Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/Wc4GrK7saxuJCcogyzcQY9dv5dw.roa
File: Wc4GrK7saxuJCcogyzcQY9dv5dw.roa (raw, json)
Hash identifier: y6pOIbwAoxHAHOIbQDVeg9V43VihkSeN28jAEhOMv1g=
Subject key identifier: 59:CE:06:AC:AE:EC:6B:1B:89:09:CA:20:CB:37:10:63:D7:6F:E5:DC
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 383CC4E4
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/Wc4GrK7saxuJCcogyzcQY9dv5dw.roa
Signing time: Sat 01 Jan 2022 06:03:26 +0000
ROA not before: Sat 01 Jan 2022 06:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15456
IP address blocks: 62.116.128.0/18 maxlen: 24
62.116.128.0/19 maxlen: 24
85.236.32.0/19 maxlen: 24
62.116.160.0/19 maxlen: 24
185.91.244.0/22 maxlen: 24
2001:4178::/29 maxlen: 29
2001:4178::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943506660 (0x383cc4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: Jan 1 06:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59ce06acaeec6b1b8909ca20cb371063d76fe5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:07:a1:59:44:e7:7e:89:10:a0:1d:45:08:
dd:15:ba:26:cd:78:95:19:3c:c8:a7:24:95:e4:21:
80:51:5a:d6:39:ef:da:8e:4e:08:0e:fb:fb:78:8c:
57:31:ff:cd:63:8f:5e:b1:1f:af:f0:5f:e1:a9:52:
21:da:fe:fd:19:70:f7:8a:55:cb:d1:24:e0:e1:39:
92:54:28:eb:a8:60:d4:a0:1a:c1:e6:ba:d3:04:aa:
18:3a:52:52:43:d5:3f:f5:ef:65:76:23:ae:42:1a:
ad:6b:ec:0b:6b:f6:98:2f:31:cc:ad:d4:22:06:1a:
99:16:94:8a:c6:60:e0:9e:ed:bf:7f:a7:21:51:a2:
89:74:87:fe:cc:2b:20:6c:09:1a:3d:5f:64:8e:3e:
73:2a:f8:44:cc:92:3d:bf:57:db:d6:d3:96:df:70:
a1:d6:2d:f5:c5:86:b7:73:d2:d6:4f:f2:e1:68:60:
77:c2:2b:9c:59:61:2c:af:75:4e:65:32:53:00:08:
ce:d3:cf:67:ca:53:9d:be:99:11:70:ee:8c:ec:c8:
62:cf:d8:61:82:eb:8f:06:9b:f1:f6:87:43:16:6e:
14:33:5b:9f:e2:f4:20:a5:66:57:1b:c9:51:42:17:
b7:4d:c5:af:7d:06:fd:fe:95:9a:08:89:0f:f2:cd:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:06:AC:AE:EC:6B:1B:89:09:CA:20:CB:37:10:63:D7:6F:E5:DC
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/Wc4GrK7saxuJCcogyzcQY9dv5dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.116.128.0/18
85.236.32.0/19
185.91.244.0/22
IPv6:
2001:4178::/29
Signature Algorithm: sha256WithRSAEncryption
22:50:95:b5:bb:3b:aa:a5:cb:dc:49:78:66:5e:41:25:dd:ab:
e8:02:8b:1b:39:7c:c2:f3:a8:74:e7:f7:94:f3:24:d0:8f:b0:
31:08:c2:0f:b2:81:18:88:97:64:33:90:24:d1:06:ca:23:6f:
64:fa:9b:78:b5:b1:d2:ff:e2:d4:25:10:81:42:90:5d:54:50:
5c:c7:7d:5a:5d:8f:3e:43:81:36:ff:b9:b4:cd:ba:4d:39:21:
83:35:e4:38:eb:45:35:19:b4:88:52:e5:bb:c6:d8:22:1e:4d:
e0:b0:de:e8:49:ac:b0:25:f6:7c:40:84:0b:1c:35:6f:ea:3f:
c4:66:b7:3b:fb:1f:2a:6d:71:bc:9a:ca:3c:35:6b:6d:30:13:
25:dc:90:44:b6:c1:ba:a9:91:f6:ae:b4:60:44:da:9b:a5:6a:
61:6c:2d:04:fb:7e:7f:fa:ff:42:31:5a:a7:09:27:7b:11:94:
cd:98:b5:0c:49:80:df:d0:46:f1:ea:c8:0e:4a:32:f0:4a:cf:
b6:99:37:fa:ce:9c:fe:6c:94:8c:ea:84:d1:1c:dc:b8:26:3b:
01:94:f4:42:3f:f1:d5:52:bc:02:84:ac:bb:74:97:01:67:fb:
a8:c2:3f:c2:6d:90:8c:61:da:53:be:ed:3d:c6:33:85:df:73:
3a:7e:be:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:26 2024 by rpki-client on console-fra.rpki-client.org