Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DZvC003RWBvDZDDm69ka5B-SDQs.roa
File: DZvC003RWBvDZDDm69ka5B-SDQs.roa (raw, json)
Hash identifier: qjtvlkdkUsr7up/xcMwrbIzUidMEK3ooCmF2SUB2vl4=
Subject key identifier: 0D:9B:C2:D3:4D:D1:58:1B:C3:64:30:E6:EB:D9:1A:E4:1F:92:0D:0B
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0183AC7D922C2F246D5253A3665866BB2EDB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DZvC003RWBvDZDDm69ka5B-SDQs.roa
Signing time: Thu 06 Oct 2022 08:50:53 +0000
ROA not before: Thu 06 Oct 2022 08:50:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 79.175.95.0/24 maxlen: 24
188.255.212.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:7d:92:2c:2f:24:6d:52:53:a3:66:58:66:bb:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 6 08:50:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d9bc2d34dd1581bc36430e6ebd91ae41f920d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:8c:7c:41:87:49:11:70:82:bc:f2:77:d5:
bb:3d:eb:5f:41:7d:8e:aa:ad:12:ce:1b:04:fe:64:
59:9b:98:fd:ac:31:b7:48:d6:5d:33:2e:24:76:bb:
8d:6d:69:66:03:3c:5c:d6:54:3a:30:50:c2:44:c4:
e4:06:fa:7f:e0:a0:36:dd:19:e0:ee:24:dc:e2:98:
89:39:9c:1c:a1:35:d9:e6:85:2d:bd:51:f0:e5:d6:
0e:0d:50:98:0d:e9:36:1e:f7:f1:62:a9:e7:c3:8d:
a0:c5:2c:09:ee:04:cb:97:e9:c3:6a:8a:1c:37:da:
6a:99:e6:e9:ec:20:e0:57:31:49:ad:51:0a:1d:f4:
99:d9:bd:8d:d8:06:80:4b:b6:86:c7:b2:f9:11:ea:
5c:e2:32:bd:ee:a8:c9:ae:f4:e5:90:14:db:59:74:
93:69:64:9b:c9:fd:4b:f8:74:c9:dc:49:d2:98:0c:
e1:d5:c9:12:77:02:6e:35:aa:d9:a9:91:3f:40:9c:
26:5e:df:5f:94:65:87:1e:6b:6b:8d:27:9a:06:fe:
92:46:2e:48:f4:e7:a7:f4:8c:82:16:86:a9:24:20:
e0:b6:53:3b:99:c3:41:29:df:73:5a:03:a0:19:e4:
91:15:a5:e2:e1:f3:83:c6:4f:af:eb:3e:df:f4:e1:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:C2:D3:4D:D1:58:1B:C3:64:30:E6:EB:D9:1A:E4:1F:92:0D:0B
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/DZvC003RWBvDZDDm69ka5B-SDQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.95.0/24
109.121.33.0/24
109.121.37.0/24
109.121.39.0/24
109.121.42.0/24
109.121.45.0/24
109.121.47.0/24
188.255.212.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
75:c1:97:9a:1f:b7:70:41:69:77:e1:80:e4:7f:ef:c7:5e:6b:
18:f4:12:dc:b5:da:5d:d6:ec:b0:67:f0:25:c0:9e:77:79:df:
9c:34:77:9b:b3:60:64:55:1c:6c:ae:1e:b3:64:b6:7b:c8:d2:
01:fa:06:81:7f:f8:5c:be:7f:fe:2e:81:f6:d3:08:77:cf:b2:
4f:c7:2b:ca:2f:24:1c:0c:bd:d2:6b:83:fb:bf:00:27:0b:56:
9f:db:6f:ac:a1:d7:9d:39:e9:d6:c7:30:97:5f:ca:cb:ae:8e:
8b:ae:ce:e6:ed:23:f0:15:0b:75:54:16:17:53:cf:6b:49:62:
f6:dc:5e:b2:42:49:95:fa:48:20:c1:e9:0f:1a:25:98:63:99:
59:18:ca:92:7e:d2:91:63:71:6d:24:86:19:b5:da:3f:88:9b:
ce:90:81:2d:72:61:13:df:de:34:3b:a2:6b:80:bc:11:11:97:
d1:12:6d:ac:0d:99:7d:a6:d3:80:c2:f0:e3:b9:20:4e:ca:61:
60:d6:83:6c:c6:aa:32:e7:6e:00:39:5f:f5:2f:28:a5:dd:c9:
a3:58:a3:b0:90:ee:3d:26:aa:41:af:6c:07:46:00:02:9a:cf:
de:26:a5:fc:a1:e5:b2:c5:4e:64:51:18:a6:4b:9c:66:41:0c:
c2:8e:44:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org