Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wbGFKWlHqnji1vGLmF7fmd87veo.roa
File: wbGFKWlHqnji1vGLmF7fmd87veo.roa (raw, json)
Hash identifier: /XnycwYOUomEybGHjfGcINQyzRgyx8W3CbL+8X0Dd4g=
Subject key identifier: C1:B1:85:29:69:47:AA:78:E2:D6:F1:8B:98:5E:DF:99:DF:3B:BD:EA
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 015A45
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wbGFKWlHqnji1vGLmF7fmd87veo.roa
Signing time: Fri 06 May 2022 07:08:22 +0000
ROA not before: Fri 06 May 2022 07:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8374
IP address blocks: 185.4.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88645 (0x15a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: May 6 07:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1b185296947aa78e2d6f18b985edf99df3bbdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:15:1f:88:93:a8:98:87:08:f5:59:f2:d5:
e8:1e:ed:91:cc:de:88:9f:13:97:52:3d:47:e1:bc:
33:52:bd:e4:f2:fa:37:69:c0:b0:80:44:13:8b:21:
a8:a6:a6:a3:c2:03:f8:7a:80:2f:04:64:48:8b:d7:
29:5a:73:67:93:39:6c:e5:d9:fd:31:48:0c:f6:5d:
8b:0f:06:e1:fb:81:25:bd:42:80:71:8c:c3:6f:ec:
ba:6a:a2:f9:e6:3b:0a:fb:d9:1f:a1:b3:6a:7c:ff:
d9:48:0f:cf:a6:39:f3:06:c1:5c:e2:cf:af:6c:1d:
aa:75:a4:20:ca:65:90:d5:4d:c7:2d:d6:f8:2b:33:
d7:e8:4e:d2:77:a6:e3:a3:36:d8:a5:9c:ac:45:bd:
9b:44:67:3c:ba:90:1c:b6:d5:1d:52:47:f4:18:6c:
06:2b:64:48:5a:80:70:2e:07:ef:d3:a5:4c:89:19:
72:2f:26:e6:8f:f8:a7:58:86:4e:2b:b6:37:33:e9:
59:59:0b:f1:58:df:60:2f:42:57:e4:29:e1:c5:f4:
48:f0:c6:80:ac:6f:3b:14:fd:c9:58:c1:14:fd:6a:
2e:09:df:e3:5b:e5:4b:c6:e7:ce:18:56:4a:d7:bd:
f4:e0:00:ae:07:16:3c:27:cb:03:07:e2:f6:b3:7c:
f7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B1:85:29:69:47:AA:78:E2:D6:F1:8B:98:5E:DF:99:DF:3B:BD:EA
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/wbGFKWlHqnji1vGLmF7fmd87veo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.212.0/22
Signature Algorithm: sha256WithRSAEncryption
42:53:b1:3d:58:a1:03:24:13:b6:9c:2f:4e:71:6a:d3:0d:ea:
e4:98:0f:99:d7:f5:f5:07:d5:cd:5b:54:4a:18:9c:1e:0a:f2:
19:b1:38:d2:ce:02:19:7a:eb:54:88:38:4f:00:a4:bf:7d:ba:
6b:4d:3c:34:41:11:18:48:0d:e2:20:7b:2a:be:95:86:d8:ff:
a1:28:61:33:63:d5:6a:e7:47:bc:46:3a:26:de:74:84:f2:5a:
2d:4c:a6:ef:26:e0:fb:7d:29:92:06:b6:2b:38:6c:0a:64:b2:
cf:57:9c:31:47:7b:6d:36:b7:6c:f1:70:00:27:0a:f9:56:75:
b2:53:ce:48:81:d8:87:7b:8a:72:c3:e3:3e:f4:6e:a5:87:8c:
38:82:76:9c:79:1c:ef:b7:5e:9f:ca:9e:03:1a:b1:59:5c:15:
93:65:24:43:31:f2:a4:05:40:4a:93:f1:68:bd:bd:e3:f8:ff:
67:75:1a:9c:28:0f:60:d0:82:ad:13:9c:f2:90:8b:f1:3a:a3:
19:24:7c:75:93:bc:07:64:5f:c8:cc:91:96:0b:33:60:4d:e4:
ea:af:8d:24:a2:6f:37:2a:cc:2f:5a:41:58:cc:58:1d:1a:50:
7b:d7:f6:ce:96:aa:a1:67:48:25:b2:2f:ce:08:bb:bb:18:5e:
65:69:f4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org