Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/Wyhv36BiwTIb2B36a91gDtEP4J0.roa
File: Wyhv36BiwTIb2B36a91gDtEP4J0.roa (raw, json)
Hash identifier: dDn99f9tjN3J50nxd8iUPSd41o8I6Zo4EqRcxYEcyxI=
Subject key identifier: 5B:28:6F:DF:A0:62:C1:32:1B:D8:1D:FA:6B:DD:60:0E:D1:0F:E0:9D
Certificate issuer: /CN=16f02e70a6553ff0c665139ee55671c860658081
Certificate serial: 05E2EF8A
Authority key identifier: 16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/Wyhv36BiwTIb2B36a91gDtEP4J0.roa
Signing time: Sat 01 Jan 2022 07:57:56 +0000
ROA not before: Sat 01 Jan 2022 07:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48359
IP address blocks: 185.120.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98758538 (0x5e2ef8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f02e70a6553ff0c665139ee55671c860658081
Validity
Not Before: Jan 1 07:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b286fdfa062c1321bd81dfa6bdd600ed10fe09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:78:44:51:7e:7e:42:d9:aa:6b:60:46:6d:
79:d2:8a:af:1e:b2:05:fe:6f:d4:ef:3f:af:7a:59:
14:36:7b:aa:4d:54:a3:65:8a:df:02:0d:e7:7c:2f:
e6:32:e3:6b:c8:1b:09:39:48:cf:2d:ce:43:54:e4:
78:5a:cd:0f:3f:18:67:11:36:9b:e3:df:f1:93:28:
0f:df:6d:07:d3:0b:69:53:d5:91:ca:ff:e0:5f:d5:
40:77:5e:4a:65:6c:ef:29:80:37:8e:75:a9:ff:93:
bf:9c:b3:95:7e:9f:8d:a2:36:40:32:0b:94:e2:c9:
91:e5:04:1f:8d:e6:d1:c2:89:48:40:8c:a2:2e:cb:
9e:58:9b:82:89:d0:1d:19:66:1a:3f:b1:7d:23:8e:
d5:fe:a3:c0:d9:ad:9d:2d:33:73:c3:b1:8d:fc:33:
4d:1c:46:19:54:48:c1:ef:e9:c8:c7:f2:f5:d4:c1:
7c:0c:cf:1c:50:56:f4:db:3f:35:0c:30:8f:38:a7:
54:e8:08:64:38:45:65:f9:44:68:7f:ba:55:a3:3e:
fe:e2:c5:d2:5f:48:2f:78:ca:db:00:08:c6:e7:6e:
01:60:4e:e7:a2:90:45:31:33:1d:8c:9e:4e:b2:16:
65:5a:b5:fe:03:fd:29:c5:3c:94:8b:7d:ee:36:3b:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:6F:DF:A0:62:C1:32:1B:D8:1D:FA:6B:DD:60:0E:D1:0F:E0:9D
X509v3 Authority Key Identifier:
keyid:16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/Wyhv36BiwTIb2B36a91gDtEP4J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.139.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5e:32:83:d9:80:83:d3:d2:43:24:0a:86:80:b5:be:f8:f2:
fe:25:fa:9b:f3:54:40:fc:09:4f:0d:27:7e:3d:8b:76:98:7b:
59:19:46:db:57:15:6d:29:9a:71:0a:9f:b9:c3:b0:ff:8e:da:
b2:8e:3b:ff:a7:0e:bf:24:5a:42:02:c7:84:ea:5f:ac:65:9d:
d4:1d:02:ff:2f:46:5a:4b:99:33:9c:82:1f:25:90:87:70:9e:
14:cd:2d:89:e1:e0:8d:c7:98:74:e9:4f:bd:fd:ea:70:7d:72:
b5:b1:00:27:9c:7f:7f:73:80:d8:77:12:18:6f:da:aa:90:92:
b1:bf:a5:fb:83:69:2f:dd:83:89:66:32:58:50:25:27:7f:53:
42:04:53:44:fd:c9:6d:54:a3:37:f6:58:44:7d:c9:7d:75:c1:
d0:02:d4:40:46:62:cd:5e:75:fe:c1:f8:08:89:5d:b7:a7:1a:
d0:61:f0:ab:26:64:ed:ac:8c:2a:35:83:5d:3e:1d:cc:6f:66:
a2:d7:76:5d:cf:57:18:0f:96:2f:2f:46:06:78:90:3c:af:0d:
24:84:8b:cc:c3:1f:6e:25:7a:74:b4:cf:62:80:21:0a:59:dc:
ec:b3:b9:a9:ec:e9:ed:db:0a:b7:a0:a7:63:ab:25:42:56:7a:
85:d4:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:34 2023 by rpki-client on console-ams.rpki-client.org