Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/DUFb1rhiTr9wcpZefSqemcyyVVg.roa
File: DUFb1rhiTr9wcpZefSqemcyyVVg.roa (raw, json)
Hash identifier: 6XnEDuLrMs1hw+SJAmj1vG71fEuPORtl76jOnF/GwkI=
Subject key identifier: 0D:41:5B:D6:B8:62:4E:BF:70:72:96:5E:7D:2A:9E:99:CC:B2:55:58
Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Certificate serial: 018A6ABEF716C84CA7C56FA67BE3E1315FC0
Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/DUFb1rhiTr9wcpZefSqemcyyVVg.roa
Signing time: Wed 06 Sep 2023 13:46:54 +0000
ROA not before: Wed 06 Sep 2023 13:46:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202661
IP address blocks: 185.197.40.0/22 maxlen: 22
2a0e:d1c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:be:f7:16:c8:4c:a7:c5:6f:a6:7b:e3:e1:31:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed
Validity
Not Before: Sep 6 13:46:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d415bd6b8624ebf7072965e7d2a9e99ccb25558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bf:44:66:5f:60:4b:0c:83:43:36:e4:02:da:
c9:d8:37:2e:fb:c4:d3:d0:03:be:d2:ed:bf:09:e6:
a6:81:08:62:b1:91:b9:f3:a2:5a:24:95:83:7c:32:
f7:87:d2:f5:ff:14:84:b3:cc:33:8c:c6:84:1a:58:
23:97:8e:a9:ac:73:5e:e6:4f:30:ed:bd:f5:de:fd:
a3:62:b3:3a:e7:58:53:16:0b:ff:3a:f2:1c:94:69:
c5:59:85:18:5a:6d:24:4e:4f:47:68:66:54:5a:db:
a7:70:9b:4e:c4:2e:87:7b:95:c0:f4:bb:5c:92:cb:
2d:46:1b:86:5a:58:d6:5d:fe:db:a7:ec:46:35:5c:
39:cd:59:03:c8:c8:7e:32:79:e6:36:f9:63:79:65:
aa:38:4d:ba:3d:45:7f:d6:37:30:a7:da:de:7c:7c:
2c:8b:b4:0b:5f:57:93:45:67:8b:e8:de:19:55:14:
a8:8e:2f:37:89:b8:5e:71:53:5a:54:28:e5:e6:5a:
9e:01:b1:9c:4a:f5:b8:8d:2e:5f:d7:8f:a7:27:65:
04:ee:e5:cc:6c:ff:29:b8:fd:60:0c:8a:b3:1d:3f:
16:ee:08:59:9b:7a:f1:45:5d:68:5a:de:96:43:ba:
ff:f4:50:3d:e2:88:5d:33:7d:ff:f5:8b:c0:b5:6c:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:41:5B:D6:B8:62:4E:BF:70:72:96:5E:7D:2A:9E:99:CC:B2:55:58
X509v3 Authority Key Identifier:
keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/DUFb1rhiTr9wcpZefSqemcyyVVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.40.0/22
IPv6:
2a0e:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
81:ed:d1:66:d6:e4:c6:06:5c:11:59:2d:3f:23:c8:cb:2a:91:
1f:e7:e9:de:cd:5e:06:a5:78:a7:82:f7:45:e8:d8:3e:37:bf:
28:33:e8:e6:a1:86:bb:de:fc:58:d8:21:3d:cc:14:1a:cd:50:
77:82:91:76:91:63:59:ff:a2:f9:91:e7:6c:98:66:25:44:4f:
86:95:7d:f3:79:2f:21:39:55:b7:cd:73:2b:d7:a5:7e:19:0c:
b5:c2:8b:e1:d0:5e:bb:9e:c4:54:b0:21:1d:b9:20:e6:63:97:
f3:15:72:06:f0:65:d8:72:99:31:86:be:a8:92:f5:de:19:88:
2a:5f:dc:4d:be:b2:09:28:74:f5:58:e5:ab:75:5e:21:a4:a7:
ba:fd:15:41:fb:1c:1a:34:78:55:8f:7a:6c:d0:4b:e9:2f:e5:
bf:c4:a7:8e:55:1a:8f:e1:c9:56:3f:4e:4e:86:7f:74:03:49:
e9:23:2b:3c:22:eb:fe:ee:b8:26:5d:76:d9:43:63:e8:15:f8:
4e:0d:9d:7b:e7:4a:cc:58:27:49:fc:a0:d9:2d:11:99:da:87:
77:58:1b:7e:99:14:86:d3:9b:0f:5b:23:0f:7e:d0:38:2e:ae:
d7:aa:a3:76:3c:b4:9f:ee:aa:36:23:0e:f4:23:23:18:39:32:
81:2d:7e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:15 2025 by rpki-client