Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/w6cxNarShBDcBTQ92fRNLrE11GQ.roa
File: w6cxNarShBDcBTQ92fRNLrE11GQ.roa (raw, json)
Hash identifier: i1ueAbW7gtnAr8E0I+f812b3O08qBW3FXf2ACZB+Nzs=
Subject key identifier: C3:A7:31:35:AA:D2:84:10:DC:05:34:3D:D9:F4:4D:2E:B1:35:D4:64
Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial: 0183607EAC77E671BC02F90DF707718011F7
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/w6cxNarShBDcBTQ92fRNLrE11GQ.roa
Signing time: Wed 21 Sep 2022 14:40:57 +0000
ROA not before: Wed 21 Sep 2022 14:40:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4755
IP address blocks: 185.109.120.0/22 maxlen: 24
193.188.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:7e:ac:77:e6:71:bc:02:f9:0d:f7:07:71:80:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Validity
Not Before: Sep 21 14:40:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3a73135aad28410dc05343dd9f44d2eb135d464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:da:65:f4:07:5c:65:ef:e9:ca:ab:36:57:
37:2e:09:13:87:49:12:12:8c:fd:a2:e4:f5:3b:6f:
8e:3c:b2:92:5b:fe:b8:ab:50:60:dc:c7:f6:e6:fd:
b0:c7:97:ae:33:ad:b3:4b:b5:41:c1:fd:67:ac:fc:
f1:3c:22:ba:f6:72:27:af:bf:ed:4c:93:22:f4:95:
55:54:48:9d:4d:83:f0:c6:a8:61:09:0b:d2:7a:7e:
3a:74:74:46:d2:c4:a6:73:78:f8:b8:4a:65:55:52:
f1:74:b7:a3:4b:a2:7b:42:78:7f:f1:5e:d1:59:90:
fb:c6:97:58:e7:3d:0b:d1:90:9b:9b:aa:83:c7:02:
fd:7b:09:92:b4:a8:6b:7e:6b:a4:32:33:7e:a1:4b:
b9:fb:87:7b:3b:ff:5e:6e:1c:99:98:dd:a1:d4:ea:
af:3c:13:39:e4:87:22:93:0a:e9:65:d6:28:5e:72:
bc:08:a0:99:32:38:91:50:7e:d1:68:dd:5d:7c:80:
cf:f1:03:09:15:03:0d:3f:f5:99:4f:c3:93:65:74:
58:3b:36:c8:87:24:a1:00:f2:e2:87:11:e7:87:2d:
56:9d:fe:2c:a3:4d:f3:da:e8:2f:6a:5c:6c:98:53:
16:7e:8a:25:e8:37:89:54:1d:a3:29:65:0c:dd:98:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:31:35:AA:D2:84:10:DC:05:34:3D:D9:F4:4D:2E:B1:35:D4:64
X509v3 Authority Key Identifier:
keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/w6cxNarShBDcBTQ92fRNLrE11GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.120.0/22
193.188.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:11:1a:4b:99:a0:c1:1b:10:02:71:a4:7d:89:48:7d:17:75:
1a:ff:72:22:b3:76:66:93:d6:fa:e4:1b:b4:b4:18:d6:60:be:
6e:d7:94:c6:c8:ca:82:45:da:93:28:f8:67:58:a7:cf:07:43:
7d:6f:50:1e:bf:2f:95:42:01:03:7d:b0:ce:06:06:23:51:c0:
ea:51:d1:76:39:dd:62:96:2a:95:48:cb:a2:ac:d7:cf:6d:b6:
c8:9f:7b:45:03:85:b7:33:af:98:5d:2c:b9:cf:04:1f:21:57:
1d:00:4e:d7:d4:f3:23:46:b3:f4:53:0f:5b:15:dd:09:55:88:
b1:8e:e7:c6:8f:f8:7f:40:96:28:29:d1:d1:5a:7b:6a:6e:6b:
df:0c:0e:85:ee:1c:8a:09:bd:bd:ac:1e:ad:fe:51:2d:e7:b6:
9f:85:f8:94:99:87:c9:3f:6c:98:9f:23:8c:07:90:93:13:65:
36:ed:4b:cf:4b:f9:fb:cb:ae:f4:64:63:16:d0:3a:4c:f1:20:
e5:ab:a5:f4:1e:56:5d:a7:7a:b7:9f:f8:2e:ec:5e:de:34:4f:
ba:04:0b:cd:3d:ac:b8:95:d8:5f:a3:40:69:cb:07:71:32:cf:
c9:f2:64:11:0c:d0:d3:5d:51:48:13:a2:52:bb:e4:2c:f7:2b:
4b:50:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:08 2024 by rpki-client on console-ams.rpki-client.org