Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Deevf7JZ3ADZnCFzuU9Dk4RgZPI.roa
File: Deevf7JZ3ADZnCFzuU9Dk4RgZPI.roa (raw, json)
Hash identifier: AlCwTDmj5FkYeLm3QRcUwYqNd/g+NuZIV4wrMjkisB4=
Subject key identifier: 0D:E7:AF:7F:B2:59:DC:00:D9:9C:21:73:B9:4F:43:93:84:60:64:F2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01823C15E3887F8073B14E21D78A8A7FF1EB
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Deevf7JZ3ADZnCFzuU9Dk4RgZPI.roa
Signing time: Tue 26 Jul 2022 19:57:23 +0000
ROA not before: Tue 26 Jul 2022 19:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 188.255.212.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:15:e3:88:7f:80:73:b1:4e:21:d7:8a:8a:7f:f1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jul 26 19:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0de7af7fb259dc00d99c2173b94f4393846064f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:55:22:e6:db:a0:4f:38:05:35:22:70:a4:
aa:a7:f7:31:75:70:6b:49:12:48:a4:40:59:8d:1f:
5c:6e:68:ef:b1:2b:89:e0:a1:ad:4a:4f:0c:59:6e:
58:f9:e3:3c:79:ae:09:4c:2c:10:28:37:57:cd:a2:
53:54:f8:69:c6:4d:3b:ec:44:13:16:a9:65:f8:fa:
a0:c6:32:17:54:11:e2:af:bd:39:c4:71:bf:f1:9c:
b9:0c:87:04:e8:a3:e9:d6:6c:ab:31:72:73:05:28:
b7:f3:13:f1:9d:50:74:c0:cf:a5:68:d2:a8:84:72:
b2:86:76:77:e9:62:1c:3b:55:5f:f6:a0:5b:f4:5f:
96:09:83:e7:e8:4e:81:48:2d:99:5d:25:bc:75:c8:
fb:6c:b1:18:de:a9:65:25:dd:e8:58:1b:c1:3b:d3:
c9:99:f7:85:65:c9:8b:4c:c3:87:a1:73:42:a7:42:
22:b5:94:50:83:bc:8b:aa:54:51:22:e6:bd:bb:e9:
16:83:59:40:d7:8c:e3:9d:8e:96:f6:28:b2:33:dd:
97:99:36:03:f8:6c:0e:9c:4c:aa:7d:26:36:2b:df:
75:92:24:1c:79:0a:49:3c:97:e9:b8:59:0e:f6:75:
1b:10:76:da:3e:40:22:d0:73:1f:87:b7:9d:38:c6:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:AF:7F:B2:59:DC:00:D9:9C:21:73:B9:4F:43:93:84:60:64:F2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Deevf7JZ3ADZnCFzuU9Dk4RgZPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.37.0/24
109.121.39.0/24
109.121.47.0/24
188.255.212.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6f:70:61:87:2f:43:8d:3f:e3:9b:86:24:a2:6a:da:23:00:
80:04:ff:26:db:64:af:54:35:de:e7:bb:27:d8:87:fd:67:96:
e4:c4:15:46:6d:68:20:58:ad:fd:b6:42:f2:2d:0a:c2:f0:e5:
52:79:dd:51:a2:f7:4d:1b:50:26:02:18:e0:88:33:90:8e:a5:
9b:dc:bb:ef:bc:ab:6b:02:cc:90:2c:8b:db:69:5e:d0:20:c9:
73:4b:2f:8f:dc:f3:e7:25:4a:19:6b:0a:b5:80:d6:c9:a0:de:
8f:68:bc:6e:1e:ef:56:5c:9b:71:08:69:01:5f:4e:7e:8f:1d:
cf:5e:a4:5f:f0:a0:fb:cb:ec:1c:2c:3f:0a:2d:e1:99:64:a9:
6e:68:a9:ce:3f:88:4b:ab:6f:fb:e8:22:15:fc:2b:e3:f2:d9:
5a:8d:0e:4a:74:f5:14:fc:1b:d5:61:07:81:6c:5e:8d:7b:45:
57:d8:be:c5:ad:50:96:98:28:cc:fe:37:25:8f:1a:5b:7c:9e:
3a:83:2d:b6:5f:31:ce:27:e4:98:8d:b9:de:35:25:7b:93:4d:
8a:2d:2e:d4:66:8b:03:1d:6e:2c:b0:b5:0e:97:07:c0:30:43:
1b:82:4d:da:ee:8f:ea:2e:b7:5a:cc:9b:43:b7:a7:e0:35:a6:
77:c6:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:03 2024 by rpki-client on console-ams.rpki-client.org