Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/92zD-V3VULtwJVufi3S_WAWARG4.roa
File: 92zD-V3VULtwJVufi3S_WAWARG4.roa (raw, json)
Hash identifier: IB4rfPkrCDUaztZMRRPx5nm3ATJnfToLcvfRr43FwYU=
Subject key identifier: F7:6C:C3:F9:5D:D5:50:BB:70:25:5B:9F:8B:74:BF:58:05:80:44:6E
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 02FA11FB
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/92zD-V3VULtwJVufi3S_WAWARG4.roa
Signing time: Sat 01 Jan 2022 04:52:37 +0000
ROA not before: Sat 01 Jan 2022 04:52:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204557
IP address blocks: 185.245.179.0/24 maxlen: 24
185.245.178.0/24 maxlen: 24
185.245.177.0/24 maxlen: 24
185.245.176.0/24 maxlen: 24
185.245.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49943035 (0x2fa11fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Jan 1 04:52:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f76cc3f95dd550bb70255b9f8b74bf580580446e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:a2:83:c4:42:14:dc:2f:e0:21:a5:94:29:
54:f2:27:52:31:22:ab:1f:1d:17:6e:5b:09:61:81:
38:0f:aa:7d:8d:60:3b:64:b6:cd:31:4d:f6:1e:71:
11:d7:93:da:c5:20:8e:a5:07:07:85:82:95:ba:d6:
6d:0b:96:f0:c3:11:25:b1:37:dd:7c:43:3b:8f:6e:
03:68:e4:20:c1:d9:4b:ce:73:d3:c5:80:3c:77:e3:
22:c2:be:e2:59:96:a4:82:c1:3d:5c:89:d8:83:86:
bc:09:fc:23:5a:69:bc:b5:a8:e3:a5:55:4f:e6:d8:
ba:38:87:4f:5b:3b:e9:40:9d:a0:67:4f:a3:b4:02:
41:34:1b:53:6c:34:66:b7:43:15:0c:37:5f:73:b1:
ae:67:ba:41:1c:cd:bf:6e:6b:8f:c5:fa:b4:50:08:
b4:71:a4:55:a4:c9:e0:65:96:ca:b6:60:39:77:99:
6e:b9:d4:cd:73:cc:cc:67:4c:6f:57:23:d3:e2:0d:
e7:6f:60:03:69:86:be:a4:01:9f:f6:82:b5:fa:3a:
49:76:5c:6c:27:43:ee:49:d4:e2:c7:2f:35:89:01:
23:db:31:14:cc:f7:ea:5f:78:52:15:29:4a:54:ef:
eb:30:27:0a:7a:59:02:cc:ba:48:38:29:b5:3e:98:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:C3:F9:5D:D5:50:BB:70:25:5B:9F:8B:74:BF:58:05:80:44:6E
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/92zD-V3VULtwJVufi3S_WAWARG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.176.0/22
Signature Algorithm: sha256WithRSAEncryption
28:50:0c:26:37:fd:77:ca:b2:5b:f8:0f:19:5d:21:b0:10:89:
72:05:3d:e5:99:71:11:db:5d:69:93:a7:ba:79:6e:04:55:97:
ae:b3:28:0d:22:8a:7b:33:de:14:ed:fe:a1:0a:e2:dd:33:8c:
2d:ae:33:dc:ca:7f:c5:70:96:62:9e:c0:a6:21:73:db:08:b6:
63:fc:4b:c1:c8:e6:bf:b2:b5:74:c3:d6:9c:7c:cc:49:91:5b:
94:9b:f6:68:21:8f:9a:c7:10:f2:d7:c3:51:f5:c1:38:76:34:
c7:5e:42:76:21:f9:65:81:17:91:b2:66:98:14:6b:88:4e:c9:
60:01:42:53:25:78:03:ad:01:2f:4a:cb:2a:3e:1d:96:75:6b:
9c:2d:8c:65:60:81:fe:41:b4:d6:dd:9c:48:76:74:35:7c:6d:
f6:45:46:dd:70:21:c4:06:0c:7c:68:ca:ad:ce:fc:42:74:37:
7c:ae:fc:7a:3c:00:67:79:58:a3:77:3d:bd:49:e5:44:e8:bb:
67:b2:11:c7:bb:c2:f8:39:76:f1:79:b2:0c:e9:f5:28:ec:d1:
c8:91:58:ea:b2:8d:11:5d:cd:f0:d3:32:ac:a7:35:5d:b2:29:
2a:99:64:99:e9:58:10:94:95:e8:ea:13:8e:46:11:ab:6d:07:
d5:54:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:35 2024 by rpki-client on console-fra.rpki-client.org