Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DC8MwoCOdgPjLhCIZ13XImKwcjc.roa
File: DC8MwoCOdgPjLhCIZ13XImKwcjc.roa (raw, json)
Hash identifier: JeCwDBdMLqav3siojd2cWGhJahNjqusBC+EwFdlrTt4=
Subject key identifier: 0C:2F:0C:C2:80:8E:76:03:E3:2E:10:88:67:5D:D7:22:62:B0:72:37
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018378AC6D67F060A15E3D73749C9B92836D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DC8MwoCOdgPjLhCIZ13XImKwcjc.roa
Signing time: Mon 26 Sep 2022 07:21:49 +0000
ROA not before: Mon 26 Sep 2022 07:21:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 79.175.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:78:ac:6d:67:f0:60:a1:5e:3d:73:74:9c:9b:92:83:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 26 07:21:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c2f0cc2808e7603e32e1088675dd72262b07237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:6b:ea:6e:15:b6:7c:49:91:c3:47:09:39:
8c:40:7f:d4:40:fd:16:8e:b6:e6:ea:a4:df:9f:ab:
63:f0:be:14:82:69:cb:8d:0b:43:50:e5:66:cf:21:
58:f2:da:1d:17:e7:58:39:1b:0d:e1:04:3f:77:c9:
59:3f:de:e4:96:2b:83:df:0d:19:11:b9:59:f2:fe:
01:74:15:1f:b7:bc:be:09:e4:34:65:b9:60:2b:7d:
0e:ae:f4:0c:d9:ce:c3:1e:51:d7:07:96:f8:66:9d:
e2:5f:4a:50:3c:54:38:88:dd:15:58:c8:5a:30:b1:
ba:0e:2b:ee:ff:05:c1:3d:81:c1:c2:84:b4:27:d2:
91:de:f5:89:8c:92:00:ca:39:d5:a1:90:be:95:5a:
34:ea:91:cc:5e:e6:bd:b7:fa:49:f2:03:c6:9c:8e:
b6:a4:9e:98:9a:eb:ef:b7:e2:6a:ff:e7:e9:30:54:
2c:22:fa:55:78:32:bc:51:0c:06:63:4e:cd:de:03:
5c:5b:0b:5a:f1:1a:e9:d7:b9:88:cc:b0:c5:28:91:
00:fa:a9:64:b2:aa:a4:e0:76:07:92:20:8b:e2:a1:
39:2e:91:f7:d8:66:da:5c:30:f9:9c:2e:6e:e2:3f:
14:ce:82:e5:9d:d7:60:11:19:b8:2e:28:4a:1a:4a:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:0C:C2:80:8E:76:03:E3:2E:10:88:67:5D:D7:22:62:B0:72:37
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DC8MwoCOdgPjLhCIZ13XImKwcjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.67.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bc:2c:4c:7f:cb:f6:32:8e:70:ed:5e:d0:a4:84:5f:ad:59:
23:dd:a1:7b:6a:9a:46:f0:de:04:fc:2e:0c:24:b7:e9:6f:e0:
e0:c6:2d:62:d3:64:04:81:14:98:e0:fd:26:ff:25:e4:0c:18:
0a:ca:54:c5:02:28:dd:37:1e:e1:73:8b:b3:d6:d7:d9:61:1c:
e9:74:99:fe:f6:af:ae:49:4f:cf:3a:e5:4d:34:26:3a:f4:55:
a7:57:e8:0f:8f:ff:4e:7b:b4:b4:9f:de:b3:ef:fe:49:39:25:
86:c8:0e:9c:54:e5:39:c0:67:65:1b:4b:dc:5c:24:46:54:88:
4c:34:bf:e3:b7:bd:dc:f8:64:c0:7f:21:04:17:e8:06:21:cd:
3d:07:03:ab:d3:59:a9:df:b0:1d:58:51:d9:b7:9e:54:e8:f9:
8c:c9:40:35:c8:06:8f:e0:a1:ab:94:86:f9:cf:ce:32:6e:db:
71:2a:df:a4:e0:b3:d4:47:f1:15:2a:fc:0a:c7:a7:24:5c:90:
c9:6b:2d:9f:88:61:5d:6d:6a:69:40:c7:74:41:a1:7d:33:b4:
60:e2:63:35:8c:ab:52:af:c6:5b:b7:bc:8b:0a:ca:52:91:11:
73:df:dc:6b:5c:a9:4a:3e:51:d6:14:2f:05:25:e3:5a:67:7d:
f6:92:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org