Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/DG8MdKE2I0pfrvp6ANuTarqOxrs.roa
File: DG8MdKE2I0pfrvp6ANuTarqOxrs.roa (raw, json)
Hash identifier: VXqZzX/pj/KjgLT9VEuQNhMEIv/wwlojV+37wcljlgE=
Subject key identifier: 0C:6F:0C:74:A1:36:23:4A:5F:AE:FA:7A:00:DB:93:6A:BA:8E:C6:BB
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0183413A325FFCB010A38360B8D24549B674
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/DG8MdKE2I0pfrvp6ANuTarqOxrs.roa
Signing time: Thu 15 Sep 2022 12:57:56 +0000
ROA not before: Thu 15 Sep 2022 12:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48798
IP address blocks: 85.254.172.0/24 maxlen: 24
80.81.60.0/24 maxlen: 24
85.254.183.0/24 maxlen: 24
85.254.182.0/24 maxlen: 24
185.176.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:3a:32:5f:fc:b0:10:a3:83:60:b8:d2:45:49:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Sep 15 12:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c6f0c74a136234a5faefa7a00db936aba8ec6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:63:51:d3:eb:2b:c4:76:cb:ac:74:0d:4b:
31:a6:19:2d:29:cc:66:75:39:21:4b:32:38:f0:a6:
7f:10:71:e1:77:73:db:58:47:0c:75:97:a2:97:ef:
41:e8:41:28:9c:06:63:70:48:7d:88:66:5e:6b:19:
16:ab:7b:b5:7a:50:2b:e4:cd:46:c4:20:7f:26:12:
00:03:e4:79:98:6f:31:15:69:55:1d:b7:7b:94:e4:
af:f2:9b:79:9e:37:94:c8:e8:7f:17:0d:ae:7b:42:
2f:34:bc:d5:94:38:d3:aa:0d:38:98:0b:d1:38:c3:
28:7c:3a:ef:18:94:c8:d2:be:de:91:19:6b:21:64:
83:03:ef:8e:0e:f3:ac:5e:01:14:45:fd:a9:56:ab:
2e:e5:6d:45:29:de:cb:d9:6a:6a:a0:e3:35:5a:17:
20:14:3c:8e:ab:f9:86:4c:47:59:d8:92:5e:50:1f:
49:b5:c0:df:e0:66:96:8f:56:46:3c:e2:c3:09:d9:
af:57:82:c0:3a:bb:55:fc:09:24:c6:9a:fa:5b:2c:
6b:8d:8b:4b:5e:74:fe:34:6e:63:fe:53:4d:d5:d2:
30:77:83:83:05:9f:62:eb:87:26:0c:e3:27:43:8f:
76:d0:d9:d5:30:98:50:99:00:a9:62:71:83:97:2f:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:0C:74:A1:36:23:4A:5F:AE:FA:7A:00:DB:93:6A:BA:8E:C6:BB
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/DG8MdKE2I0pfrvp6ANuTarqOxrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.60.0/24
85.254.172.0/24
85.254.182.0/23
185.176.117.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0e:25:f6:50:ee:34:ff:64:79:3f:94:08:66:a6:d7:bf:f3:
f7:be:54:5d:ef:67:6a:68:48:4b:25:c9:59:ba:ab:dc:b9:01:
a5:26:16:46:c5:0f:67:d4:85:3e:02:00:af:8c:0c:7c:ec:26:
f8:b6:b6:d1:09:41:54:ca:e5:7d:bd:54:49:10:01:32:e0:3b:
11:ae:31:e0:79:14:76:af:82:98:5c:02:64:40:41:9a:cc:36:
01:0c:48:28:21:5d:69:14:90:cc:94:8c:f8:08:c7:b3:fb:fb:
c6:39:7b:e4:94:d1:ff:9f:c8:a2:82:3a:e6:fd:42:a9:2d:c4:
80:88:d1:cd:29:b1:0c:5c:0a:b3:16:d4:c1:5d:6d:8b:07:80:
8e:81:4c:67:0d:3e:15:4e:05:2d:98:57:84:83:38:60:b7:8a:
74:37:2c:7c:42:cd:aa:77:8a:02:0e:bb:11:c1:1f:d0:8e:6c:
bf:03:a8:a9:64:52:8c:a7:f5:78:12:99:09:9e:07:2c:91:f5:
43:a6:bc:8d:18:18:41:b0:07:75:a7:72:af:82:c9:4e:96:7b:
25:d1:d0:40:04:0f:f6:19:cb:f6:f9:06:0f:e0:74:49:78:69:
84:95:ef:04:49:1f:67:87:2f:c7:ca:bb:07:a0:4f:3a:1f:b1:
8f:b5:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-ams.rpki-client.org