Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DyPSJE88NdMb3bsBRcztAglrf6M.roa
File: DyPSJE88NdMb3bsBRcztAglrf6M.roa (raw, json)
Hash identifier: LIwRW1ob8+yeMZhH+F6VKhytt283GNpe103+3jQt1ak=
Subject key identifier: 0F:23:D2:24:4F:3C:35:D3:1B:DD:BB:01:45:CC:ED:02:09:6B:7F:A3
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E3B9FD0
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DyPSJE88NdMb3bsBRcztAglrf6M.roa
Signing time: Wed 20 Apr 2022 06:37:54 +0000
ROA not before: Wed 20 Apr 2022 06:37:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50691
IP address blocks: 109.236.249.0/24 maxlen: 24
213.128.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238788560 (0xe3b9fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f23d2244f3c35d31bddbb0145cced02096b7fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:f8:bf:cb:a7:4d:ad:d8:db:6d:27:f4:e3:
e3:61:b3:04:ec:2c:68:e1:ab:8f:ca:95:6c:3e:08:
89:41:72:ac:12:f0:28:02:dd:57:2b:3c:cf:b1:9b:
23:7f:c1:4a:a3:8e:5e:1d:24:80:24:67:ad:db:0a:
1e:0f:be:00:75:e8:b0:ec:24:b8:0b:8e:69:3d:bf:
e0:6a:fe:53:03:90:24:ef:28:f6:7d:09:70:6b:a9:
b8:1c:4d:63:a5:7b:41:a1:bf:3e:31:44:53:57:dc:
14:3d:b3:32:e2:36:ab:ed:3e:b8:7d:a9:da:3b:d9:
26:74:27:ca:d4:83:09:c3:5d:70:ad:7c:4a:90:6c:
df:03:d8:b1:8e:2f:ab:76:ff:00:5c:07:74:d3:8b:
3d:20:5c:f2:3b:f4:d8:8e:4b:7b:fb:8a:41:a8:5e:
37:71:e5:3c:14:09:27:68:34:87:e9:3c:9d:4e:1d:
2f:64:58:43:2f:96:ab:2b:18:f1:54:6c:b0:ba:cd:
7f:01:a1:8f:3e:f0:ab:be:7e:23:0b:f3:5b:97:0c:
9e:ec:ab:aa:d6:76:5f:b8:48:a8:53:30:08:19:b8:
cb:ae:16:2d:ab:c6:c5:2c:f2:23:d8:11:63:d2:c3:
b5:b4:3f:05:83:1a:48:dd:df:d0:03:35:3a:d1:80:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:D2:24:4F:3C:35:D3:1B:DD:BB:01:45:CC:ED:02:09:6B:7F:A3
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/DyPSJE88NdMb3bsBRcztAglrf6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.249.0/24
213.128.220.0/22
Signature Algorithm: sha256WithRSAEncryption
05:8d:40:bd:ba:b3:7b:a0:2d:6f:b6:68:66:a9:3d:82:fa:5f:
b3:ed:3a:3d:0a:03:12:d9:93:bc:78:9b:dc:13:81:a0:4b:b8:
71:1f:d8:0f:30:0c:25:d8:de:c1:46:88:e6:93:48:95:63:35:
1b:14:f7:8e:c0:6a:17:5c:ae:c5:56:f4:40:00:70:8a:69:5f:
ea:9a:c0:71:d1:61:24:f2:42:15:2f:1c:14:d9:7f:73:94:83:
5d:3a:a4:aa:a7:5a:0a:75:55:47:df:ff:65:a3:b5:09:36:09:
f5:f2:9a:4e:a2:3f:06:22:fd:6f:0c:e3:ad:1f:9d:35:82:34:
31:2f:06:2b:f3:5f:47:8e:5b:47:e9:0d:85:20:e5:d0:09:ba:
eb:83:c7:ce:0f:3e:b8:cd:e1:60:46:4d:49:b0:e7:f1:5a:86:
a8:fd:3d:c3:1c:b9:c4:04:91:f3:b2:f6:d6:05:68:79:57:6b:
a7:b5:5b:20:6b:cb:fb:1d:18:31:ef:ea:68:5e:6d:26:ca:f1:
14:51:03:85:ed:97:44:20:e7:5e:85:45:22:2a:95:f5:d6:22:
0a:90:49:7d:c5:30:a6:77:e8:1f:a6:4d:2b:5a:5b:b6:22:9c:
3c:c7:06:e2:be:34:3a:9e:ac:ce:3f:fe:c6:3e:46:bc:97:23:
d8:f6:cc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:54 2024 by rpki-client on console-fra.rpki-client.org