Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/Wft1xtYnftwnX-2rW1o7YEZ6fI8.roa
File: Wft1xtYnftwnX-2rW1o7YEZ6fI8.roa (raw, json)
Hash identifier: oHQlEJfWLaMtAqTJ2H2kjiapL3r1M31tSIKpmNppZzI=
Subject key identifier: 59:FB:75:C6:D6:27:7E:DC:27:5F:ED:AB:5B:5A:3B:60:46:7A:7C:8F
Certificate issuer: /CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Certificate serial: 01845DFEB4980C70F6F19F654AA3F69F8443
Authority key identifier: 60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/Wft1xtYnftwnX-2rW1o7YEZ6fI8.roa
Signing time: Wed 09 Nov 2022 20:04:44 +0000
ROA not before: Wed 09 Nov 2022 20:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 192.35.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:fe:b4:98:0c:70:f6:f1:9f:65:4a:a3:f6:9f:84:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60998d3c9d8bdc9c1dff8e319424412b6cdc1dd3
Validity
Not Before: Nov 9 20:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59fb75c6d6277edc275fedab5b5a3b60467a7c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:c2:e4:66:28:a4:fc:68:7e:d4:49:44:38:
41:e2:3b:61:47:7d:1e:88:46:f5:56:24:c3:69:23:
df:81:0f:14:d2:62:3e:9f:da:77:1d:ae:db:d2:25:
62:55:06:99:51:c1:d2:33:a2:b3:75:1f:1e:4e:27:
da:ad:60:37:75:38:a7:a3:5d:c2:3c:36:f7:ba:f2:
6f:b4:95:b7:2b:c6:66:cf:75:a7:55:a2:91:84:73:
88:46:c2:b8:cf:b8:3b:d0:46:6e:5a:6a:a6:f8:3b:
b6:c8:5e:24:de:e9:18:17:35:ce:57:1d:2c:6e:e7:
28:b2:e8:d1:ba:b4:87:10:21:db:48:4a:8f:dc:2c:
c9:27:dd:fa:2e:cd:a8:a4:ab:92:ae:2c:d0:a5:44:
cf:b0:39:cb:fd:51:27:63:51:52:d8:6a:81:0d:2a:
68:84:d7:e3:7a:8d:a6:91:9b:86:c8:f6:d6:e1:37:
a1:30:fc:20:03:53:2c:8c:cf:e2:13:8f:a9:a7:f9:
72:71:d4:6b:7a:f6:ca:3b:06:38:61:70:4f:d8:1a:
54:89:ac:4c:d2:22:1b:61:70:c6:8f:0e:39:03:9a:
a4:b4:64:f4:37:2b:af:c0:4b:04:7d:a8:a0:1f:0c:
64:d5:1c:63:cc:6f:2f:2b:f2:45:12:8c:4e:f4:9d:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FB:75:C6:D6:27:7E:DC:27:5F:ED:AB:5B:5A:3B:60:46:7A:7C:8F
X509v3 Authority Key Identifier:
keyid:60:99:8D:3C:9D:8B:DC:9C:1D:FF:8E:31:94:24:41:2B:6C:DC:1D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/Wft1xtYnftwnX-2rW1o7YEZ6fI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/779ae9-7d22-4252-8c5b-0ea4d531b793/1/YJmNPJ2L3Jwd_44xlCRBK2zcHdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.35.206.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f9:9e:31:5d:26:5b:65:ec:7f:31:11:3b:9f:14:e9:ae:40:
a8:b0:0f:ad:fe:7c:47:f5:3d:3e:b6:b6:a6:a6:fd:a8:58:f1:
28:93:90:58:11:8f:41:5d:35:8c:8b:e0:aa:28:ff:d0:b5:6e:
05:fd:b5:d2:10:69:25:41:8a:fb:a6:ba:a2:4d:61:22:32:0b:
20:dd:63:e3:91:f3:f2:6e:ea:a8:fe:3e:80:68:71:52:76:14:
e9:48:e7:16:28:70:82:a5:f8:8c:5f:b2:17:f4:cf:31:f2:d1:
a4:45:8f:4f:36:f3:b3:a6:7e:9d:2d:3d:da:db:0a:46:f9:49:
73:ac:a5:89:c4:5f:e8:84:46:e3:0b:15:4f:83:85:25:85:61:
56:af:95:fa:75:49:1b:c4:81:64:46:32:e6:6c:72:f5:ff:35:
48:2f:42:c4:0d:a8:99:a1:27:7b:71:09:1e:94:de:bf:53:57:
80:32:34:fb:27:95:04:38:e8:9d:a9:d6:1d:ce:b0:db:20:70:
d4:10:ee:77:08:d2:5d:ad:50:b1:5e:dd:ee:a3:99:10:b6:e5:
e7:f6:59:60:8e:b6:ed:d8:99:56:9f:71:37:8d:2f:00:cd:cd:
bd:f3:53:b5:a4:24:59:d1:50:15:9a:aa:0c:62:bd:34:5c:83:
7a:71:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:06 2024 by rpki-client on console-ams.rpki-client.org