Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/WTsD3ukYhPuaoF3c9lpgfABBl5g.roa
File: WTsD3ukYhPuaoF3c9lpgfABBl5g.roa (raw, json)
Hash identifier: mssXr61hLKMYfuoogmWfAjXxTMVUCsVW+rh3oNH0c+w=
Subject key identifier: 59:3B:03:DE:E9:18:84:FB:9A:A0:5D:DC:F6:5A:60:7C:00:41:97:98
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 018327D8D36DE054C55E1E793102FFB19200
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/WTsD3ukYhPuaoF3c9lpgfABBl5g.roa
Signing time: Sat 10 Sep 2022 14:41:04 +0000
ROA not before: Sat 10 Sep 2022 14:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30742
IP address blocks: 185.48.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:27:d8:d3:6d:e0:54:c5:5e:1e:79:31:02:ff:b1:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Sep 10 14:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=593b03dee91884fb9aa05ddcf65a607c00419798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:4c:ea:fc:55:e9:d9:4a:ef:03:7c:e6:16:
81:cf:04:c7:a3:df:ef:d0:d5:6a:23:1f:67:7f:c4:
0b:91:30:88:1f:82:17:3b:bb:fc:5e:d1:02:7c:4a:
bc:6d:69:a3:ee:80:be:95:49:bb:80:47:c4:68:8c:
41:bb:83:36:0d:c3:b9:08:b7:70:42:a6:11:a0:9e:
47:bf:6e:ed:d4:ac:83:e9:a4:85:94:9a:65:19:52:
63:04:c8:34:8c:a6:bb:e7:58:0c:7b:3b:f1:f1:58:
b3:bd:c0:64:af:b3:b4:f4:d9:f9:00:a4:70:f6:5a:
b0:77:90:b8:55:5e:47:ab:a6:e5:d9:76:e4:fa:e9:
da:12:e4:f9:e7:c6:ed:45:d3:45:aa:c4:1d:31:cd:
f9:74:68:42:10:55:81:36:d7:d5:89:16:6b:97:24:
6f:02:dc:cc:07:d6:5a:c3:0a:4d:5b:8d:27:c7:d2:
a2:95:34:8c:8b:fb:c6:2b:73:be:28:86:37:7c:23:
4d:61:81:2b:a0:96:40:ef:6d:ba:de:d2:a4:dc:56:
ac:48:2d:63:bd:42:cb:7b:78:ba:2c:d0:03:95:4a:
a1:f8:69:0b:14:ee:6a:20:6c:c5:28:73:7d:54:09:
55:fe:21:bc:c4:9d:2b:16:18:52:41:ff:85:4e:19:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3B:03:DE:E9:18:84:FB:9A:A0:5D:DC:F6:5A:60:7C:00:41:97:98
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/WTsD3ukYhPuaoF3c9lpgfABBl5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.216.0/22
Signature Algorithm: sha256WithRSAEncryption
21:2f:c2:95:54:d8:1b:00:50:05:e3:53:1f:76:e7:f6:f7:48:
f0:cb:77:2d:8a:c8:9d:55:7e:bd:ef:24:36:15:2f:d1:16:76:
d7:5a:36:56:03:2c:bf:8c:63:37:ff:b8:13:be:34:0b:13:bf:
de:c1:4a:ea:d3:50:42:71:98:6b:9d:4f:d6:2a:6e:85:c9:7d:
3d:67:e3:34:4e:b9:34:cf:3e:a1:d9:ff:b4:25:87:41:9c:2c:
34:fa:7f:ed:bf:39:73:6f:c0:cd:38:1f:79:a1:35:63:72:25:
09:31:57:41:05:8e:24:fa:b4:1e:6b:08:0f:54:86:c2:76:b4:
43:df:14:55:a7:3d:77:82:19:0c:b6:a8:03:28:51:a0:89:79:
d4:a8:e3:3c:cc:78:59:61:56:75:54:33:23:38:32:d0:d9:3b:
3f:02:b4:d2:e7:03:e9:14:ae:b1:b6:02:1c:5b:82:53:1e:3b:
d4:2a:c8:73:c3:b3:f6:a0:84:88:f5:d9:7c:d8:3d:18:f5:fb:
79:f1:ba:83:99:3b:d4:58:7e:1b:2f:31:ad:9d:29:ae:b4:1b:
8a:fc:14:df:3b:c6:4d:a3:06:0a:c7:ca:d1:4c:04:32:61:28:
cf:50:34:8b:b5:d9:c9:c7:a1:b1:c6:68:76:65:85:16:77:54:
60:01:d7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:26 2024 by rpki-client on console-fra.rpki-client.org