Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/w1usQQa_2b0bzSe6EslodNVT6no.roa
File: w1usQQa_2b0bzSe6EslodNVT6no.roa (raw, json)
Hash identifier: nxzOIFFbkvLlf7ojO4G4t3iiB8AF/oKMQ/3VblyZQrg=
Subject key identifier: C3:5B:AC:41:06:BF:D9:BD:1B:CD:27:BA:12:C9:68:74:D5:53:EA:7A
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 0329C0D8
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/w1usQQa_2b0bzSe6EslodNVT6no.roa
Signing time: Sat 01 Jan 2022 11:55:15 +0000
ROA not before: Sat 01 Jan 2022 11:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206192
IP address blocks: 185.93.249.0/24 maxlen: 24
185.193.4.0/23 maxlen: 23
185.193.6.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53067992 (0x329c0d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 1 11:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c35bac4106bfd9bd1bcd27ba12c96874d553ea7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:83:22:6d:ba:4b:f4:cb:8a:31:aa:d0:04:
eb:62:bc:c9:67:e4:89:77:c1:e4:e4:65:e4:56:19:
2b:30:32:61:98:f1:44:6d:0f:91:0d:d2:9e:52:9e:
eb:b3:f3:75:f9:fa:90:9a:78:98:3d:8e:bb:ea:bb:
b6:30:67:b6:44:8e:6b:a2:f6:65:8c:e5:0f:1f:a9:
11:51:39:53:02:6d:79:34:95:75:6c:2d:ae:48:56:
e9:48:35:4b:98:d0:ba:f5:ed:ca:e6:54:4b:08:6f:
60:0b:cf:05:e3:fd:e5:7d:d5:ac:31:d2:5f:27:03:
61:f3:61:d8:64:4e:a4:2b:e1:3f:f1:bc:7c:b1:ff:
a4:c3:57:b2:0f:49:fe:af:38:70:c5:df:58:25:16:
30:2d:66:3f:83:6f:79:bc:51:6d:d9:88:ef:b0:9d:
dc:d0:fd:ff:31:a0:2c:34:e9:7e:e4:36:38:75:1c:
63:ca:98:6d:da:cd:54:ae:c6:af:52:88:fe:70:1b:
4c:92:02:9f:f9:94:48:7a:28:50:fd:86:b1:6e:43:
77:6e:ab:b8:05:c6:fc:c6:34:57:6e:27:9a:92:60:
00:8c:ff:a1:79:fe:57:8c:54:66:61:4c:f4:e3:51:
bc:72:fa:38:e4:60:49:7e:a1:67:0d:e0:29:66:8a:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5B:AC:41:06:BF:D9:BD:1B:CD:27:BA:12:C9:68:74:D5:53:EA:7A
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/w1usQQa_2b0bzSe6EslodNVT6no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.249.0/24
185.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:d8:97:01:13:e0:2c:3a:15:db:c4:d2:91:03:f8:f3:df:87:
0d:ed:41:67:3e:72:1b:ed:b6:3b:32:bd:74:9b:95:b9:0e:e6:
80:8b:58:b9:8b:77:f2:06:91:27:91:a8:d4:74:a6:04:fb:3f:
3e:18:53:f2:91:cc:5f:a9:7b:ff:82:ac:26:72:62:c2:a9:6b:
ce:42:55:73:4c:30:e6:14:94:6c:c6:18:c3:18:c4:e1:e9:97:
99:41:8f:c1:87:70:70:a5:f3:46:1c:cb:cb:85:f1:12:10:8e:
f9:83:ec:f2:70:46:11:3b:b7:38:ff:46:b7:e2:3b:9f:d9:f5:
e7:f6:77:cf:b1:ad:2d:25:dc:38:72:13:f3:a4:8b:1d:3f:25:
06:dd:62:de:ee:54:98:05:c9:db:68:57:57:ea:ce:0c:b8:40:
4d:51:87:18:11:48:da:2e:58:1b:c3:ea:fe:7f:06:df:31:64:
c2:e6:24:52:3a:70:94:ea:56:12:43:41:67:96:83:09:70:84:
8f:3f:d0:f7:4d:20:0c:04:26:fd:51:e6:78:59:1a:3c:52:4d:
bd:cb:14:36:1f:cb:bc:38:f5:45:e4:9a:71:0f:1a:97:4e:b0:
60:6b:56:f0:95:4b:9f:68:74:a2:55:b3:56:bc:9c:a9:a2:f7:
b3:65:6b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:28 2023 by rpki-client on console-fra.rpki-client.org