Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WckZsZRvxfdxTBDqngjyak48Zi8.roa
File: WckZsZRvxfdxTBDqngjyak48Zi8.roa (raw, json)
Hash identifier: DueSLqSk4dxQFaXN4ySvutFw5V6jWHWnCPq4U3Qha7g=
Subject key identifier: 59:C9:19:B1:94:6F:C5:F7:71:4C:10:EA:9E:08:F2:6A:4E:3C:66:2F
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16DCD064
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WckZsZRvxfdxTBDqngjyak48Zi8.roa
Signing time: Sat 01 Jan 2022 12:01:35 +0000
ROA not before: Sat 01 Jan 2022 12:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61326
IP address blocks: 178.170.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383570020 (0x16dcd064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59c919b1946fc5f7714c10ea9e08f26a4e3c662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:e3:27:2e:11:1e:12:c5:ed:f0:2e:50:f3:
38:1b:91:a2:71:c5:29:93:ac:44:2e:a7:30:50:ed:
b7:30:6b:af:79:80:6b:30:ad:22:d8:8c:d6:84:f4:
14:2d:8c:f1:7a:27:c8:ca:36:ec:a5:ec:5d:10:ca:
65:aa:eb:6a:27:3f:36:4b:91:04:14:c1:50:9c:db:
11:f4:84:14:e6:50:bd:ec:24:68:bb:73:1f:e2:bf:
98:91:ab:7d:4e:c4:3b:47:6f:92:09:c2:a9:90:7f:
1a:c1:4e:f0:96:20:27:a3:f9:46:c4:88:b5:27:98:
3e:f1:36:7c:11:a0:32:6d:2c:18:71:cd:e3:40:f8:
7f:2a:c6:eb:fa:05:5a:cc:c5:2e:2c:06:fd:73:22:
77:c8:81:8a:43:55:60:3e:f1:05:a6:c7:c8:a5:58:
7e:64:c8:0c:97:75:65:99:0e:49:54:ff:7d:7e:29:
7d:6a:02:4b:1a:9e:a0:d9:a1:0f:fc:b7:37:6f:6e:
b0:ae:62:5d:b5:fd:0c:c5:0c:18:2e:4d:a8:55:45:
4a:d5:a9:91:0a:60:41:18:50:ac:ae:e6:23:3c:c0:
a8:22:01:38:04:d0:60:86:00:f2:70:28:76:d6:8e:
ae:2d:ac:74:73:5c:4b:8d:be:c8:17:5d:c0:44:8b:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C9:19:B1:94:6F:C5:F7:71:4C:10:EA:9E:08:F2:6A:4E:3C:66:2F
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WckZsZRvxfdxTBDqngjyak48Zi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.186.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f5:16:72:28:8c:2b:c4:69:4c:84:59:67:c3:c1:df:3f:53:
3e:6a:5d:13:82:c1:b8:4b:e7:27:73:0e:4d:b7:1f:bf:82:d8:
0e:b6:9d:74:bd:db:36:7a:38:7e:c2:07:9c:de:bb:da:d9:88:
91:a9:1b:8d:9a:c0:9e:e9:6c:bc:40:6d:49:64:c9:88:05:a0:
85:ab:b2:ed:c0:60:43:31:44:3d:87:0b:09:d5:a4:cb:73:b7:
6b:b1:29:92:4b:b2:ef:2e:40:68:e5:cc:65:bf:59:49:03:c3:
18:c1:72:68:ab:e5:ac:73:4f:df:5c:17:93:7d:4d:f0:f9:b0:
c7:6b:fe:ae:ec:9e:3f:5c:78:3e:2e:a1:11:d4:cf:ac:bc:f4:
c2:bc:2a:c4:a4:87:76:e3:10:15:ce:2a:bf:b5:90:73:aa:67:
a4:48:ed:4b:dc:6f:4b:f0:87:a0:97:88:4d:3d:bb:f5:ee:9b:
a3:04:5d:29:f5:2d:35:c8:ca:b4:ed:3c:c7:f4:1b:d9:dd:bf:
68:36:ba:37:81:67:b8:19:11:1d:2c:b5:00:af:0d:45:8e:ec:
45:27:74:f1:02:7f:7a:86:4c:87:c6:8a:6e:99:56:0e:b9:a0:
06:2a:90:71:0c:33:04:81:c8:16:b6:9f:2c:a1:db:1c:d2:3f:
4b:e9:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org