Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/d2WXP-PMvNDA5jRb1djM5DjDG0Y.roa
File: d2WXP-PMvNDA5jRb1djM5DjDG0Y.roa (raw, json)
Hash identifier: yml369fnsbEmV0uDHvLNOtNS2yWuKbsXeLEAFSB0oNc=
Subject key identifier: 77:65:97:3F:E3:CC:BC:D0:C0:E6:34:5B:D5:D8:CC:E4:38:C3:1B:46
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 0C9DAE36
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/d2WXP-PMvNDA5jRb1djM5DjDG0Y.roa
Signing time: Sat 01 Jan 2022 05:01:07 +0000
ROA not before: Sat 01 Jan 2022 05:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205451
IP address blocks: 195.47.232.0/24 maxlen: 24
185.117.112.0/22 maxlen: 22
2a0c:3180::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211660342 (0xc9dae36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Jan 1 05:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7765973fe3ccbcd0c0e6345bd5d8cce438c31b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:1d:e3:3b:fa:57:b8:8a:2e:a8:56:6e:1c:
bc:79:ed:b4:96:b9:5a:84:1a:b4:4d:47:a2:a8:7b:
b2:39:9f:01:c0:7f:82:92:9e:7e:8d:71:67:2b:98:
56:96:b0:3c:c3:12:ac:9f:25:92:ea:57:e5:4c:f5:
ba:f3:82:40:c4:59:ba:30:18:e2:61:4c:42:7f:3c:
b0:a0:ff:8c:4d:0d:0a:9e:78:a0:71:3c:5d:3f:9c:
2c:d3:3d:fa:f6:51:ef:96:8b:8e:6a:bd:18:4f:c8:
61:67:3b:dd:eb:04:3b:b1:ba:8d:72:a2:50:44:2b:
65:9c:3e:4e:77:0c:56:37:41:5c:a1:83:86:48:c2:
f9:48:c0:5f:73:74:df:60:b7:ea:bc:d9:ef:40:e6:
77:6d:49:1b:85:5e:bf:42:33:e1:0a:42:e8:7f:4a:
82:dc:d3:e4:de:12:cd:81:87:43:e2:b0:cf:be:8e:
34:85:9a:b3:0c:5e:70:37:a1:7e:b3:44:d6:f4:2a:
3c:47:d0:7d:13:5c:c6:7e:24:2b:09:17:9d:c6:21:
8a:40:7c:00:36:6d:45:18:56:90:60:8a:bb:25:ab:
8a:fb:ea:e2:75:7e:92:1a:c1:a0:a1:84:4c:5b:99:
b9:72:5c:db:4b:b8:f3:a1:3e:52:45:f4:36:69:5c:
a5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:97:3F:E3:CC:BC:D0:C0:E6:34:5B:D5:D8:CC:E4:38:C3:1B:46
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/d2WXP-PMvNDA5jRb1djM5DjDG0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.112.0/22
195.47.232.0/24
IPv6:
2a0c:3180::/32
Signature Algorithm: sha256WithRSAEncryption
11:66:46:75:bf:92:79:d6:ff:85:24:e8:ba:ee:74:a8:6e:78:
14:14:7a:85:95:41:6b:54:87:e1:c4:a1:65:b4:8c:4e:68:e3:
53:6f:12:a9:e8:02:b6:0f:46:b3:c3:bf:3e:73:d1:51:2d:00:
23:00:38:95:cc:6f:6e:30:cc:3d:3a:26:57:e0:bc:44:81:98:
f2:10:50:75:24:d2:ca:79:a8:cf:98:a9:a8:97:35:d4:fa:28:
97:06:aa:d3:f4:2a:6e:03:57:c7:48:a8:1a:8d:10:ee:47:b7:
a3:26:6b:20:e3:53:16:c5:97:0e:ba:4a:5a:82:de:76:90:c8:
d7:43:72:46:ca:4c:cb:d3:8b:0b:dc:2d:8a:47:59:8a:c4:04:
a4:c7:51:7d:04:ee:2a:21:ce:ce:f5:42:0b:dd:fc:28:a4:06:
14:6c:3a:40:aa:69:1b:f1:86:5a:76:9b:29:7a:6a:e5:40:bd:
20:76:98:53:e2:27:3a:0a:27:f1:fc:d5:c3:3e:5c:4d:06:90:
e7:60:51:a2:7d:d9:e7:cc:68:a1:ae:50:91:18:14:cb:0f:d7:
cf:9d:f0:cf:e7:1b:38:c1:5a:55:cc:77:b4:e6:02:25:16:2c:
db:59:d7:12:bc:15:9d:3e:cd:d3:a4:a1:0b:be:18:c5:40:b4:
a6:1c:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:03 2024 by rpki-client on console-fra.rpki-client.org