Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/Dbc0eGoQX5bUeqPaPx7SOJfTee4.roa
File: Dbc0eGoQX5bUeqPaPx7SOJfTee4.roa (raw, json)
Hash identifier: jomlqgc69zzX2L9Qm71IxWckX7CHv189cXrm/TDA5mw=
Subject key identifier: 0D:B7:34:78:6A:10:5F:96:D4:7A:A3:DA:3F:1E:D2:38:97:D3:79:EE
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 0BF7CF91
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/Dbc0eGoQX5bUeqPaPx7SOJfTee4.roa
Signing time: Tue 11 Jan 2022 11:51:14 +0000
ROA not before: Tue 11 Jan 2022 11:51:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6805
IP address blocks: 89.204.128.0/19 maxlen: 19
89.204.136.0/21 maxlen: 21
89.204.144.0/21 maxlen: 21
89.204.152.0/21 maxlen: 21
89.204.153.0/24 maxlen: 24
185.98.140.0/22 maxlen: 22
82.113.96.0/20 maxlen: 20
82.113.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200789905 (0xbf7cf91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jan 11 11:51:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0db734786a105f96d47aa3da3f1ed23897d379ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:17:c5:8c:5a:c2:89:fd:d1:c8:dd:3f:f1:5c:
76:99:95:7f:2d:1b:8e:72:e3:46:d7:e6:02:98:a3:
22:a5:0a:da:2f:a5:45:7e:a9:76:87:16:6d:09:77:
70:5b:39:cc:f1:a9:03:79:46:c1:0a:37:69:b6:60:
e1:bb:fe:9d:f5:a4:23:2f:06:14:ac:ac:64:39:16:
5b:9d:c6:4f:7f:5f:84:fc:1f:c0:c8:7d:43:70:6a:
47:99:72:e1:7c:c8:50:d4:38:74:d7:85:83:19:12:
d5:5a:67:bb:a9:e9:69:3b:36:09:a6:39:4c:09:c3:
d5:f8:6a:e2:14:5d:2d:ca:f6:61:4a:01:42:bb:63:
c2:3a:f5:3e:39:13:28:ac:1f:d8:d2:99:63:d4:0d:
a6:a0:b9:2c:e2:44:c8:a1:be:bb:51:5d:fb:de:7d:
45:2a:f6:a8:bc:89:11:c3:d4:ac:db:c2:5f:5d:32:
90:70:79:5c:76:96:ab:6f:85:a4:79:0c:93:3b:09:
3a:a5:13:a6:b0:e4:76:93:2a:bd:30:c4:39:d3:3a:
70:06:bc:d5:61:ab:e9:0a:b7:cd:75:86:46:e2:e9:
3c:00:d3:17:b0:8d:f2:1c:4a:91:bf:ac:a1:8a:77:
21:e5:7b:1b:3b:2e:0e:54:7a:76:65:f6:d8:ec:a9:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:34:78:6A:10:5F:96:D4:7A:A3:DA:3F:1E:D2:38:97:D3:79:EE
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/Dbc0eGoQX5bUeqPaPx7SOJfTee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.113.96.0/19
89.204.128.0/19
185.98.140.0/22
Signature Algorithm: sha256WithRSAEncryption
35:0c:a5:d7:c0:cb:c7:2e:87:c7:17:c7:bb:69:97:51:dc:c5:
39:86:32:d0:1b:50:c0:d5:5a:f0:c1:08:12:20:73:9e:e0:0a:
78:b4:3c:b4:39:a2:63:ff:82:97:b8:c5:ea:a8:a3:26:b3:7e:
ed:4f:80:00:f5:a5:ee:47:63:a7:bb:60:2f:77:b7:8e:96:fb:
e6:36:1b:08:3f:24:df:0d:43:76:f5:e2:a7:8e:69:9e:92:3f:
d2:57:01:92:3e:01:11:f6:a9:ec:96:87:a3:11:0f:6a:66:ee:
03:7c:fd:80:c7:ac:b1:99:f2:a2:2d:d1:71:a7:53:53:89:1e:
db:f1:79:0c:9a:ee:b8:7e:d8:10:a3:b6:ed:2d:f6:6c:10:11:
f3:a8:c1:0b:7c:b9:9e:f3:55:bc:ce:c4:5a:26:e7:61:0d:f4:
b4:e3:f6:fa:c9:fa:01:78:35:ee:23:76:0f:f5:25:fa:19:37:
86:18:ce:07:63:75:8c:0c:b0:1d:05:fd:15:9d:56:2e:b1:2a:
34:11:36:36:51:41:14:4d:36:58:a0:c7:99:87:2d:8e:7d:e3:
a9:d1:d0:c8:a8:64:ea:65:8f:b9:26:a6:f4:f4:85:4f:b5:59:
ff:d3:e5:6f:58:8f:26:63:be:61:bc:76:50:44:8c:84:d7:c1:
20:a4:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:35 2024 by rpki-client on console-ams.rpki-client.org