Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/DBYNXpVToI623bF6GXZ2KvVkGpw.roa
File: DBYNXpVToI623bF6GXZ2KvVkGpw.roa (raw, json)
Hash identifier: wZUK7cXCsQrDwjtnJLH4XmKonSg1+gqjhMiXDEDwUuk=
Subject key identifier: 0C:16:0D:5E:95:53:A0:8E:B6:DD:B1:7A:19:76:76:2A:F5:64:1A:9C
Certificate issuer: /CN=c54eac151ffa9e997aa2ee60f3b38132deccd49c
Certificate serial: 730BBC
Authority key identifier: C5:4E:AC:15:1F:FA:9E:99:7A:A2:EE:60:F3:B3:81:32:DE:CC:D4:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/DBYNXpVToI623bF6GXZ2KvVkGpw.roa
Signing time: Wed 23 Feb 2022 14:18:42 +0000
ROA not before: Wed 23 Feb 2022 14:18:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35617
IP address blocks: 185.225.128.0/22 maxlen: 24
109.239.240.0/20 maxlen: 24
85.204.42.0/24 maxlen: 24
212.81.60.0/22 maxlen: 24
86.104.135.0/24 maxlen: 24
178.132.88.0/21 maxlen: 24
2a04:e240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7539644 (0x730bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54eac151ffa9e997aa2ee60f3b38132deccd49c
Validity
Not Before: Feb 23 14:18:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c160d5e9553a08eb6ddb17a1976762af5641a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:e4:fa:d8:1f:3d:96:39:a8:8f:3d:79:67:
b9:3a:a8:b1:fe:2d:93:c7:bd:d2:5a:07:5a:01:8f:
06:7d:53:94:44:ef:5d:63:bd:82:b9:2e:2e:c0:06:
dc:f3:1b:53:03:0a:b4:b6:61:0d:36:17:49:af:8d:
20:02:d6:e7:93:66:96:7c:20:f3:e2:96:0f:6c:9f:
54:d2:f6:3b:6d:c5:8a:9e:71:3c:1e:4b:e4:1b:94:
92:71:52:7f:bb:b8:d1:8f:31:fe:e3:4b:c3:d4:74:
28:3d:92:b8:39:91:13:cf:08:86:c7:3a:37:03:43:
09:e2:e3:01:8f:81:a2:84:6e:50:9f:9f:37:89:76:
e8:d3:4f:26:67:fa:9e:2b:88:d0:0e:73:42:bb:3f:
05:4e:66:65:23:0a:bb:24:7b:01:8b:a3:0c:03:1d:
75:5b:ea:92:21:07:64:32:f9:db:b5:f5:27:6e:1c:
aa:97:fa:5a:2d:cf:02:b5:b7:f3:bb:71:ad:89:5e:
6f:7c:9a:6d:3b:89:8c:3a:f2:d2:f5:bc:28:1d:cf:
a8:ef:c5:48:86:59:ae:ac:fd:05:d1:f7:5a:47:98:
52:5b:7f:30:6b:2f:d9:f4:93:99:a8:6c:e7:aa:cd:
f2:2c:f3:ca:48:db:61:0e:08:a3:b2:01:1a:7b:e9:
0b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:16:0D:5E:95:53:A0:8E:B6:DD:B1:7A:19:76:76:2A:F5:64:1A:9C
X509v3 Authority Key Identifier:
keyid:C5:4E:AC:15:1F:FA:9E:99:7A:A2:EE:60:F3:B3:81:32:DE:CC:D4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU6sFR_6npl6ou5g87OBMt7M1Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/DBYNXpVToI623bF6GXZ2KvVkGpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/049d6d-bc4e-4cfb-ba1e-773c91a28100/1/xU6sFR_6npl6ou5g87OBMt7M1Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.42.0/24
86.104.135.0/24
109.239.240.0/20
178.132.88.0/21
185.225.128.0/22
212.81.60.0/22
IPv6:
2a04:e240::/29
Signature Algorithm: sha256WithRSAEncryption
73:0e:6c:a9:cc:b0:6f:98:2a:b9:20:f8:06:64:ed:92:65:02:
a6:2b:b1:00:d1:3b:22:37:ad:e7:3b:aa:26:78:13:51:b8:95:
7f:37:03:3f:c6:ed:05:d4:bc:75:b1:23:8a:e2:db:c7:29:93:
fb:62:30:85:b6:35:43:58:86:14:4e:fd:36:f2:70:dc:e7:7c:
0b:ef:c6:88:0c:3d:c4:be:02:11:24:75:38:4a:c8:1d:bf:a6:
8c:5f:65:28:44:91:6c:3b:9e:de:35:ad:c9:67:5d:66:11:ff:
69:05:5f:ca:d3:b6:74:30:ac:b4:9b:be:ea:29:d6:79:9e:6c:
36:37:d4:47:50:fb:26:46:00:61:ec:0d:1e:6c:6e:81:ce:c5:
9b:ab:65:e6:7a:12:65:78:e9:75:97:6a:8f:9e:e7:1a:73:1a:
93:ad:c5:36:19:24:14:4b:f9:dd:b9:ef:cc:3c:a4:d6:44:9a:
6c:79:01:fb:1f:d4:e8:7a:83:69:a3:61:cc:f3:40:c7:28:5a:
73:5d:3f:66:b3:14:86:80:d2:29:3f:12:8d:e8:f0:e4:30:44:
4c:72:11:83:24:d6:53:18:3e:1d:7b:9c:22:ca:c7:ed:b3:3a:
c1:79:21:bb:74:2a:9c:8c:f3:b6:4a:cd:5a:72:27:13:19:e1:
76:79:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:46 2024 by rpki-client on console-ams.rpki-client.org