:3d:1a:db:
b3:7b:e3:bd:bd:e9:30:c7:0f:d2:fd:c9:89:e1:41:
86:3d:76:74:b2:88:d4:7e:6c:6d:15:a9:b4:08:7d:
0e:a3:c3:2b:c2:4d:a3:62:ee:31:1a:ac:a9:96:c4:
c5:b0:28:c9:3d:6a:4c:d6:73:c4:c6:2e:41:1a:50:
bc:9a:f0:55:d0:c4:66:ca:97:36:78:77:97:b8:1b:
cd:d7:c6:bd:d0:4e:9c:27:8a:95:72:21:32:fa:c6:
45:31:1f:da:c5:2c:ec:be:e3:97:bd:3c:ca:5a:3f:
5e:d7:1b:8e:16:2c:5b:78:86:d7:d8:a0:79:79:b0:
ca:25:6d:93:7a:6a:35:32:f6:5d:70:80:b3:b5:93:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:26:D8:3D:E6:11:77:AF:29:6E:B6:CF:DF:7D:C2:8C:3A:D6:04
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/qWwm2D3mEXevKW62z999wow61gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.96.0/22
185.32.136.0/22
185.78.0.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a5:09:40:a1:0a:17:c2:bb:0e:28:c5:44:4f:88:85:e2:74:
d4:1a:f5:f3:12:6b:84:16:50:b2:58:2e:75:d7:f4:6b:34:33:
3c:5f:ab:62:8c:01:83:aa:5a:7b:80:48:18:f5:1d:d7:04:0e:
f9:3a:58:f3:65:c7:48:21:04:f7:44:60:96:8a:f9:36:4e:bb:
6a:1c:d8:a5:02:85:56:7d:0b:ed:8b:77:a9:b9:e8:29:e4:c7:
85:33:ba:d0:8e:34:b7:45:50:8b:71:9f:0b:ce:51:eb:21:d1:
fb:d4:13:fe:2c:a5:8b:38:ec:9f:20:4e:9a:60:ef:f8:6c:cc:
3f:fa:63:4a:9e:b8:38:39:18:14:68:67:75:7d:7b:da:9e:d7:
45:28:9c:15:02:b6:68:66:78:e4:a9:a3:c0:8a:b4:03:43:47:
15:cb:fe:38:e5:56:d2:5e:29:b7:13:5e:60:be:e3:88:75:c7:
37:79:78:63:72:91:02:b4:82:f8:85:45:c3:06:af:00:7b:03:
c7:4f:8e:af:d8:4f:fc:cf:0d:23:0b:06:9b:af:9a:56:52:3d:
52:3b:da:c0:76:24:d4:d8:4e:b1:9c:04:7b:ae:56:46:be:66:
e4:0b:14:73:b5:d5:7a:34:24:2d:28:17:e6:53:0f:5b:d7:68:
6e:43:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:14 2024 by rpki-client on console-fra.rpki-client.org