Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/DKe6VAmQ5qRU_H-ZZ3CDg4UG1EI.roa
File: DKe6VAmQ5qRU_H-ZZ3CDg4UG1EI.roa (raw, json)
Hash identifier: 2uivpbrd3TMXTWmywITf3T5Q3SlgmW2D4z9Jk0dn0uw=
Subject key identifier: 0C:A7:BA:54:09:90:E6:A4:54:FC:7F:99:67:70:83:83:85:06:D4:42
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 0184F61102C7DF13F2B5EB7173186F670444
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/DKe6VAmQ5qRU_H-ZZ3CDg4UG1EI.roa
Signing time: Fri 09 Dec 2022 08:47:00 +0000
ROA not before: Fri 09 Dec 2022 08:47:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12796
IP address blocks: 94.190.136.0/21 maxlen: 21
94.190.160.0/19 maxlen: 19
192.109.10.0/23 maxlen: 24
94.190.192.0/23 maxlen: 23
94.190.194.0/24 maxlen: 24
192.109.40.0/23 maxlen: 24
94.190.128.0/22 maxlen: 22
94.190.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:11:02:c7:df:13:f2:b5:eb:71:73:18:6f:67:04:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Dec 9 08:47:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ca7ba540990e6a454fc7f99677083838506d442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:ec:68:61:39:ed:bb:7a:94:f3:68:d4:0c:
8a:8d:69:97:77:d8:12:4d:83:8d:48:c8:25:e1:cf:
f9:f7:00:b5:bf:23:3f:d9:72:fa:e0:92:5d:26:ba:
2d:f2:b7:e0:54:09:f2:e7:a7:13:84:eb:42:1a:0c:
28:31:6a:10:09:02:ea:48:61:a9:49:c2:72:f4:26:
f3:16:1d:74:c3:0a:f3:12:69:6f:30:b9:e4:ca:bd:
7f:12:19:e4:76:56:b1:a1:23:28:b6:e6:0d:53:cb:
8c:37:6c:1c:f8:6d:b6:29:00:72:37:cb:26:f0:a1:
3b:08:ae:86:99:f9:32:b9:96:cb:f9:f6:33:39:72:
7e:d4:7f:22:7b:b4:b5:5b:f4:e0:d7:ae:85:4d:34:
7f:a1:e2:39:8d:29:4f:0c:43:84:9b:48:f0:24:4e:
a8:1a:0c:70:85:f3:db:4d:cb:af:d2:00:08:97:49:
d0:44:d5:fd:01:c9:51:7a:05:c0:01:17:43:8c:99:
fa:bc:ed:03:25:26:cb:d0:17:64:52:7d:a6:d6:ab:
c5:67:9d:c2:a8:dd:0b:a1:2c:e0:69:c4:c6:fc:01:
2d:d8:6a:fe:1b:83:37:78:0c:6f:9c:2c:1c:f0:65:
ff:ae:35:c8:0d:0c:27:0d:26:9e:5a:a2:1f:56:3d:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A7:BA:54:09:90:E6:A4:54:FC:7F:99:67:70:83:83:85:06:D4:42
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/DKe6VAmQ5qRU_H-ZZ3CDg4UG1EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/20
94.190.160.0-94.190.194.255
192.109.10.0/23
192.109.40.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:24:d0:e0:90:1d:45:13:b8:25:7d:8a:79:de:17:92:2f:ac:
51:f5:f1:05:e8:98:07:31:43:9d:6e:ac:c5:72:21:5b:76:51:
30:af:0e:fa:bb:aa:64:15:c8:ee:25:7a:42:cd:ed:52:9a:a0:
2d:4b:97:23:ba:91:f3:e4:37:00:cb:68:d1:c0:0b:11:ae:55:
c3:b3:36:50:85:d9:82:1e:88:c8:03:ca:46:d4:f4:4d:4d:31:
ae:b0:b8:ef:8d:ee:60:36:33:95:31:54:29:62:55:d8:64:4e:
26:5d:99:33:88:f7:43:4d:54:bd:74:ff:c8:33:e5:0e:1a:6c:
96:ec:2d:4e:9d:fa:14:cd:99:a8:53:cc:b9:9d:00:45:12:a2:
93:10:34:59:58:f8:2d:c7:eb:6a:f7:c5:76:83:a1:34:5a:7b:
7a:d5:0a:5c:4f:88:fc:0e:00:cd:7a:a4:29:52:09:c4:18:58:
6c:7d:bf:1b:10:d0:c4:16:06:8b:88:9f:68:42:da:8e:c1:d1:
ff:98:c2:01:de:43:0e:06:62:af:5b:a2:42:1d:1c:92:1e:65:
39:16:f4:9f:e3:8a:4a:c9:9f:1a:f5:50:76:a9:fa:dc:6f:9e:
59:8b:fe:0b:20:c6:6e:a4:d4:7a:24:89:73:79:2d:f5:78:76:
8a:28:8c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:53 2024 by rpki-client on console-fra.rpki-client.org