Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_-PKtKSd0PQg7clSmGewZtkM4Qs.roa
File: _-PKtKSd0PQg7clSmGewZtkM4Qs.roa (raw, json)
Hash identifier: VsSX2L0+MyskHaOHdMeX5BoekjjXZtD3ZzmfEimAuH8=
Subject key identifier: FF:E3:CA:B4:A4:9D:D0:F4:20:ED:C9:52:98:67:B0:66:D9:0C:E1:0B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 16DB2B51
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_-PKtKSd0PQg7clSmGewZtkM4Qs.roa
Signing time: Sat 01 Jan 2022 12:01:35 +0000
ROA not before: Sat 01 Jan 2022 12:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61272
IP address blocks: 188.72.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383462225 (0x16db2b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 12:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffe3cab4a49dd0f420edc9529867b066d90ce10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:81:bd:92:ad:36:aa:18:10:06:a3:5b:18:
cb:91:95:e0:60:e6:77:c6:f8:72:a1:e7:2e:08:d9:
a5:6f:79:0b:61:50:a0:24:e6:ee:a6:9a:0f:ad:63:
12:e7:80:e8:e3:86:60:0f:cd:c3:a7:bb:0d:f9:eb:
34:ae:4e:8d:44:01:c9:51:0c:1f:c6:d3:1b:f1:59:
0d:ca:a1:9b:76:80:2d:83:c0:5e:a0:d3:af:c0:5f:
59:5c:ff:2d:e2:3a:1c:fa:c6:71:08:1e:f6:74:be:
99:0c:3c:ed:0a:ff:bc:86:d4:47:d0:7f:0e:fc:33:
a3:a2:98:93:6f:2d:6e:04:08:a1:0d:c1:c1:52:bd:
a4:8c:98:d1:c3:15:00:07:20:51:c7:27:56:84:f3:
a6:30:43:0b:6d:a7:6a:4d:56:8d:bb:4c:d9:46:ca:
8e:e0:17:c1:d0:db:89:53:66:7e:dd:e2:9c:57:f7:
81:62:f2:23:64:fe:28:2a:fc:8c:4c:37:b0:a4:a8:
46:41:32:1f:9e:31:a1:50:6e:32:c7:01:46:d4:53:
fb:de:86:4b:8b:c5:8d:e6:ac:c7:3d:7e:34:52:77:
14:00:00:09:1e:a6:86:1a:7e:10:f0:fb:54:7e:2b:
bf:79:a1:63:f4:a2:1f:1e:36:84:13:81:9f:10:7a:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:CA:B4:A4:9D:D0:F4:20:ED:C9:52:98:67:B0:66:D9:0C:E1:0B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/_-PKtKSd0PQg7clSmGewZtkM4Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.116.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e7:16:bf:79:76:b8:32:a7:ef:05:f5:9f:3d:d3:19:bf:72:
26:0a:30:78:8a:8f:53:80:5a:60:b3:8d:d0:9c:e8:53:bf:f9:
e9:b8:ca:35:ab:2d:1a:81:2c:3f:b0:7c:44:37:23:8b:6f:7f:
b5:96:59:1e:3a:f3:7d:d1:be:c5:30:5d:54:51:0c:01:f0:ec:
9f:9b:10:ce:11:e1:a3:dd:60:5b:02:d4:cb:49:7d:05:ca:20:
eb:be:be:01:35:25:8e:e8:9c:cf:e5:18:d2:04:bf:e4:47:be:
69:82:a5:4f:da:a4:7c:f3:89:fa:10:2b:eb:48:3d:aa:45:32:
26:82:de:4c:f8:98:21:b4:28:65:2a:c4:94:3a:bc:b1:90:dc:
dc:25:e3:53:f3:28:0a:47:c1:b8:b6:6c:86:8f:af:f2:e2:4a:
ea:94:cc:a8:ea:2f:d1:17:da:b0:04:94:e6:19:9f:05:73:30:
f3:20:b0:33:8d:6f:9b:a7:88:88:61:11:81:b1:bf:09:4f:94:
b0:d5:97:78:56:04:16:a4:b1:98:3b:57:a6:47:47:5a:81:d5:
e8:04:9b:0a:8f:89:1d:bf:b0:81:7d:03:61:c0:18:20:4f:f8:
43:67:d9:ec:58:77:3c:7d:06:47:fc:99:be:5a:40:4e:17:c1:
32:72:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org