Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DTL6kZlFgSMARUaJQTMcXWcHxXU.roa
File: DTL6kZlFgSMARUaJQTMcXWcHxXU.roa (raw, json)
Hash identifier: kXtQ6cm8Qu15kox3uTehuMgodcdGJ37qWb4uCdEHIa8=
Subject key identifier: 0D:32:FA:91:99:45:81:23:00:45:46:89:41:33:1C:5D:67:07:C5:75
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0C683DFF
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DTL6kZlFgSMARUaJQTMcXWcHxXU.roa
Signing time: Fri 08 Apr 2022 18:39:19 +0000
ROA not before: Fri 08 Apr 2022 18:39:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 89.43.44.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208158207 (0xc683dff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Apr 8 18:39:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d32fa91994581230045468941331c5d6707c575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:62:b4:04:5b:cf:b6:16:f6:40:9d:ab:43:
7b:b4:1b:60:4c:bd:4d:3d:dd:90:4b:fa:aa:08:36:
38:d4:b3:1a:c9:ea:09:09:f7:3c:64:6e:7a:a9:f4:
e2:2b:50:03:38:a7:d2:3c:0e:14:f2:34:45:d9:4a:
3a:d9:d7:21:45:1a:3d:20:95:80:b8:b2:6c:cc:e2:
af:ca:a4:bc:50:a2:ef:12:85:83:c1:4d:7a:19:5d:
aa:35:57:ed:d8:73:99:15:7d:85:97:a1:bc:84:fc:
2d:1e:1d:d7:48:d9:f5:f2:e7:89:b8:83:de:36:82:
36:e4:25:2b:b3:f8:7b:15:56:d8:2b:b8:18:78:28:
ef:d9:1a:b6:a7:6c:26:ce:64:a6:7a:81:04:0a:c7:
1a:ce:72:61:b8:6a:93:ca:d8:25:ea:1d:e5:b3:45:
68:29:77:11:38:5c:5e:83:14:61:06:43:2f:e8:6c:
db:90:31:7b:d4:e1:e9:e6:45:f8:ef:b1:7e:74:7f:
13:e3:8a:5e:32:b7:1b:95:2d:66:c4:bf:1d:9f:8c:
ac:2d:15:84:f7:cd:40:e3:6f:7b:61:4c:21:b2:1c:
25:34:9a:8e:1e:62:74:ef:89:3f:e9:f7:77:e4:f5:
c9:58:d4:f3:8a:36:20:af:db:7a:2b:73:aa:2f:f3:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:32:FA:91:99:45:81:23:00:45:46:89:41:33:1C:5D:67:07:C5:75
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/DTL6kZlFgSMARUaJQTMcXWcHxXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
89.43.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:84:a0:a6:23:5b:d4:10:61:cd:57:7d:5e:16:c9:c3:42:67:
b4:4f:37:ca:e8:9c:fd:f6:b7:35:27:f0:21:97:ae:43:97:6e:
14:2f:3f:43:68:fe:34:79:88:b5:36:ef:e4:80:17:81:89:eb:
0e:a5:94:c3:87:25:a4:ee:b7:e3:10:c5:f4:9f:65:47:04:c5:
5d:3c:fd:70:19:ea:a9:aa:7a:38:e5:b6:03:7c:24:98:4a:0b:
c0:fc:a8:34:40:c4:e8:01:d9:65:79:ae:c7:7e:e7:a3:14:99:
29:f3:b2:45:ec:02:1b:a2:b8:f7:2e:da:26:0b:81:60:7b:f0:
2b:0a:91:fe:2b:f6:32:39:82:dd:e8:a5:57:02:75:d2:70:f7:
5c:c7:dd:07:c3:90:3c:92:5e:05:35:0d:ac:d6:5c:45:c6:28:
97:33:14:28:ad:38:5c:ef:6b:cb:3f:c5:68:24:4f:a4:7b:3a:
a9:5b:34:bf:f3:0a:4f:f9:e7:54:7c:51:a6:3d:54:23:b5:ac:
bb:39:0a:6b:94:7f:9f:fc:01:da:a4:51:a9:f8:24:ff:1a:47:
2a:6a:c1:b9:3f:c5:2e:95:8c:20:2a:64:c6:b5:a1:9e:e2:c4:
49:c3:9b:51:76:15:8b:23:1e:bb:3b:6e:f2:73:81:9a:37:58:
91:b6:c9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org