Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/wk6tzKLOLSbUmPXkByiG63KL6l4.roa
File: wk6tzKLOLSbUmPXkByiG63KL6l4.roa (raw, json)
Hash identifier: /Q66zx86ez7OrezZN3P7os7KZRPj3poPCdDqmRu3If0=
Subject key identifier: C2:4E:AD:CC:A2:CE:2D:26:D4:98:F5:E4:07:28:86:EB:72:8B:EA:5E
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 05E63083
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/wk6tzKLOLSbUmPXkByiG63KL6l4.roa
Signing time: Sat 01 Jan 2022 09:02:25 +0000
ROA not before: Sat 01 Jan 2022 09:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44395
IP address blocks: 85.159.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98971779 (0x5e63083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jan 1 09:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c24eadcca2ce2d26d498f5e4072886eb728bea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:01:78:ee:2a:3b:86:d5:a0:17:2e:1e:22:
c8:fa:c0:d8:cb:85:50:0d:31:a3:2f:cf:15:ec:1d:
9a:07:af:87:43:02:be:97:f4:ed:6f:98:36:ab:52:
98:a9:1a:eb:3c:6f:81:c7:42:38:14:96:01:ec:ff:
26:12:73:24:c5:67:8b:26:55:11:a1:ba:95:84:16:
8b:03:9f:09:c1:9b:2a:02:07:f9:22:21:d2:f7:88:
a3:97:c7:d6:62:1d:65:b5:a2:f0:d0:b2:d8:44:65:
95:c8:ba:9e:17:2e:2b:12:d4:e1:35:32:42:0c:6b:
48:a8:4d:01:1e:59:64:71:22:90:14:a4:84:b7:62:
c1:f3:f4:0c:f8:fc:ee:b6:bf:68:0d:9c:6a:4a:7f:
71:2e:17:f9:8a:98:02:5c:70:f1:db:93:93:45:05:
01:3d:42:fc:b9:a8:e6:b5:b2:e0:f9:88:e2:e1:c7:
19:34:3d:6a:25:ac:05:6f:bd:61:52:49:1a:4d:eb:
fd:12:01:88:cf:ad:dd:72:f9:fe:ab:9d:b2:07:b3:
52:62:fc:a9:d4:22:80:d9:4d:7c:1e:ce:d4:e6:f5:
df:ae:1b:7b:81:22:8b:0f:af:42:2b:72:04:e6:a1:
7a:91:13:20:d3:1d:fa:4a:ad:ed:6b:41:0b:47:41:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:AD:CC:A2:CE:2D:26:D4:98:F5:E4:07:28:86:EB:72:8B:EA:5E
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/wk6tzKLOLSbUmPXkByiG63KL6l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c8:6e:73:34:83:a6:67:19:e3:36:3d:0b:e9:26:1a:43:6f:
2b:05:73:dd:43:c0:8b:94:a5:72:da:69:c7:94:6d:35:31:40:
9f:e5:60:ff:63:e7:ed:ea:27:ba:d0:72:b1:93:dd:0c:ab:89:
5c:93:e9:5c:ce:b3:47:0f:15:8c:6c:d6:b4:9d:24:ac:ae:8d:
85:de:83:70:f2:ae:f1:0e:c0:5e:be:8c:a9:99:5c:90:41:2e:
b5:0e:95:fc:b6:16:8b:53:ff:77:c3:ec:bd:54:a3:51:ec:1b:
74:50:ae:cc:da:cc:17:3e:67:a2:d8:f5:ac:52:5b:a9:8c:60:
38:65:db:f7:dc:cf:31:02:06:fd:6c:ca:ee:fc:59:7e:6c:e0:
11:1b:0e:ff:50:8d:33:d3:71:25:75:7e:f3:13:30:e3:04:21:
a8:ed:e2:53:f7:31:64:f8:bb:40:ef:92:45:86:2e:09:45:62:
29:c3:1a:80:17:f9:7e:6e:01:9a:87:1a:b5:73:7e:e3:85:31:
d6:01:78:a5:cb:d2:4e:41:fd:dc:0d:7c:cb:92:a4:45:67:27:
04:d4:db:f7:fa:4a:13:6a:13:9d:69:af:c9:bb:15:8d:3e:fa:
d2:d6:ab:5b:6e:bb:22:4d:9b:1d:cd:54:42:0a:56:a5:9c:ad:
c0:f0:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:38 2024 by rpki-client on console-fra.rpki-client.org