Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/WsuXVyZg7uAETxW6Gnup59Aecdw.roa
File: WsuXVyZg7uAETxW6Gnup59Aecdw.roa (raw, json)
Hash identifier: kqRUo60qMb4qYqZ44Z5jM5ZF/vwsbuBpeMxWTjTzcSo=
Subject key identifier: 5A:CB:97:57:26:60:EE:E0:04:4F:15:BA:1A:7B:A9:E7:D0:1E:71:DC
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 04A8A745
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/WsuXVyZg7uAETxW6Gnup59Aecdw.roa
Signing time: Sat 01 Jan 2022 06:57:01 +0000
ROA not before: Sat 01 Jan 2022 06:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5524
IP address blocks: 185.42.56.0/22 maxlen: 22
2a04:8e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78161733 (0x4a8a745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Jan 1 06:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5acb97572660eee0044f15ba1a7ba9e7d01e71dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:a6:d3:95:ad:74:e6:8e:1b:e8:24:6c:da:
d2:33:36:4a:49:5e:70:29:4e:22:97:c6:fc:eb:80:
e9:7a:b2:10:87:06:2f:b9:38:70:a9:39:07:a3:4a:
20:f5:f1:29:98:60:0b:2c:57:f1:c2:2e:80:bb:5c:
cc:4c:62:b9:3e:3c:86:1d:65:f9:6a:6b:0d:0e:28:
d8:74:95:48:55:92:20:a9:40:26:a6:03:04:e3:9e:
9a:98:e2:fa:8c:53:67:73:52:10:4b:0b:b3:f7:11:
f1:03:74:fd:1d:36:fd:e4:cd:5f:a9:4f:c0:3a:a7:
bb:63:dd:87:85:95:91:77:9c:fe:54:a5:d1:dd:b6:
07:b2:ae:cd:5c:2d:ee:63:1b:25:90:77:ef:56:1f:
c2:16:44:50:7f:cc:04:b6:e2:d3:9e:01:8f:bf:f0:
6c:9f:56:ec:68:9c:ff:c1:44:8a:c2:0e:dc:82:e9:
0f:76:59:26:17:87:3a:5a:10:58:80:f9:d1:cc:e3:
44:e0:14:92:80:84:6d:0d:aa:21:70:2a:bf:7e:a6:
d9:29:f9:37:d9:d6:d7:8c:6b:ab:18:33:a8:47:26:
14:e8:a5:35:6a:09:8a:f4:c7:9b:1e:20:61:22:57:
12:d2:3c:7a:18:b7:fc:c5:c5:4d:1a:e8:5b:2c:f2:
4c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:97:57:26:60:EE:E0:04:4F:15:BA:1A:7B:A9:E7:D0:1E:71:DC
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/WsuXVyZg7uAETxW6Gnup59Aecdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.56.0/22
IPv6:
2a04:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
11:4f:82:8e:d9:fb:17:8f:49:f5:47:19:48:00:23:05:05:a0:
2b:4c:02:2a:e0:08:b9:2a:19:6a:f1:7a:32:db:6c:11:a4:8b:
06:96:3a:74:4c:0a:be:55:97:a5:77:f6:fa:04:88:e1:66:07:
b1:c2:57:b5:b9:4e:65:54:a9:ad:42:88:02:4f:4b:e0:e1:28:
34:d9:88:82:e6:60:32:58:f7:4b:c0:38:df:65:6a:3e:66:f0:
86:25:29:82:38:41:bd:10:87:f1:fb:b6:de:c2:c0:43:f1:cd:
dd:fa:2f:0f:0d:56:fb:de:65:02:87:a1:83:8c:cf:a4:ad:c6:
26:13:be:d8:11:6d:81:78:10:05:b1:5c:0e:a7:e6:be:39:4e:
97:bc:41:76:1b:42:6d:e1:13:b6:a1:bd:d7:11:b2:89:6b:d3:
ca:ce:05:88:d8:c2:e8:35:f8:ad:00:3c:10:51:25:01:12:4d:
ad:ee:5b:d6:84:fa:0f:bb:89:ed:30:32:a7:f6:c7:2e:83:a2:
ef:6d:04:17:5b:9b:43:a3:68:b4:60:7d:4b:40:75:74:82:c9:
11:c3:0a:52:a4:75:95:22:25:2c:23:af:e3:2d:b3:c8:a1:1d:
10:f8:ab:6b:b7:d1:65:e5:fe:45:63:9f:5e:ad:5a:b4:15:29:
a9:a0:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:02 2024 by rpki-client on console-fra.rpki-client.org