Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/wSSE_3Hp21Jx-2Eg3OMCasd7c8Q.roa
File: wSSE_3Hp21Jx-2Eg3OMCasd7c8Q.roa (raw, json)
Hash identifier: ZwqBPiDyVIbtVKQQPxldmAlA0yZBwZREsQD6f+3GfCI=
Subject key identifier: C1:24:84:FF:71:E9:DB:52:71:FB:61:20:DC:E3:02:6A:C7:7B:73:C4
Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial: 0D3C6F7E
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/wSSE_3Hp21Jx-2Eg3OMCasd7c8Q.roa
Signing time: Sat 01 Jan 2022 15:00:32 +0000
ROA not before: Sat 01 Jan 2022 15:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39242
IP address blocks: 185.159.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222064510 (0xd3c6f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Validity
Not Before: Jan 1 15:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c12484ff71e9db5271fb6120dce3026ac77b73c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:a3:ed:f1:94:fb:4d:b7:64:e6:34:bc:62:
a5:a1:d3:0a:db:ab:37:d3:ff:77:bb:af:5a:3b:d6:
58:de:1f:d8:f1:d8:55:25:ca:6d:4d:f6:fe:cd:83:
98:72:fe:98:69:1d:fb:6a:fd:e9:33:30:46:cc:7b:
af:70:a8:a6:83:47:32:19:31:ec:4c:da:10:f9:ce:
1a:92:c9:5f:12:49:8c:f9:93:64:a0:72:6d:92:39:
8e:c4:18:9f:bd:79:1f:e9:95:74:e1:d1:00:4b:4b:
0f:51:69:aa:af:a0:54:de:e7:a1:1d:ff:fa:e7:d9:
de:cc:b1:3c:25:c9:d1:09:71:01:b5:a5:e3:46:aa:
b0:98:01:d2:52:00:4f:c9:30:c8:77:8a:64:c6:38:
c7:e5:2d:f4:e1:25:16:ac:74:12:1f:c4:7d:fe:76:
63:28:71:f2:09:0d:df:b2:a2:31:24:8d:03:4a:26:
43:47:48:57:8e:3f:bd:44:fc:07:0f:74:df:20:8f:
9d:5d:60:60:99:8f:95:15:db:29:af:77:eb:47:94:
24:1c:f4:6e:c9:e0:91:71:a6:24:80:18:d5:5c:b0:
d4:36:e5:4b:56:63:7e:61:15:0d:09:b6:95:c6:08:
33:a5:5f:e8:b4:fe:6b:9f:81:52:bf:93:ce:9f:4c:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:24:84:FF:71:E9:DB:52:71:FB:61:20:DC:E3:02:6A:C7:7B:73:C4
X509v3 Authority Key Identifier:
keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/wSSE_3Hp21Jx-2Eg3OMCasd7c8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.236.0/24
Signature Algorithm: sha256WithRSAEncryption
30:56:90:6c:05:a4:cb:64:e3:ff:83:22:14:f9:59:e7:dd:94:
39:29:54:27:fa:10:e6:d6:e6:87:8c:c5:16:94:65:ee:cc:90:
3e:50:cc:0e:f2:bd:41:4d:a8:c2:8d:79:98:ee:cb:15:9c:36:
c3:ec:5a:59:b7:4b:54:f7:01:1e:d8:0b:32:87:0b:da:6d:98:
2d:a3:33:4e:89:3f:dc:08:e8:01:ab:cf:e6:c0:f5:ce:61:11:
05:ea:00:b3:ed:3a:79:3a:9d:33:30:c0:7c:2b:29:18:e0:45:
22:ab:dd:d3:89:c3:17:f1:51:a2:63:db:fc:44:5f:38:5f:f7:
85:5d:ac:cc:b5:7e:c4:b3:24:ec:5a:6c:66:f1:a1:bb:d9:dc:
c8:8e:e4:75:ff:2a:85:6e:fb:f3:fd:fa:dd:87:97:a7:cc:08:
29:a7:85:5e:d1:3f:6a:7b:ac:47:c9:a9:bc:07:e4:6e:9f:5f:
14:fb:e8:c9:c3:24:fc:2d:1f:f6:72:87:ce:1b:3c:20:14:6a:
8b:0c:19:65:4e:95:98:4e:6a:6c:8b:0f:4f:e7:97:8b:e5:8a:
3a:92:bf:34:98:69:9c:65:a9:82:50:35:1b:ac:df:34:88:66:
4a:dc:b9:81:cf:d4:f7:d1:0d:ba:d8:d9:6b:d1:65:06:5d:29:
b8:32:58:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:38 2024 by rpki-client on console-ams.rpki-client.org