Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wvs9feTta46_1H1dZQKL8zMlhmY.roa
File: wvs9feTta46_1H1dZQKL8zMlhmY.roa (raw, json)
Hash identifier: WN3IDwBh2OVdKIIbuIRCpk8U8p9s+X/DF46hF0ECp44=
Subject key identifier: C2:FB:3D:7D:E4:ED:6B:8E:BF:D4:7D:5D:65:02:8B:F3:33:25:86:66
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0325C7F2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wvs9feTta46_1H1dZQKL8zMlhmY.roa
Signing time: Sat 01 Jan 2022 16:04:22 +0000
ROA not before: Sat 01 Jan 2022 16:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56975
IP address blocks: 185.212.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52807666 (0x325c7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2fb3d7de4ed6b8ebfd47d5d65028bf333258666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:b6:28:02:d2:92:8a:3a:4e:73:12:ba:1b:
36:88:00:35:c6:b7:cc:a6:35:49:d1:e5:3f:05:ff:
cf:ba:9f:b0:d5:eb:af:dd:5a:09:ce:a3:f4:33:7d:
4d:40:a9:29:b2:68:cc:83:aa:ed:ce:87:8d:7c:43:
ea:d6:be:5e:2d:c3:0f:a8:1a:42:ba:89:1d:a2:cf:
da:51:2d:07:ad:7a:a7:43:a1:ec:f3:ff:f1:0f:77:
c1:94:a4:ff:c2:3d:ed:1c:0c:1e:04:ec:1a:e2:64:
40:47:8b:36:9f:ba:b1:4e:d8:59:39:2c:d7:4f:44:
0a:32:05:a7:5d:43:66:16:0c:62:63:ea:e9:10:e7:
b7:40:3a:5d:0d:22:d8:8c:b6:b3:2e:74:27:49:a1:
3a:c0:71:56:3d:bc:7c:fa:f8:94:62:a1:60:6e:bf:
75:86:2d:bc:42:ca:17:65:fd:8b:9f:2b:ac:c3:14:
55:78:d0:87:4c:71:72:f5:26:b5:fa:cb:2c:a0:e6:
1d:cf:ff:bb:1f:87:c3:84:79:6c:06:c6:2e:91:2f:
b5:91:37:8a:23:88:aa:c3:b9:1a:8d:6e:34:8b:d4:
27:2d:28:9f:f5:27:55:cc:8b:9b:65:55:89:cd:c4:
06:81:eb:43:fa:25:f6:29:b1:71:38:c6:d7:44:0b:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:3D:7D:E4:ED:6B:8E:BF:D4:7D:5D:65:02:8B:F3:33:25:86:66
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/wvs9feTta46_1H1dZQKL8zMlhmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.151.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a2:a8:ec:c8:68:3f:0c:ae:4b:92:60:bb:78:b7:9e:80:5f:
68:e6:81:21:26:56:b2:96:db:30:67:81:6c:cf:d2:bf:be:ab:
2e:a8:f2:8c:9d:21:5b:b4:68:c3:c0:0c:e0:63:63:7d:5e:c0:
7c:b4:0c:4c:d5:64:d6:82:ff:28:58:91:41:db:8c:e5:65:00:
b9:bc:6b:e5:d4:8c:ec:bf:08:4e:23:57:e7:df:f4:d1:49:5e:
26:1a:77:b9:9a:14:e7:87:24:11:b6:15:cc:4e:35:f3:c6:43:
2e:96:fb:4e:35:93:26:1e:84:08:18:97:c5:20:53:30:a6:39:
b0:06:16:46:96:b7:17:8d:27:32:23:24:2e:cd:c5:c0:c7:79:
79:4c:33:c4:c5:31:9c:90:ba:e5:bd:67:4f:9f:a9:f7:0c:6c:
74:8c:eb:58:a8:2a:d4:4b:d7:08:75:36:97:6a:8a:b3:68:4f:
31:c7:df:75:f2:b8:8f:a8:b4:8f:9a:85:1e:31:34:1a:4e:dd:
38:08:70:d6:b5:1a:b4:57:7c:79:e4:80:a1:e7:0b:86:b3:bd:
0a:b5:38:43:2f:6d:23:66:b4:f1:7f:8e:e5:e1:1d:88:5f:0a:
1c:f7:cb:84:ba:c5:ab:d8:df:11:37:b1:0a:3a:de:c9:de:f6:
67:c1:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org