Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/W4Gl30XtDFdi1VxUnyXBsGqveN8.roa
File: W4Gl30XtDFdi1VxUnyXBsGqveN8.roa (raw, json)
Hash identifier: WpU+Nw1ao0qByQOLxy0bzDehT0HhUl86iz/nMR2CsTw=
Subject key identifier: 5B:81:A5:DF:45:ED:0C:57:62:D5:5C:54:9F:25:C1:B0:6A:AF:78:DF
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01291F78
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/W4Gl30XtDFdi1VxUnyXBsGqveN8.roa
Signing time: Mon 04 Jul 2022 12:59:50 +0000
ROA not before: Mon 04 Jul 2022 12:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.106.192.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19472248 (0x1291f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 4 12:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b81a5df45ed0c5762d55c549f25c1b06aaf78df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:4d:01:e8:5c:19:aa:01:48:c6:04:19:20:
85:d5:57:8e:ed:32:dd:5a:43:a2:76:e3:8c:02:e6:
02:26:5f:bc:8d:04:ef:96:5d:fb:af:e5:c5:b4:98:
85:79:bd:29:b3:ba:e9:e5:8e:3e:e4:c0:95:8a:50:
22:9a:4c:cf:7f:1b:59:1e:41:93:17:45:e2:6e:95:
2c:aa:b3:12:15:bb:ef:b5:b7:42:fc:78:eb:df:20:
02:55:5e:f6:61:ef:b5:70:11:14:a6:0a:28:86:43:
b2:e4:14:0c:9b:29:f3:f7:77:88:f5:76:80:9e:b0:
c0:b0:63:12:de:6f:3e:95:f7:b2:92:c8:47:f9:57:
a0:ce:0c:26:a0:db:35:f6:95:e6:d3:a0:9d:b2:5e:
0b:e2:66:8c:c2:f1:9d:53:55:08:b2:4f:a5:a7:c8:
78:ed:98:22:03:62:f0:29:92:e9:ed:fa:25:9f:20:
85:d5:5b:02:10:e1:a6:1c:ae:b3:6c:8a:df:05:43:
4f:f6:aa:94:0a:3f:8e:b3:08:92:c9:36:1e:8a:05:
7d:fa:4d:90:6f:a5:37:0d:24:20:00:ea:d6:5c:4c:
47:52:e2:39:b7:b1:53:c7:b5:98:bd:0a:50:69:98:
2e:38:d9:37:2a:15:45:e4:ce:cf:e6:32:35:d9:6f:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:A5:DF:45:ED:0C:57:62:D5:5C:54:9F:25:C1:B0:6A:AF:78:DF
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/W4Gl30XtDFdi1VxUnyXBsGqveN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.192.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:54:98:36:35:c3:50:52:79:d8:af:f7:1b:e7:e1:a7:bb:a7:
a2:d1:ff:e9:55:70:7a:70:a4:8d:89:01:36:15:8c:b2:61:e3:
e2:e9:60:3c:8d:af:3c:5b:54:e7:3c:94:0b:b4:98:6c:c2:22:
9c:fa:e7:20:84:66:94:75:80:90:59:ee:91:c5:d9:4a:55:1e:
18:aa:ec:3e:69:0b:5c:fe:91:e3:6f:45:f5:bd:01:cb:cc:f1:
2a:1b:88:dd:62:28:d4:8f:f7:05:ed:72:9f:e2:16:8e:a3:77:
a5:10:47:0d:7e:74:ca:30:3b:c1:e7:c4:02:cd:07:43:1e:78:
20:00:7d:01:cd:ac:3c:d4:af:0e:f6:c6:1f:2d:61:90:ff:9e:
df:51:bc:a8:46:44:89:49:c4:e8:a8:1a:57:d8:b7:20:f2:bb:
8c:14:f4:82:96:26:be:0c:0e:5b:be:18:6c:f0:0b:a2:fe:3a:
10:61:89:1b:9c:c9:92:e7:16:f0:85:31:cb:0b:bb:3b:ab:0a:
5f:c0:1e:4d:10:38:90:c9:dc:ad:27:96:6b:18:4a:8a:c9:71:
78:3a:4d:35:e0:a9:f0:3a:64:f5:cf:99:37:10:90:89:48:85:
15:d0:27:27:fe:db:09:e2:fd:6f:83:31:a1:18:a1:c5:1c:57:
11:f3:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org