Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/w-2Ef-D5PepkyF2_8iuU7SuOIcI.roa
File: w-2Ef-D5PepkyF2_8iuU7SuOIcI.roa (raw, json)
Hash identifier: v02sqncjIGxpDfIiYiHc6IAQmIZPiEdeSc7yK0Uom4U=
Subject key identifier: C3:ED:84:7F:E0:F9:3D:EA:64:C8:5D:BF:F2:2B:94:ED:2B:8E:21:C2
Certificate issuer: /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial: 053531D5
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/w-2Ef-D5PepkyF2_8iuU7SuOIcI.roa
Signing time: Sat 01 Jan 2022 01:52:00 +0000
ROA not before: Sat 01 Jan 2022 01:52:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199403
IP address blocks: 185.17.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87372245 (0x53531d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Validity
Not Before: Jan 1 01:52:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3ed847fe0f93dea64c85dbff22b94ed2b8e21c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:99:c2:bd:ae:5c:24:a5:cc:9b:5e:8e:b1:
c8:12:75:cf:bb:e8:96:51:13:b2:63:8e:b3:82:09:
8e:77:8c:c2:64:98:6f:7b:eb:70:1e:b8:0b:c3:5e:
1f:a9:8c:64:09:ba:7b:46:6b:7b:07:d0:4f:6b:25:
c9:94:dd:d9:7f:82:3c:22:58:0c:88:30:c6:31:7b:
a8:7d:cd:9f:07:91:c0:c6:a4:d7:60:94:81:d3:e7:
50:fe:ac:ea:9d:c0:7b:cd:5c:11:49:2f:96:99:c1:
f1:08:90:5a:e2:d4:ab:e0:85:ac:ed:85:a5:31:a6:
e1:ed:b5:dd:f5:2f:09:8a:f1:00:00:da:7b:bc:54:
f7:e5:64:a8:c6:06:33:1b:e9:09:29:1e:24:f8:72:
a5:ba:d4:b2:8a:23:b8:bf:7a:bd:4b:75:2e:6a:50:
69:d0:79:07:01:15:92:e2:fe:0c:26:ff:c2:c7:b5:
52:de:11:63:55:bc:f7:ef:d8:1c:73:d2:bb:15:41:
26:d4:36:c2:d0:b1:60:df:8e:df:21:43:49:9d:ca:
1c:d7:8a:05:cf:4e:ec:78:00:5c:21:7f:e5:b7:1c:
d9:ec:b0:07:c0:88:ce:68:b8:8a:9e:ab:95:61:d3:
0a:62:26:39:3b:75:88:bd:14:e6:94:32:71:a9:1f:
d0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:ED:84:7F:E0:F9:3D:EA:64:C8:5D:BF:F2:2B:94:ED:2B:8E:21:C2
X509v3 Authority Key Identifier:
keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/w-2Ef-D5PepkyF2_8iuU7SuOIcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.208.0/22
Signature Algorithm: sha256WithRSAEncryption
11:48:82:e9:ff:bf:b8:59:0d:f1:b8:3c:d7:19:ec:1a:4f:3d:
71:6a:41:88:45:17:e4:52:f0:43:ad:a4:04:7e:db:a3:82:4b:
88:05:39:2a:57:8d:09:76:10:d4:c2:04:a1:b4:6c:57:32:0e:
ab:f5:60:fe:19:9c:ea:1b:a7:59:2c:93:63:c2:32:80:a9:a2:
92:cb:e4:fe:c4:c3:43:ac:7e:34:33:fa:10:5d:84:e2:e2:10:
66:67:91:10:a8:d5:88:a7:ac:30:97:70:32:7a:ad:97:7b:50:
c4:a4:24:43:58:d8:36:79:05:54:a0:1f:3b:c4:a0:64:8f:cc:
d2:31:7e:86:0e:09:82:39:74:76:19:56:20:60:2e:56:41:84:
f3:4e:24:2d:cd:b2:ac:7b:72:af:ea:9b:c7:42:7e:d8:60:7d:
fd:ef:eb:a5:ec:eb:b8:ea:5d:5d:6f:70:5a:ce:5a:90:f9:f9:
6b:82:13:66:ac:55:24:58:73:b1:aa:c9:21:3c:38:b7:8a:c9:
6c:8e:54:c9:b1:d1:e8:7f:70:4c:6d:45:ad:5c:71:89:fb:98:
a8:59:a2:54:c8:78:d6:61:d5:e1:66:7f:de:ce:bf:b0:94:f2:
35:a2:12:d5:9b:09:ff:0a:9f:42:66:70:29:da:40:b2:ad:f4:
75:9b:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:41 2024 by rpki-client on console-ams.rpki-client.org