Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/DKbMm7KK1RX6PgzMKjB85Q6s-a4.roa
File: DKbMm7KK1RX6PgzMKjB85Q6s-a4.roa (raw, json)
Hash identifier: o8rAFHFuZGNzBSaEy2Ov1C66AokuVwp3SkqopAUnjMg=
Subject key identifier: 0C:A6:CC:9B:B2:8A:D5:15:FA:3E:0C:CC:2A:30:7C:E5:0E:AC:F9:AE
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 01843D367294205AA89F2CE9B52C12D9BD2A
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/DKbMm7KK1RX6PgzMKjB85Q6s-a4.roa
Signing time: Thu 03 Nov 2022 11:18:09 +0000
ROA not before: Thu 03 Nov 2022 11:18:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42065
IP address blocks: 91.108.0.0/22 maxlen: 24
185.51.60.0/22 maxlen: 24
91.108.24.0/21 maxlen: 24
91.108.32.0/23 maxlen: 24
91.108.52.0/24 maxlen: 24
94.124.178.0/23 maxlen: 24
95.161.88.0/22 maxlen: 24
95.161.96.0/23 maxlen: 24
95.161.102.0/23 maxlen: 24
95.161.104.0/23 maxlen: 24
95.140.92.0/24 maxlen: 24
95.140.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3d:36:72:94:20:5a:a8:9f:2c:e9:b5:2c:12:d9:bd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Nov 3 11:18:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ca6cc9bb28ad515fa3e0ccc2a307ce50eacf9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:f6:f8:12:32:d8:8f:71:0d:1f:c9:5f:40:
f6:b5:5f:e9:55:c3:fb:cb:2f:68:d8:da:13:04:b4:
c9:15:7b:b1:6b:a6:7a:63:f5:60:10:61:72:5a:a2:
0f:65:8b:35:42:48:8f:54:d8:0b:b9:8a:a7:a5:25:
55:81:e7:95:3f:48:0d:a5:8a:28:c0:f4:81:b0:71:
6a:9c:bf:95:38:48:5a:9f:b2:a1:c8:72:9f:79:6c:
be:74:f7:2e:78:89:97:fa:1f:db:57:6d:27:99:59:
2b:41:04:dc:ac:bc:ee:79:e8:a4:b6:86:0c:4c:68:
20:f3:60:11:6d:23:99:b5:45:86:e2:cc:d0:10:41:
5f:90:9f:a3:5e:f3:2c:eb:b6:9d:dd:85:f0:3e:57:
16:19:59:7b:3c:3b:b9:a9:ac:a9:39:c3:20:19:c7:
78:8a:ba:21:07:a5:d4:13:8d:4b:f7:2f:5e:4d:d1:
29:3c:8b:f8:82:e7:20:d2:6a:d9:8b:d8:e9:61:29:
ba:48:45:ea:40:64:9d:77:d4:f9:40:c6:e2:0b:4c:
15:00:57:7d:56:3a:ee:8e:10:d4:97:ba:35:fb:70:
48:76:37:f8:6c:bf:90:fe:ee:09:f6:20:e6:c5:8f:
49:c4:18:31:b3:b8:a7:56:8d:d3:c7:45:fc:a4:2f:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A6:CC:9B:B2:8A:D5:15:FA:3E:0C:CC:2A:30:7C:E5:0E:AC:F9:AE
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/DKbMm7KK1RX6PgzMKjB85Q6s-a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.0.0/22
91.108.24.0-91.108.33.255
91.108.52.0/24
94.124.178.0/23
95.140.92.0/24
95.140.94.0/24
95.161.88.0/22
95.161.96.0/23
95.161.102.0-95.161.105.255
185.51.60.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:14:37:7f:3a:29:c6:3b:dc:f6:14:15:d5:bc:f0:e7:27:a2:
c9:35:3f:f4:af:6e:71:2d:4b:7b:b8:61:26:57:86:68:bc:fa:
d7:9e:55:81:56:b1:cf:24:9b:47:fc:f0:eb:bf:ec:45:7a:75:
03:04:c1:72:8a:1a:2b:4a:c4:be:0a:d7:ce:48:cf:4d:aa:a9:
6f:e6:55:2d:e8:93:c2:ce:ee:20:c8:a5:7c:6c:00:3d:20:9e:
62:82:1b:0c:5e:76:66:fb:01:fa:ff:7c:b5:66:db:e3:62:80:
c2:9f:02:e6:04:c2:39:a9:9b:e0:98:34:aa:53:a3:1c:95:db:
11:63:fb:24:66:44:87:07:29:f7:db:a5:45:95:67:62:e6:4f:
ff:88:71:75:15:7a:a5:dc:55:e6:f2:60:0d:1b:f5:a7:12:f4:
b5:41:8f:a9:ce:2a:12:4d:1f:45:c8:f0:ea:18:bd:02:8b:24:
b5:e9:70:b7:99:93:4b:19:0a:d2:6b:aa:17:8a:0f:82:ce:b4:
a8:ea:37:04:65:7f:ee:7f:40:e9:2f:ac:43:45:af:f9:2c:39:
8c:6b:83:b5:c2:97:86:db:cf:82:6f:b7:af:b7:ae:9c:c6:8e:
db:b7:d1:a2:fb:46:11:14:c5:ff:9b:b7:b3:66:8e:bb:16:2d:
e5:be:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-ams.rpki-client.org