Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/dpcGnFrS3kuCRjOyLuF7Pq7Mcsk.roa
File: dpcGnFrS3kuCRjOyLuF7Pq7Mcsk.roa (raw, json)
Hash identifier: a2MmqzHe3mTzQnFRkL3XY4EqIubLesV2apO0DhH5n0s=
Subject key identifier: 76:97:06:9C:5A:D2:DE:4B:82:46:33:B2:2E:E1:7B:3E:AE:CC:72:C9
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 030E0AE2
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/dpcGnFrS3kuCRjOyLuF7Pq7Mcsk.roa
Signing time: Sat 01 Jan 2022 15:07:10 +0000
ROA not before: Sat 01 Jan 2022 15:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 185.126.34.0/24 maxlen: 24
185.28.37.0/24 maxlen: 24
185.28.39.0/24 maxlen: 24
2a10:1440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51251938 (0x30e0ae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Jan 1 15:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7697069c5ad2de4b824633b22ee17b3eaecc72c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fd:11:63:8b:dd:1c:31:55:f2:22:ba:d3:73:
36:c6:9c:e4:b2:1b:da:78:f6:e9:e8:cc:f2:b5:f9:
dc:16:11:1d:41:35:5b:e0:cb:6c:3b:f2:39:d0:0f:
3b:22:d2:da:a8:c4:e8:de:af:a5:90:71:f5:76:b3:
b7:d9:8b:c0:07:d6:1e:99:05:03:25:8f:20:33:65:
38:cd:98:c2:70:5b:77:f1:79:26:54:54:56:42:8e:
f1:e2:10:13:3a:4f:bb:2d:81:e6:6b:eb:2c:24:e8:
5e:23:df:35:ee:4e:8f:30:37:aa:aa:a1:64:10:27:
b2:eb:bd:2e:bc:71:f7:28:ff:bb:9c:47:4c:5e:c5:
c4:91:d0:64:8a:7b:7f:42:c6:70:18:6a:8d:6f:bb:
58:0f:77:c8:f3:37:96:ac:d9:dc:66:b3:e8:47:af:
63:c2:1f:a0:5d:62:f6:e5:11:d1:46:39:f8:75:81:
b7:7a:af:b1:dc:cf:66:95:f9:22:95:2c:de:dc:fe:
63:2a:de:3b:f6:c9:56:c3:81:1d:cc:9f:b0:66:a6:
de:0b:13:2e:a7:1d:62:84:93:4e:41:ff:75:d3:b6:
c4:63:e1:05:46:4e:1c:ff:51:08:1c:28:f6:ad:61:
3b:49:36:d4:6a:f9:d0:29:37:13:d0:4f:e5:a5:b2:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:06:9C:5A:D2:DE:4B:82:46:33:B2:2E:E1:7B:3E:AE:CC:72:C9
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/dpcGnFrS3kuCRjOyLuF7Pq7Mcsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.37.0/24
185.28.39.0/24
185.126.34.0/24
IPv6:
2a10:1440::/29
Signature Algorithm: sha256WithRSAEncryption
82:e6:b7:ec:3a:67:6c:41:eb:c9:a3:28:6a:a5:18:7f:72:e5:
c5:ef:88:5c:3a:45:75:c0:29:bd:b9:01:94:9e:36:9d:c9:2a:
73:8d:c5:11:3c:c6:79:4c:27:49:de:a9:2a:96:14:f6:b5:f2:
4b:f6:dc:62:42:56:2f:a4:4f:9b:b4:63:87:32:3b:46:e3:4a:
9f:4d:f1:63:7a:86:28:47:72:2b:5d:bb:67:49:cb:1b:30:84:
1d:04:5a:75:31:4d:ee:c7:18:9c:3f:d1:3c:60:5c:e4:6d:27:
43:c8:a0:07:f1:4d:51:bb:bb:c6:d4:be:b1:58:05:92:4d:88:
29:0c:89:9f:6d:7c:3b:ab:1b:5e:3c:ea:59:69:b5:7d:65:71:
32:7e:e4:58:af:09:8b:53:39:a9:76:f2:39:eb:b7:eb:e1:e8:
8e:b6:e3:17:34:a9:1f:ff:1b:0f:38:c4:0c:0c:77:2b:5c:28:
24:e0:8f:16:96:3a:95:a0:49:5c:aa:ea:d1:db:5e:57:24:12:
79:1e:77:4d:c2:cc:2c:2e:65:89:99:7f:2f:87:b9:4a:58:07:
db:4b:b3:0b:17:2b:99:56:7b:cc:ff:30:ea:c7:9f:2b:13:24:
ea:9d:d1:11:9c:cf:1d:cf:a7:ec:2d:6f:37:11:64:b2:5c:12:
6d:24:6c:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:40 2023 by rpki-client on console-fra.rpki-client.org