Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/DyuMHm7u-en_YqXdAXkryQhqXrY.roa
File: DyuMHm7u-en_YqXdAXkryQhqXrY.roa (raw, json)
Hash identifier: PIHYYjEFdTYHtTgoxpDSsSCZ84sKZF5VNArOAzScgsU=
Subject key identifier: 0F:2B:8C:1E:6E:EE:F9:E9:FF:62:A5:DD:01:79:2B:C9:08:6A:5E:B6
Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial: 020957
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/DyuMHm7u-en_YqXdAXkryQhqXrY.roa
Signing time: Tue 08 Feb 2022 22:13:58 +0000
ROA not before: Tue 08 Feb 2022 22:13:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203622
IP address blocks: 185.26.187.0/24 maxlen: 24
37.18.58.0/24 maxlen: 24
185.129.1.0/24 maxlen: 24
185.129.3.0/24 maxlen: 24
185.129.0.0/24 maxlen: 24
185.129.2.0/24 maxlen: 24
185.26.186.0/24 maxlen: 24
185.26.185.0/24 maxlen: 24
185.26.184.0/24 maxlen: 24
2a0f:7040::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133463 (0x20957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
Validity
Not Before: Feb 8 22:13:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f2b8c1e6eeef9e9ff62a5dd01792bc9086a5eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:74:99:07:81:b3:62:81:44:c7:d1:fa:2e:
a5:b9:d7:b7:f0:e4:6d:9d:dc:39:d8:44:df:39:19:
0d:62:dc:9c:a8:62:85:0d:ad:65:c5:1c:17:8e:4a:
0f:d0:f6:b0:5e:3a:f6:d2:27:08:19:8d:57:8e:46:
5d:52:02:7e:a3:5f:f7:32:ab:1e:14:e3:86:48:f9:
53:84:fe:23:2d:f6:8c:70:d8:e0:d2:c2:9f:17:e9:
50:04:69:ed:c7:1d:be:dc:1e:06:c5:a0:33:c2:c5:
35:8b:6a:b1:4e:78:57:c0:a1:2a:ac:28:19:85:7f:
5f:9e:ba:2e:27:5a:3c:1e:fd:bf:d3:ed:bc:52:c8:
24:59:80:ce:b5:a4:4c:df:62:19:c9:1b:9c:91:56:
ce:98:98:b5:d8:08:73:b8:f8:3a:04:ec:3d:08:45:
b8:96:28:d3:e6:b8:89:4c:fd:2a:8a:18:d5:ff:19:
9f:e1:45:94:72:59:57:59:94:57:a1:4f:d1:74:db:
a1:10:6d:4f:cb:0a:b1:13:f8:5d:27:41:c4:e0:ce:
4c:96:03:17:16:59:b0:0a:e2:34:79:cf:48:12:94:
12:f3:a6:db:76:40:8e:b8:97:69:b1:60:66:a7:e8:
a2:5a:85:10:9c:46:7b:5f:a3:d9:bd:b9:1d:5a:13:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2B:8C:1E:6E:EE:F9:E9:FF:62:A5:DD:01:79:2B:C9:08:6A:5E:B6
X509v3 Authority Key Identifier:
keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/DyuMHm7u-en_YqXdAXkryQhqXrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.58.0/24
185.26.184.0/22
185.129.0.0/22
IPv6:
2a0f:7040::/32
Signature Algorithm: sha256WithRSAEncryption
9a:63:34:c0:3b:83:b3:23:26:ae:65:e7:e6:84:cc:e6:d7:75:
4a:d7:b3:e9:6e:d7:4c:2c:f1:7e:d6:95:a3:ea:4b:2e:7b:cf:
f6:90:db:3b:e3:18:dc:bc:f8:d7:4d:a4:13:b5:be:fb:3f:3c:
1f:62:38:38:70:5e:0b:dd:4b:1e:18:38:7e:55:10:53:ca:be:
14:78:32:7e:4e:34:17:ca:b6:95:90:af:39:f1:50:d3:6f:b0:
42:93:71:60:ee:e2:40:81:43:02:86:81:02:79:da:ec:dd:00:
90:f4:c9:20:42:91:85:32:e6:f1:57:1c:a1:4d:1d:e0:2e:a1:
ea:4c:4c:c6:3b:64:62:d1:ed:eb:0d:d2:39:06:4e:fd:82:8d:
41:64:cf:4a:17:86:54:d2:0c:a0:a2:09:45:8c:e0:15:af:56:
af:51:4c:27:64:9e:91:bf:a6:5b:20:c8:76:c4:a5:91:63:e1:
84:21:30:4f:64:45:ae:8b:01:d2:d7:26:c2:04:6d:b0:04:d1:
b1:b2:7c:65:13:ab:dd:2e:3a:21:26:22:9a:5e:04:30:c0:65:
11:7a:e4:a0:88:f3:73:cd:94:a8:70:b0:b9:20:2a:69:0b:a6:
25:5c:98:dd:e4:71:d3:a5:a0:c7:ee:a4:70:5e:53:8e:47:d4:
e9:3b:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org