Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/dCyf_SYEl57QaXqlFhlcAOq8jOg.roa
File: dCyf_SYEl57QaXqlFhlcAOq8jOg.roa (raw, json)
Hash identifier: E0/wo28G8i9R4M6idx1dtbBr92uCY4t8U11/zhBMNNk=
Subject key identifier: 74:2C:9F:FD:26:04:97:9E:D0:69:7A:A5:16:19:5C:00:EA:BC:8C:E8
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1B4B5A20
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/dCyf_SYEl57QaXqlFhlcAOq8jOg.roa
Signing time: Sun 27 Feb 2022 18:16:38 +0000
ROA not before: Sun 27 Feb 2022 18:16:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34078
IP address blocks: 185.180.128.0/22 maxlen: 22
87.248.144.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457923104 (0x1b4b5a20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Feb 27 18:16:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=742c9ffd2604979ed0697aa516195c00eabc8ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:de:51:66:5d:4b:27:b8:2f:05:ff:d2:61:
b6:ec:52:ab:6b:ea:ac:1d:6f:2a:fa:cb:64:8d:ac:
9a:ab:84:95:a9:36:49:eb:58:3e:84:e6:09:8e:b8:
de:7e:bc:a6:73:90:70:5c:16:05:00:a3:c8:e3:7b:
d6:e5:75:62:e0:11:1a:fb:bc:f2:e2:9f:1c:30:5d:
5d:f1:28:7f:88:f1:4c:39:65:76:38:4a:a3:67:3d:
35:b6:94:82:bd:03:8e:45:1e:a6:fc:aa:63:c3:68:
28:62:23:22:e0:7a:94:6b:24:1f:e7:42:c1:8b:c5:
a2:27:c1:74:20:b3:94:60:d4:8c:58:db:f0:4e:5a:
8e:9b:d7:03:e7:98:66:7e:86:cb:6f:b9:ce:69:a2:
ab:89:fd:7a:1c:51:9f:b6:7a:1e:7f:75:a5:80:c3:
4d:e7:b4:95:b6:ca:56:b0:af:ad:e6:b9:b0:5d:26:
0a:41:b6:a0:47:5f:a4:c2:70:20:c0:c0:92:2a:1c:
4f:a0:5e:86:b9:63:b9:e5:d9:7c:e7:20:4b:2c:71:
db:d3:33:7d:98:9b:00:51:db:64:51:c2:58:72:7e:
66:94:c7:d6:2d:34:de:1b:f2:87:ad:9f:15:a2:c8:
e8:3c:67:52:64:3b:6a:ae:ef:4d:d4:65:9e:da:e0:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:9F:FD:26:04:97:9E:D0:69:7A:A5:16:19:5C:00:EA:BC:8C:E8
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/dCyf_SYEl57QaXqlFhlcAOq8jOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.144.0/23
185.180.128.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7f:03:9a:bf:f9:7b:2f:f2:53:26:37:fb:be:e2:dc:da:7a:
b5:b3:bb:08:89:ce:0a:99:55:5d:70:e1:e7:dc:50:d9:c8:e4:
37:59:74:09:bd:e3:fd:30:b0:55:db:86:ba:18:8e:bd:ab:2e:
67:90:6a:18:0b:10:42:0f:86:76:22:e1:b1:a1:51:dd:20:63:
83:a1:26:2a:d9:f7:ec:5e:2d:4d:f4:07:6c:96:05:4e:95:3a:
63:8e:1d:05:53:ab:0b:de:9e:97:60:b3:50:10:03:3a:af:80:
34:c2:2f:9d:cd:63:bc:3c:29:31:03:fd:04:c0:0b:d8:f6:a7:
de:4d:94:b5:fa:eb:d6:51:50:a4:c3:19:6e:8a:b1:9a:01:3c:
f0:95:15:73:06:4a:20:34:86:76:9c:a0:54:22:4b:22:a3:86:
1d:bf:cf:0c:7f:a2:0c:06:a8:ad:e5:c5:00:56:03:03:85:81:
80:17:a1:c6:53:a7:ab:17:db:60:a6:81:1f:04:2a:01:02:49:
af:fd:5c:2d:2d:07:df:39:17:22:d3:40:f3:bd:a5:65:1a:fb:
6e:ae:3f:47:6e:6f:9a:74:e7:79:32:11:3e:fc:bb:7a:38:36:
18:c4:f1:52:30:08:31:80:38:b7:72:6a:9e:86:aa:94:ac:c2:
a9:25:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org