Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/wj-dpV-1_nbzkBbhzLCN4J1IMTE.roa
File: wj-dpV-1_nbzkBbhzLCN4J1IMTE.roa (raw, json)
Hash identifier: 8v0PjzY64VfdJc3iVDVy9VMgeaGUnIthBtvdoT32/0U=
Subject key identifier: C2:3F:9D:A5:5F:B5:FE:76:F3:90:16:E1:CC:B0:8D:E0:9D:48:31:31
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 08194012
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/wj-dpV-1_nbzkBbhzLCN4J1IMTE.roa
Signing time: Wed 13 Apr 2022 12:33:14 +0000
ROA not before: Wed 13 Apr 2022 12:33:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25381
IP address blocks: 185.154.192.0/24 maxlen: 24
185.154.195.0/24 maxlen: 24
185.154.194.0/24 maxlen: 24
185.154.193.0/24 maxlen: 24
85.234.108.0/24 maxlen: 24
85.234.107.0/24 maxlen: 24
85.234.110.0/24 maxlen: 24
85.234.109.0/24 maxlen: 24
85.234.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135872530 (0x8194012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Apr 13 12:33:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c23f9da55fb5fe76f39016e1ccb08de09d483131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:3e:9b:54:c9:b4:bb:e1:17:ea:fd:12:0f:
54:7c:8e:b8:ea:3a:ce:f5:be:33:33:7c:17:a4:c0:
58:27:98:f3:92:fa:ae:57:db:8b:21:1b:73:79:58:
40:e1:38:25:67:32:fe:24:73:e2:0b:7a:25:99:fe:
74:51:4f:7a:b0:fb:50:6c:b6:ea:77:c3:82:eb:d5:
5b:10:91:ff:b5:03:88:13:fc:8c:ef:f2:dc:b7:3d:
13:a3:7e:27:09:06:2a:eb:38:99:7b:87:46:72:a1:
4a:de:da:b7:7d:a6:07:00:34:07:c3:70:7f:2a:f2:
8a:5c:85:20:ef:31:74:bf:c8:5f:9a:d2:96:74:bd:
fc:65:66:dc:52:85:a8:ce:39:26:c4:dd:a9:c2:c7:
bb:c7:5c:f2:ae:0b:72:ec:bf:0d:b8:c6:bb:c2:39:
23:c5:09:f9:b4:7e:65:09:c2:93:b9:67:49:8b:74:
b2:8b:b8:70:3a:27:c8:db:b9:de:c0:1e:99:93:15:
b5:2e:2a:51:53:22:2b:9b:a1:95:66:83:e3:ce:02:
0d:d4:5d:90:e0:79:dc:b1:0e:47:66:ce:a6:ae:b6:
52:3b:02:3b:11:b0:a8:ae:ca:12:5d:4a:8c:42:ca:
9f:ec:a5:2d:05:80:44:3f:15:fb:e8:0a:f3:e3:ae:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3F:9D:A5:5F:B5:FE:76:F3:90:16:E1:CC:B0:8D:E0:9D:48:31:31
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/wj-dpV-1_nbzkBbhzLCN4J1IMTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.106.0-85.234.110.255
185.154.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:70:86:eb:1b:bd:16:d7:3d:84:9a:eb:10:95:22:57:d0:7a:
dd:1f:ab:d5:d6:05:f4:e7:f2:76:19:59:d9:5e:3c:ff:90:e9:
4e:85:62:61:a0:16:29:bb:94:44:ab:93:9b:3e:c1:1d:04:c7:
5d:54:c1:91:9c:6d:a2:df:70:be:fd:c3:07:b5:5b:7b:92:7b:
03:86:42:d5:ac:fb:73:62:54:d6:72:5f:01:5f:28:33:82:2e:
d8:40:32:c0:91:f8:c1:65:e2:50:b0:9c:a3:38:5f:40:bc:0f:
eb:a1:b9:49:a0:57:96:51:66:99:19:be:55:63:3a:f6:e0:1f:
59:11:cf:a6:f1:2d:9e:04:12:4c:a7:71:87:3f:39:86:01:9a:
53:47:0e:86:1a:b3:77:ce:7b:58:a8:7f:90:3e:1c:cf:1e:f0:
5c:4f:b9:a7:04:65:2f:4f:29:1a:f5:4e:39:aa:a3:63:8c:61:
ed:b2:84:1d:d4:96:55:19:ae:2b:85:f8:d7:ac:13:21:89:0a:
3d:cc:9a:78:ff:26:6a:a6:b2:61:af:02:89:91:f1:4e:9c:33:
c3:8b:42:e2:02:d6:23:0e:34:d5:1b:1f:14:a8:6a:ab:ad:e3:
94:72:8d:ea:1e:df:c5:0b:60:ea:8e:b3:72:63:2d:71:b2:f9:
dd:00:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org