Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dLW_dvacvLQeWeWpy_lZi9_eBQM.roa
File: dLW_dvacvLQeWeWpy_lZi9_eBQM.roa (raw, json)
Hash identifier: 8XpVIuY3Mx4wHBZRN+tnpr8y/fPzPvSyhRgprQrJ3vY=
Subject key identifier: 74:B5:BF:76:F6:9C:BC:B4:1E:59:E5:A9:CB:F9:59:8B:DF:DE:05:03
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 017F71E2
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dLW_dvacvLQeWeWpy_lZi9_eBQM.roa
Signing time: Sat 01 Jan 2022 15:57:47 +0000
ROA not before: Sat 01 Jan 2022 15:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 194.113.239.0/24 maxlen: 24
185.221.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25129442 (0x17f71e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 15:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74b5bf76f69cbcb41e59e5a9cbf9598bdfde0503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:f3:6d:e6:10:71:0b:83:67:51:a0:3c:55:
9d:50:cb:f6:e3:5a:89:ef:91:01:0a:00:67:b5:75:
23:a0:79:79:5a:49:b4:4c:ad:a4:b5:e8:aa:60:ed:
81:23:8c:19:e6:0b:f5:7d:69:88:95:ea:32:91:04:
12:fe:84:a2:27:59:8f:7c:99:f6:55:42:2e:60:17:
c2:c0:cd:18:bd:4d:f0:5b:15:e3:e2:45:00:80:5f:
d8:6a:5b:7f:30:ff:3e:b4:32:89:4c:9e:9b:6a:8f:
cb:e0:6e:13:5e:ee:33:19:1d:1e:5e:24:f7:53:89:
e4:59:ad:aa:b2:37:7f:0f:be:08:f0:c2:e4:62:cb:
57:5d:e5:5e:9d:cf:0f:19:fc:3f:41:e4:a7:b9:6b:
be:e5:d4:0a:44:71:42:c3:bf:55:c5:11:77:d4:3a:
32:8c:ec:52:6d:5a:4b:2d:e4:65:be:64:ea:11:31:
40:06:25:b4:46:4d:bd:21:47:40:7a:e0:82:23:4e:
91:9e:b7:ec:55:6b:50:48:a6:27:b9:3a:c2:b6:03:
7b:00:91:1d:9b:ab:1e:9a:9a:90:f1:a7:11:a3:3d:
b8:dd:48:e5:ab:a6:18:bd:01:e9:17:5b:72:e1:d3:
fa:aa:89:16:c0:8a:dd:06:eb:87:28:60:2d:77:c8:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B5:BF:76:F6:9C:BC:B4:1E:59:E5:A9:CB:F9:59:8B:DF:DE:05:03
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/dLW_dvacvLQeWeWpy_lZi9_eBQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.196.0/23
194.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:41:e0:3a:66:58:42:1a:a0:1e:f4:ee:58:aa:c8:69:12:6b:
4b:22:98:c2:3b:96:a7:52:58:74:22:b7:f7:43:eb:fd:34:24:
4b:53:3c:5e:3b:01:6f:31:6d:23:0f:3b:ba:4d:f0:1b:0b:88:
79:cb:1e:6d:35:7a:d3:d6:8e:dd:53:bd:e0:f5:11:f1:89:8c:
66:b5:35:3a:a7:ba:2b:b2:68:f6:5f:5c:81:cb:03:9a:8f:5b:
ac:11:3b:e6:77:ef:13:66:f9:d0:90:63:96:60:12:b6:fb:61:
19:aa:30:7b:33:a3:89:00:93:8a:e1:9d:ee:21:3e:f1:54:46:
4a:f3:7b:5e:72:a1:49:1e:c1:51:8f:8b:b7:db:22:aa:61:0e:
d7:c1:36:e7:ae:30:ee:96:0b:e2:74:ac:14:be:d4:b9:4e:74:
10:5d:f3:37:70:4d:85:4b:b2:16:b7:ef:0a:d4:63:32:2e:03:
7a:ee:e0:60:4b:1c:68:99:de:29:2f:d9:f4:8d:4c:77:48:39:
94:57:17:e8:d3:23:68:9c:0d:a2:88:18:c7:94:4e:5d:cf:f6:
94:ba:3d:12:ef:30:95:5f:58:16:cc:dd:b6:da:31:e8:e7:e7:
3c:aa:63:dc:90:a9:0a:0a:df:26:ba:f0:69:68:f6:9e:f4:28:
c6:f2:da:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org