Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DPa8we8MsMvO0AnsJMcfRuPvS48.roa
File: DPa8we8MsMvO0AnsJMcfRuPvS48.roa (raw, json)
Hash identifier: 664oWXB5oP6ksBApKyJLYBimrlnsvqqJdfoD5C2OVpg=
Subject key identifier: 0C:F6:BC:C1:EF:0C:B0:CB:CE:D0:09:EC:24:C7:1F:46:E3:EF:4B:8F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01846790F61DAE1A7B4620FF0E1857A6F6F1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DPa8we8MsMvO0AnsJMcfRuPvS48.roa
Signing time: Fri 11 Nov 2022 16:41:04 +0000
ROA not before: Fri 11 Nov 2022 16:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 185.216.68.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
193.58.122.0/24 maxlen: 24
193.42.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:90:f6:1d:ae:1a:7b:46:20:ff:0e:18:57:a6:f6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 11 16:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cf6bcc1ef0cb0cbced009ec24c71f46e3ef4b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:c1:2f:eb:9c:4e:a6:9d:03:0f:62:21:af:
01:7d:ea:7c:ad:9c:af:92:21:31:1e:4e:8b:1e:40:
4c:be:90:43:2e:02:94:46:35:70:6f:f0:23:22:c4:
5d:84:38:cf:34:ac:b3:30:a3:f6:48:92:8b:64:c0:
6e:7e:b1:c0:e9:a5:73:78:fe:ad:63:c9:05:3f:f8:
f1:70:bb:4a:0d:bd:5c:00:60:d6:f0:db:58:bc:80:
a8:78:a3:fc:81:75:f0:6e:2d:12:01:ab:31:f6:9b:
b3:47:bb:e5:40:90:2b:10:52:a6:d5:a6:40:89:41:
45:f3:9c:38:81:ae:fb:e3:17:a5:c4:f4:0e:eb:52:
5b:d4:b2:66:06:6b:0b:9f:71:ae:f4:47:e3:1f:a8:
d1:9c:92:e3:0f:e8:d3:8b:c3:05:93:fb:a6:f6:a8:
8e:79:99:57:10:c9:7d:fc:61:95:21:d8:03:80:6f:
c5:35:93:a8:c2:5c:03:01:79:4b:61:92:59:ea:e8:
04:e8:3e:69:13:ae:78:30:08:7e:3d:66:b7:dc:db:
a7:e5:5e:ea:a6:20:18:1a:b9:0b:72:9b:0a:5b:fb:
e9:1a:4e:91:9a:f3:87:c5:f8:bd:4d:68:d3:06:82:
b2:3e:df:7c:62:21:b6:da:85:f7:9f:e2:e3:8f:6e:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:BC:C1:EF:0C:B0:CB:CE:D0:09:EC:24:C7:1F:46:E3:EF:4B:8F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DPa8we8MsMvO0AnsJMcfRuPvS48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.51.0/24
185.216.68.0/24
193.42.33.0/24
193.58.122.0/24
Signature Algorithm: sha256WithRSAEncryption
64:64:58:1e:30:9e:48:0e:63:b5:d9:2e:41:d7:ab:1a:83:18:
90:a3:de:7c:7b:2e:de:f1:38:b9:52:36:0e:89:c7:7e:b4:c8:
5f:30:12:b7:d4:4c:9e:8a:c4:89:8f:f9:ab:54:e2:84:da:6d:
32:97:93:65:83:21:35:32:03:4e:74:01:63:f8:09:bb:38:32:
8c:fe:d1:a3:31:22:69:5c:44:82:4b:ad:79:20:76:75:d2:b6:
5e:29:a1:86:f3:90:9e:44:70:f4:0e:03:36:76:bb:65:69:77:
20:f7:32:59:9e:79:5a:e5:cb:4b:2d:5e:21:40:31:e1:a4:85:
1d:f0:29:42:d2:46:66:5e:a9:f7:2c:09:45:50:c9:15:0e:19:
37:03:58:44:6e:8b:9a:84:5c:21:f7:bb:c6:56:f5:53:2e:19:
25:5e:5f:e7:12:ce:b5:62:1f:8d:0a:ea:20:6c:32:5a:cb:9a:
20:7c:76:95:31:03:25:e1:fe:33:06:9a:6d:63:de:c4:5b:97:
b5:7a:d2:7b:54:e8:4a:7d:97:df:a9:c0:2e:e2:f6:90:34:fe:
1a:74:75:1a:f4:64:0f:6d:6b:16:56:89:c2:3b:85:df:e4:ac:
65:c0:00:9e:35:fb:21:e3:dc:2a:00:18:cc:9b:32:6c:d7:cb:
9b:56:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org