Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/DsmRPdykSfNCCvPeHB5hdaPTkWg.roa
File: DsmRPdykSfNCCvPeHB5hdaPTkWg.roa (raw, json)
Hash identifier: p8R3wt7oRI/Ifq6q9ZKOrOCnDMHvo8VKTMEf9TSm4zk=
Subject key identifier: 0E:C9:91:3D:DC:A4:49:F3:42:0A:F3:DE:1C:1E:61:75:A3:D3:91:68
Certificate issuer: /CN=2e1620890f700f012b0ba60172314e3c85919513
Certificate serial: 301C52FD
Authority key identifier: 2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/DsmRPdykSfNCCvPeHB5hdaPTkWg.roa
Signing time: Sat 01 Jan 2022 10:56:43 +0000
ROA not before: Sat 01 Jan 2022 10:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24634
IP address blocks: 212.28.224.0/19 maxlen: 24
80.81.144.0/20 maxlen: 24
195.112.192.0/19 maxlen: 24
92.62.160.0/20 maxlen: 24
141.105.80.0/20 maxlen: 24
185.3.20.0/22 maxlen: 24
2a00:16e8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807162621 (0x301c52fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1620890f700f012b0ba60172314e3c85919513
Validity
Not Before: Jan 1 10:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ec9913ddca449f3420af3de1c1e6175a3d39168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:32:ac:5f:e8:23:31:58:1f:5e:8f:12:ce:76:
6b:5f:61:dd:40:5a:49:b0:6e:d1:f8:0e:26:f7:a4:
2b:a0:42:7b:40:20:7f:4a:89:cb:d9:8d:52:98:e7:
32:68:20:7e:39:a9:74:1e:4e:e8:31:b0:03:5c:35:
62:9c:ac:69:88:c5:30:5c:b5:56:32:0e:a3:10:ef:
e6:54:6e:04:1a:96:41:6b:9d:28:e7:93:22:b2:59:
40:43:b7:b8:b7:ce:6b:18:9d:98:57:12:b9:2b:a7:
ff:30:56:31:2b:bc:a3:df:54:66:fe:1d:f9:91:ab:
68:f1:20:f0:81:5d:41:8c:ee:5c:4a:45:20:55:3e:
e9:b1:48:3a:7e:d8:b7:de:ea:8d:f9:d5:29:f4:64:
7e:5f:fa:58:8a:5f:83:6a:a8:22:c2:cb:b9:c3:0e:
eb:6d:ac:c8:0f:3e:59:aa:9b:5a:77:92:3a:34:0d:
d1:55:a9:58:2d:86:14:9d:d1:ef:06:8b:12:bb:e3:
6a:1e:49:e7:86:c3:25:a1:22:0e:1e:3b:4a:ff:06:
27:9b:59:07:d7:68:58:57:43:6e:d2:06:0a:a2:7b:
0c:28:bb:82:17:57:35:2b:fa:56:c5:65:a4:b3:5b:
d2:a0:0c:1b:0f:95:ee:7a:ff:5d:e9:a0:50:86:1a:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C9:91:3D:DC:A4:49:F3:42:0A:F3:DE:1C:1E:61:75:A3:D3:91:68
X509v3 Authority Key Identifier:
keyid:2E:16:20:89:0F:70:0F:01:2B:0B:A6:01:72:31:4E:3C:85:91:95:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhYgiQ9wDwErC6YBcjFOPIWRlRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/DsmRPdykSfNCCvPeHB5hdaPTkWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/821152-9f13-4c09-9dcd-45bbb23a15d8/1/LhYgiQ9wDwErC6YBcjFOPIWRlRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.144.0/20
92.62.160.0/20
141.105.80.0/20
185.3.20.0/22
195.112.192.0/19
212.28.224.0/19
IPv6:
2a00:16e8::/32
Signature Algorithm: sha256WithRSAEncryption
43:2e:69:88:d9:31:0f:7d:a8:6e:3a:0a:48:2c:ba:55:e4:ea:
d0:48:76:9d:c8:dd:17:88:dd:a1:ec:6d:08:cd:b0:00:bb:f6:
30:80:73:f6:47:86:2a:d3:cf:4f:3d:51:69:1c:66:83:01:8e:
8e:81:55:55:c0:61:22:d3:51:78:01:0a:82:83:64:c8:23:9d:
fb:31:1a:d9:6c:47:97:6b:7c:c9:d2:a2:c0:ae:eb:7e:8a:bc:
90:6c:62:f3:a0:5f:93:0f:9d:a6:b5:ea:4b:12:41:45:1e:2c:
ab:00:7e:0d:ce:1c:8c:16:2a:e2:fc:05:89:b1:01:62:6b:1d:
50:47:2e:c6:31:f0:2d:a6:d4:09:e8:15:36:dc:13:a8:90:9c:
74:d6:b7:37:bb:82:84:0d:ea:37:80:a8:69:bc:08:11:21:c7:
33:d3:7d:cd:03:74:3b:6f:4e:2b:f0:d9:64:b1:2e:3c:04:87:
37:cc:bf:9e:f9:06:34:05:18:cd:bb:00:b9:97:a1:30:b2:86:
10:59:1a:4e:1b:09:ba:1d:c7:f8:3d:c2:20:98:42:44:bb:23:
a9:86:70:29:28:c5:89:90:6d:b9:5b:dc:0a:8c:84:d8:6b:77:
3d:87:d7:48:f7:ba:71:0a:a1:64:ec:43:47:ef:9b:d4:96:4c:
1c:6a:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:50 2024 by rpki-client on console-fra.rpki-client.org