Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/Darm1GjudMfT83P9s4K17f4yYzg.roa
File: Darm1GjudMfT83P9s4K17f4yYzg.roa (raw, json)
Hash identifier: IqK9Ocu0SXbm11MJnmPFi7Y7E/mLgkTORpW2JKxi2j0=
Subject key identifier: 0D:AA:E6:D4:68:EE:74:C7:D3:F3:73:FD:B3:82:B5:ED:FE:32:63:38
Certificate issuer: /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Certificate serial: 957AE7
Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/Darm1GjudMfT83P9s4K17f4yYzg.roa
Signing time: Sat 01 Jan 2022 01:53:49 +0000
ROA not before: Sat 01 Jan 2022 01:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205556
IP address blocks: 185.213.180.0/22 maxlen: 22
185.213.180.0/24 maxlen: 24
185.213.181.0/24 maxlen: 24
185.213.182.0/24 maxlen: 24
185.213.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9796327 (0x957ae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Validity
Not Before: Jan 1 01:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0daae6d468ee74c7d3f373fdb382b5edfe326338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:06:9b:53:1d:3b:cb:66:cc:7e:a4:ef:f2:
d9:b7:11:0c:21:ad:e0:ad:53:13:55:01:8f:29:3b:
c4:3e:01:82:17:b6:75:2c:0b:d1:0d:85:0e:84:e7:
d3:6f:d9:14:14:ea:04:ff:7b:04:5f:22:82:33:e1:
14:b6:fe:90:04:6f:14:fa:88:5d:fa:66:b9:3c:65:
81:fb:14:2e:9d:c3:cc:6f:54:7c:d1:2a:f1:16:3f:
31:37:cb:5e:c5:42:23:57:e2:5c:d0:a0:d5:e2:ab:
63:18:a6:f1:56:71:b7:6f:70:bf:74:f2:7d:31:e2:
e1:28:ae:b0:84:89:68:e4:cd:ee:2c:60:e7:97:8c:
b9:6c:d8:9f:e7:3d:bf:70:65:9b:50:14:45:33:6f:
05:ef:54:96:5b:c5:4e:d7:e9:71:88:7f:91:3c:13:
cc:3e:a1:16:bc:b5:42:30:ca:98:e0:b8:41:d4:76:
20:43:d7:d8:45:d4:46:62:de:c3:82:42:0b:c5:3f:
4e:47:50:33:20:9b:57:bf:b0:d9:56:05:9d:87:7e:
df:0c:f1:0c:b1:f7:f8:69:f8:d4:5a:be:6b:3a:18:
19:c4:41:12:c4:8f:62:c5:8a:bb:2e:58:8e:62:5a:
eb:51:16:db:6f:db:8a:93:35:1c:f5:e7:23:56:fe:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AA:E6:D4:68:EE:74:C7:D3:F3:73:FD:B3:82:B5:ED:FE:32:63:38
X509v3 Authority Key Identifier:
keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/Darm1GjudMfT83P9s4K17f4yYzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.180.0/22
Signature Algorithm: sha256WithRSAEncryption
53:2d:e8:39:e1:c1:48:18:fe:b5:f6:6b:60:04:13:9d:f1:b6:
84:a7:fb:ec:8c:5b:6f:84:a7:99:b1:f1:b5:62:78:4b:b1:b2:
09:60:48:ec:b3:68:38:20:7c:db:62:3e:a7:a4:84:a3:c0:de:
fc:c6:89:73:b8:7d:a8:c5:2b:92:af:59:c1:0a:34:ca:74:7e:
38:5e:72:c4:20:c7:f5:97:16:45:b0:c2:5f:85:ae:a2:a8:c1:
c2:87:8b:84:39:88:9d:37:3d:2a:e7:50:95:31:d0:8d:e0:1c:
66:e5:4f:d3:55:d9:9e:4b:4b:20:31:0d:11:37:ea:e4:79:38:
b2:1e:55:02:d2:42:3f:3a:fc:bd:8c:76:24:72:a7:a2:62:49:
fd:93:95:18:f2:7d:d9:19:74:a8:77:18:9b:28:2a:14:46:bb:
53:fa:f2:40:88:bd:01:a4:d0:35:25:3c:6e:10:6f:a2:d1:85:
74:d6:92:f3:81:4b:9f:fa:46:30:ae:80:9c:f2:14:a1:ac:fe:
4e:ec:6c:de:1d:9a:44:a9:68:80:a6:5b:5b:d6:16:2e:9a:e1:
0c:5f:ec:e4:ee:5e:0c:cb:8c:82:41:60:d1:f1:8e:3a:a0:ed:
4e:84:0f:bc:85:2d:85:ba:12:8c:ac:ba:66:10:93:22:41:92:
bb:1f:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-ams.rpki-client.org