Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/W1K3YAaUuXJAd9hSrPFz7USSIx4.roa
File: W1K3YAaUuXJAd9hSrPFz7USSIx4.roa (raw, json)
Hash identifier: 4yEykooh260ikGIW+UKkbu2qZOQlVIUgqEd+DgyR16Q=
Subject key identifier: 5B:52:B7:60:06:94:B9:72:40:77:D8:52:AC:F1:73:ED:44:92:23:1E
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 08100D12
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/W1K3YAaUuXJAd9hSrPFz7USSIx4.roa
Signing time: Sat 01 Jan 2022 06:57:49 +0000
ROA not before: Sat 01 Jan 2022 06:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 185.93.70.0/24 maxlen: 24
185.93.71.0/24 maxlen: 24
185.93.68.0/24 maxlen: 24
2a05:f7c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135269650 (0x8100d12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 1 06:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b52b7600694b9724077d852acf173ed4492231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:9d:b3:1f:03:78:6d:44:f4:c5:dc:6b:0f:
a9:6e:8a:18:97:a2:81:36:ad:19:09:ea:28:34:d2:
5d:85:6a:29:9c:c7:0e:cc:20:49:0c:7c:18:bd:92:
10:33:85:67:8e:b3:af:fa:56:06:a3:39:5d:aa:43:
a2:7a:61:89:e8:f6:a6:d0:e6:c0:a2:97:06:47:e7:
5b:96:0d:69:2c:35:d0:c0:b8:2b:00:a7:21:b0:b9:
dc:ec:b7:e0:b0:29:a7:df:64:76:f6:d9:71:72:12:
8a:f4:5b:c3:bb:e7:77:1b:39:ff:4b:f7:23:dd:42:
d4:85:12:bd:94:fe:f0:8e:c9:72:82:ea:4f:a6:12:
f8:6b:6e:68:d5:6c:4d:49:37:f5:88:9f:b2:36:e4:
35:1c:71:13:62:8d:67:02:66:12:4d:8a:f8:10:aa:
43:77:b1:e3:e1:cf:59:f8:ca:6b:1c:d0:0f:b5:94:
c4:7e:b5:68:2c:18:f2:62:92:9d:43:ac:a9:7d:f6:
2e:d3:19:55:d7:1d:23:4d:fa:0a:1e:62:bd:77:00:
51:f5:c5:81:f7:14:e4:83:4e:bd:5d:42:74:b2:94:
8f:8a:d0:40:bc:c9:8a:93:a4:1e:ba:3a:bf:90:a6:
15:2e:e3:db:d6:82:4a:88:94:9d:f8:f2:17:31:58:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:B7:60:06:94:B9:72:40:77:D8:52:AC:F1:73:ED:44:92:23:1E
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/W1K3YAaUuXJAd9hSrPFz7USSIx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.68.0/24
185.93.70.0/23
IPv6:
2a05:f7c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:9b:06:10:d4:71:b3:89:58:fd:fb:e5:1e:12:75:ef:ad:a1:
91:9d:13:4a:46:df:28:cc:c3:1c:f6:50:80:e0:f9:25:1f:1e:
72:2d:7d:17:7b:f5:73:56:6a:b4:2e:b9:e7:49:1c:b2:08:e0:
76:61:8f:36:28:ae:62:76:3e:8f:a7:fd:6b:ad:8c:6c:d1:68:
48:82:f0:69:df:9f:98:43:46:5d:ef:ed:65:ac:b2:cf:a9:69:
07:5e:0c:02:b2:55:0d:a9:5a:4e:83:21:2b:a8:ac:0c:e3:54:
33:c0:58:1d:10:12:dc:c1:28:c9:80:05:f7:c1:ea:39:57:b8:
28:06:72:47:f6:85:e5:98:12:64:8d:8b:c6:1c:c5:a7:3c:2a:
5e:62:70:40:cc:28:1d:af:24:95:01:f3:b6:eb:fd:76:35:6a:
aa:e2:ff:bc:e9:da:f2:5d:9f:e0:9b:c1:1c:3c:8f:c2:1f:7f:
b4:51:4b:ca:be:12:6d:91:5d:17:02:d3:54:e6:69:c0:8a:b3:
c6:91:6f:27:a8:59:af:6f:de:81:07:5c:f6:34:41:7b:1b:85:
bd:55:cd:b3:19:41:e0:1a:5c:43:8f:c8:1b:a9:1a:60:ba:46:
62:9d:88:61:2e:1a:06:b6:7a:05:26:84:15:e8:3d:f4:b7:ed:
72:f4:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:12 2024 by rpki-client on console-ams.rpki-client.org