Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/Du1qVVKP22mBNGhjXgRoIeHDf3Q.roa
File: Du1qVVKP22mBNGhjXgRoIeHDf3Q.roa (raw, json)
Hash identifier: pwl0InOfx8LYhnOfQ9Y+pNCuDxGVqn8r3+Zco0R38Cs=
Subject key identifier: 0E:ED:6A:55:52:8F:DB:69:81:34:68:63:5E:04:68:21:E1:C3:7F:74
Certificate issuer: /CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Certificate serial: 021F6618
Authority key identifier: D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/Du1qVVKP22mBNGhjXgRoIeHDf3Q.roa
Signing time: Thu 21 Apr 2022 12:35:49 +0000
ROA not before: Thu 21 Apr 2022 12:35:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31543
IP address blocks: 94.198.136.0/21 maxlen: 24
176.121.56.0/22 maxlen: 24
176.104.224.0/20 maxlen: 24
83.218.160.0/19 maxlen: 24
2a00:15c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35612184 (0x21f6618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5dcde2125f04058ad4f478e178884142cf2dad0
Validity
Not Before: Apr 21 12:35:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0eed6a55528fdb69813468635e046821e1c37f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:5e:d2:a8:83:23:2b:c7:fc:dc:50:8d:f9:
a4:b8:cb:3b:32:c0:f7:a2:1d:66:9e:e4:82:e0:12:
d8:db:8f:6b:68:10:71:7e:3b:f3:19:c7:36:d2:8d:
8e:a1:01:4b:5b:71:0e:11:d9:4a:8f:91:16:b7:71:
6b:63:a0:db:0c:04:0e:14:1f:44:7c:b7:07:6c:14:
2c:9f:16:6d:bb:50:d9:83:c2:32:c9:7a:cf:87:f1:
5a:6c:41:86:77:92:2f:71:6c:21:0e:8a:9a:40:1d:
18:38:81:2c:ab:9e:7f:b9:9e:85:56:d8:d8:c7:34:
c4:37:6c:f3:26:8b:f2:71:02:ce:7c:75:01:25:e7:
6d:eb:21:c7:22:63:ea:d4:1a:dc:0c:f5:51:44:31:
41:65:17:fa:98:4a:00:32:62:dd:7e:11:69:9b:eb:
6f:19:55:54:a7:11:43:74:e4:b8:a4:9d:7b:d3:5c:
9a:2e:ab:6a:e5:dc:ff:98:36:ef:fb:62:28:0b:ed:
90:a6:bb:12:5d:fc:dd:ec:8b:77:15:84:f0:ca:ad:
2a:20:d3:1b:a1:c5:ff:8e:e0:01:88:84:4b:6c:94:
aa:e7:bc:96:7c:64:29:14:dc:a9:f7:3c:8a:b7:64:
96:82:ff:0f:1c:96:2a:e8:8c:e8:18:e3:e2:a0:45:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:ED:6A:55:52:8F:DB:69:81:34:68:63:5E:04:68:21:E1:C3:7F:74
X509v3 Authority Key Identifier:
keyid:D5:DC:DE:21:25:F0:40:58:AD:4F:47:8E:17:88:84:14:2C:F2:DA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dzeISXwQFitT0eOF4iEFCzy2tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/Du1qVVKP22mBNGhjXgRoIeHDf3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5915c8-003c-4d98-8243-cfdadbdc48ec/1/1dzeISXwQFitT0eOF4iEFCzy2tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.218.160.0/19
94.198.136.0/21
176.104.224.0/20
176.121.56.0/22
IPv6:
2a00:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:eb:31:b5:69:c8:e4:2e:91:d3:ef:91:6c:e9:40:74:3d:27:
6a:1d:cf:bc:48:90:eb:2e:b1:66:09:47:43:81:fa:0b:d1:45:
83:18:e9:1e:6d:f1:dd:52:f6:07:67:cd:ab:09:c3:b2:f1:b4:
79:ca:e8:cf:96:26:35:9c:ad:ce:4e:f1:fb:40:59:2c:5e:4c:
b9:3a:89:60:c2:02:d5:37:29:57:88:a3:71:5f:90:ba:30:5b:
cd:5b:5c:3b:c4:78:01:b6:06:8f:b1:e8:83:b8:86:d1:64:f3:
b6:96:af:b5:a6:d7:6b:0f:e0:a5:f9:6f:be:5a:1f:9b:a6:a7:
1f:8d:2a:14:d6:65:09:ab:dd:a7:00:6a:a2:89:2a:cf:11:39:
25:69:b9:76:6b:3d:93:2d:d3:15:73:5c:6b:08:3f:c8:b3:24:
03:60:91:03:73:b4:4b:5b:52:7a:d6:c5:71:c1:94:50:9f:b2:
6e:46:b1:af:6a:a7:83:33:24:97:e9:23:50:51:b1:75:ca:fe:
7f:d2:0b:d2:12:37:55:bc:d8:66:e2:2e:dd:23:f0:33:ad:e5:
fc:06:13:e5:91:36:ea:a4:18:5b:bd:31:34:b4:b7:4d:e0:66:
cc:a2:a7:bb:f9:07:bc:0f:ac:cf:cd:6c:16:5c:28:11:71:09:
33:6a:05:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:10 2024 by rpki-client on console-ams.rpki-client.org