Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DJREYPzfDvhzh9VYJKsJ601wQYk.roa
File: DJREYPzfDvhzh9VYJKsJ601wQYk.roa (raw, json)
Hash identifier: xwMuN69OYaq47FltTRc/r0fb93p55P0GhLXy5E/xFlM=
Subject key identifier: 0C:94:44:60:FC:DF:0E:F8:73:87:D5:58:24:AB:09:EB:4D:70:41:89
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018409F0A8007D57D85B46C795D363BE5978
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DJREYPzfDvhzh9VYJKsJ601wQYk.roa
Signing time: Mon 24 Oct 2022 12:21:17 +0000
ROA not before: Mon 24 Oct 2022 12:21:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202557
IP address blocks: 31.145.140.0/24 maxlen: 24
212.98.242.0/24 maxlen: 24
84.44.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:f0:a8:00:7d:57:d8:5b:46:c7:95:d3:63:be:59:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Oct 24 12:21:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c944460fcdf0ef87387d55824ab09eb4d704189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:a5:99:06:e9:e6:ca:86:86:cd:a3:3a:9f:
ea:3f:e8:eb:ad:4d:9f:87:08:db:9a:5e:ea:28:b1:
72:68:f7:e3:9e:9a:7c:54:8a:db:bf:b6:6f:c1:9b:
31:8a:48:58:f4:f5:76:79:6e:27:8b:f2:05:2d:c2:
0d:96:2c:03:b0:20:96:87:4c:dc:fc:a9:91:00:c8:
00:f8:ac:70:b6:4b:8a:64:f0:37:81:89:2f:9d:37:
51:0a:54:8d:8d:e6:b6:8b:c8:55:8e:44:54:c0:51:
b0:aa:6f:3c:0b:74:21:53:a7:04:7d:c1:dd:57:27:
6f:9c:7c:24:45:3b:b0:c5:d5:18:ab:02:c9:4e:34:
37:cb:f4:86:76:86:d6:06:9c:45:f8:6a:74:cd:f7:
49:8f:2f:39:a1:d5:42:41:45:23:79:c3:98:c8:5c:
5d:cd:9b:5c:7f:55:18:f1:e4:11:12:d1:8f:3a:d0:
62:2e:17:de:78:75:29:cc:1d:66:5a:c5:60:30:25:
de:d0:80:7f:cb:43:58:dc:8e:2e:ef:69:ac:42:ed:
d3:2c:7d:6d:48:b1:b6:93:77:75:e9:d7:08:f0:d7:
da:80:cb:5a:6d:25:46:85:fe:07:cc:76:3c:19:da:
d8:df:77:44:09:66:51:1c:64:d9:f2:a3:3c:26:d2:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:44:60:FC:DF:0E:F8:73:87:D5:58:24:AB:09:EB:4D:70:41:89
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/DJREYPzfDvhzh9VYJKsJ601wQYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.140.0/24
84.44.70.0/24
212.98.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fb:7a:cd:ea:9c:63:c4:20:5e:ff:9b:cf:7f:30:37:95:51:
0a:ff:2b:bf:ed:0b:3d:df:3a:a8:8c:31:9d:69:98:5c:98:57:
37:fc:c7:f3:6d:38:cf:2c:75:00:5c:e3:35:0f:d9:80:8c:e0:
e3:67:86:9a:20:0a:fa:cb:96:69:bd:f8:8e:48:52:6a:c7:86:
32:16:0b:6f:8f:0a:0e:f8:f0:d6:31:9f:f8:eb:de:e5:f9:17:
c9:d5:b2:cd:a0:4e:ca:95:af:76:f1:d3:9e:86:40:5d:6b:87:
5f:fa:6d:9b:d8:1d:e1:1e:0b:9b:46:33:77:51:4a:23:13:9a:
39:3e:d7:0c:f5:9d:e0:c9:4a:3b:1e:ca:71:52:5d:87:61:85:
ee:c0:a8:25:c8:f1:9d:2e:c7:1c:91:f6:29:50:23:39:a8:88:
2b:4b:dd:eb:70:6a:5d:07:0a:54:ee:f5:65:09:4f:a3:1f:78:
37:ab:26:05:ad:1a:22:b9:63:e1:86:0b:5f:14:9b:de:58:dc:
88:4d:7b:2d:0b:20:4d:82:92:c8:71:e5:9c:66:47:bb:67:fc:
79:6e:cc:26:c2:9d:72:1a:db:b6:88:eb:8b:85:0a:f0:11:6c:
38:1b:a2:74:31:18:af:17:b6:64:b6:fc:9b:b5:2e:50:b8:4b:
22:6f:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org