Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/DWGJI-xGIwYu9Zuh6uyLu5NeKu8.roa
File: DWGJI-xGIwYu9Zuh6uyLu5NeKu8.roa (raw, json)
Hash identifier: UI2DPdEbE+gJUY2f69IYOo48bpBz+FSyjBli8OuoNUA=
Subject key identifier: 0D:61:89:23:EC:46:23:06:2E:F5:9B:A1:EA:EC:8B:BB:93:5E:2A:EF
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0184A3824FF7D20B1E4845533D4580D105B5
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/DWGJI-xGIwYu9Zuh6uyLu5NeKu8.roa
Signing time: Wed 23 Nov 2022 08:02:17 +0000
ROA not before: Wed 23 Nov 2022 08:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197518
IP address blocks: 185.255.200.0/22 maxlen: 22
185.199.212.0/22 maxlen: 24
194.146.92.0/23 maxlen: 23
45.157.208.0/22 maxlen: 22
188.95.248.0/21 maxlen: 21
185.250.24.0/22 maxlen: 24
185.221.24.0/22 maxlen: 22
176.125.250.0/23 maxlen: 23
130.193.104.0/21 maxlen: 21
45.155.252.0/22 maxlen: 24
2a03:680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:82:4f:f7:d2:0b:1e:48:45:53:3d:45:80:d1:05:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 23 08:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d618923ec4623062ef59ba1eaec8bbb935e2aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:69:66:de:a6:16:83:9d:c2:45:3c:b1:f9:
8e:51:f9:4e:f6:4b:e0:f4:9d:3a:cc:59:1f:1e:57:
4e:08:f4:ad:32:ea:a1:6a:bf:69:90:2a:f7:e2:e5:
a4:df:47:c2:ef:0b:6e:56:37:88:18:c2:15:c7:f3:
58:9d:f2:69:3d:f3:99:45:69:22:c3:1c:a5:b6:06:
96:73:ca:29:d9:2c:09:ec:53:53:b3:ee:1e:ac:6c:
bd:30:27:0d:1b:86:be:e9:69:4e:c4:5f:67:42:90:
48:f9:47:54:63:7d:b4:c2:a5:ff:ec:81:be:c4:3a:
1c:d6:9f:d5:97:32:08:ad:65:3e:e1:1f:cc:5c:b4:
08:69:e3:b2:6b:49:ef:30:da:ea:eb:e9:b3:e3:ba:
29:34:99:3e:52:c9:ca:5a:62:6b:9a:50:b2:a6:ca:
c0:3d:14:1f:41:0f:ba:82:8c:5d:0a:54:f1:0d:c0:
be:0e:b6:c4:70:ef:b2:51:8d:db:3b:e4:d1:b8:db:
e6:83:51:63:15:ab:dc:44:8e:41:de:0b:44:be:69:
93:f1:fb:61:60:cb:48:a7:c4:db:73:a9:f4:a6:33:
b0:3d:b1:0d:c3:25:cf:b7:97:59:ed:c6:c1:95:23:
92:cf:33:a1:bb:22:74:ff:ab:af:2e:d2:77:a0:ed:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:89:23:EC:46:23:06:2E:F5:9B:A1:EA:EC:8B:BB:93:5E:2A:EF
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/DWGJI-xGIwYu9Zuh6uyLu5NeKu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.252.0/22
45.157.208.0/22
130.193.104.0/21
176.125.250.0/23
185.199.212.0/22
185.221.24.0/22
185.250.24.0/22
185.255.200.0/22
188.95.248.0/21
194.146.92.0/23
IPv6:
2a03:680::/32
Signature Algorithm: sha256WithRSAEncryption
c1:c3:b4:19:45:af:4f:64:9d:c9:b7:ce:90:ee:47:1b:8d:e7:
79:2e:7a:e4:e8:8d:c1:cb:c5:6b:41:da:3b:61:e7:c2:7f:6e:
cf:95:7e:7a:94:78:5f:0b:48:01:1f:e9:40:99:13:2d:72:e6:
ba:d9:ea:71:ac:fd:1c:16:eb:d4:28:16:d9:3b:58:a8:47:31:
0d:d3:bd:32:d9:cc:42:f4:51:1e:69:f1:1f:7d:07:f2:e3:6d:
ad:b7:10:06:5d:d7:da:27:42:f8:7f:ad:85:6f:ce:ac:c3:f5:
ca:60:40:bf:61:45:9c:d0:3e:5f:83:8e:7d:f1:d2:81:60:db:
bc:8b:36:0b:d9:f2:a2:93:f2:cc:1d:1e:bc:28:c5:a6:19:68:
0c:58:cd:5f:a3:c8:d7:cd:2a:e1:22:ae:f8:1c:d9:cd:c0:29:
a3:4c:5b:d1:24:6f:74:6d:7d:f5:cc:16:f2:a9:25:42:4c:d4:
1f:66:39:34:ef:52:26:dd:98:7b:c4:21:0e:c9:2e:af:21:be:
bd:92:1c:ab:da:8b:61:7e:4a:ba:27:19:d6:79:1f:6f:d3:e5:
7d:aa:6b:23:38:04:17:e1:78:c9:1d:16:d6:6c:eb:64:d5:ea:
81:38:1d:61:f4:4f:bb:2c:ee:8c:17:4f:5a:03:d7:8b:b8:24:
02:cb:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org