Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DWjl3ETeGITpJ1UVEcKvUpYAWKs.roa
File: DWjl3ETeGITpJ1UVEcKvUpYAWKs.roa (raw, json)
Hash identifier: 38IEmswiiMvoiXIEcZut7/mpMkCyhHbo0PpCqTIRvv0=
Subject key identifier: 0D:68:E5:DC:44:DE:18:84:E9:27:55:15:11:C2:AF:52:96:00:58:AB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0184A8FB12965548FA90AC10E979EFB27402
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DWjl3ETeGITpJ1UVEcKvUpYAWKs.roa
Signing time: Thu 24 Nov 2022 09:32:17 +0000
ROA not before: Thu 24 Nov 2022 09:32:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.121.34.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a8:fb:12:96:55:48:fa:90:ac:10:e9:79:ef:b2:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 24 09:32:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d68e5dc44de1884e927551511c2af52960058ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:eb:cc:76:46:a3:fa:3c:5f:92:2d:41:30:
76:02:6d:35:59:59:88:7c:31:2a:4f:ce:59:a0:f9:
f9:d2:80:da:5d:f7:d0:77:a7:5d:c6:18:67:fc:fb:
31:01:b2:68:ad:69:bd:8e:39:a1:a4:1c:f9:5f:af:
de:f5:40:23:c9:41:76:06:71:e2:19:63:ef:7a:40:
e4:1f:38:7b:a0:6b:a5:d5:dc:e5:48:39:35:af:fe:
ba:49:0e:6a:b4:ed:bb:79:bd:1f:01:8c:80:07:1d:
6e:37:38:89:b9:bb:94:b2:62:60:b9:82:46:69:65:
4f:2a:b4:a0:ab:c8:f3:67:94:14:6b:cd:e8:44:6b:
35:09:88:28:e4:48:7e:88:e1:7b:f0:50:be:bd:43:
09:bf:14:81:20:b9:65:71:cb:8c:01:f1:a6:b2:fc:
bc:62:bc:bc:5a:ef:8d:e2:45:c8:c3:d1:cd:2e:90:
d7:2c:08:e7:3d:91:ed:2d:51:f9:d0:0d:b1:49:0c:
65:01:c8:a0:2b:03:14:d6:6e:23:4e:fc:9c:35:51:
ba:cd:e5:88:d1:ad:f3:57:ed:0d:29:06:f1:b3:20:
ef:fe:f8:ed:a3:be:68:b3:ab:e5:ac:7e:d4:bf:ab:
46:4a:e8:ec:41:46:7e:47:dc:cf:56:0e:6c:46:de:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:68:E5:DC:44:DE:18:84:E9:27:55:15:11:C2:AF:52:96:00:58:AB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DWjl3ETeGITpJ1UVEcKvUpYAWKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
109.121.32.0/24
109.121.34.0/23
109.121.40.0/24
109.121.43.0-109.121.44.255
109.121.46.0/24
109.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:67:89:e2:f7:2d:9f:9c:8e:47:03:68:6f:e3:94:82:4c:28:
4d:93:8f:94:d7:35:85:9c:d7:03:d2:d5:c6:cd:d2:65:8f:df:
80:7e:43:55:f5:5a:03:b0:86:a4:95:a9:3c:5f:1f:d7:40:8d:
9a:34:8f:a6:a2:8b:5a:3a:61:3b:18:de:25:dc:24:89:44:64:
aa:c5:9e:56:29:95:88:bb:93:d0:ac:21:39:8b:e5:68:33:e2:
d0:54:8f:1a:5b:07:1e:df:0e:4c:a3:eb:f6:78:49:bc:3a:04:
98:8b:a4:cb:8c:f5:1c:82:e4:07:d6:08:55:9b:f1:a4:b5:ff:
25:22:81:bf:6b:76:27:e1:df:4f:2c:b3:c4:55:64:d9:a1:13:
0e:93:d5:b5:e3:e1:92:b8:d5:1b:80:b5:13:88:a9:27:e7:9b:
2b:c1:ff:cd:5e:b1:9e:3f:ba:26:26:79:f5:e2:76:b3:50:28:
be:2e:c3:7f:47:ca:e0:23:80:06:79:df:0f:bb:ad:d0:dd:51:
65:5e:4a:3e:8f:02:9b:dc:5d:2f:7a:cf:6d:a6:6d:df:31:67:
f5:bd:ac:c3:98:cb:5f:05:3a:af:5c:b0:5f:1c:7c:af:c8:a1:
a9:5c:15:e6:1a:0a:4a:9a:75:f8:76:89:1b:2a:dc:8a:4a:83:
ae:98:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org