Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/DW_Fv5hw9BSXkVqjSo4BigfCSH8.roa
File: DW_Fv5hw9BSXkVqjSo4BigfCSH8.roa (raw, json)
Hash identifier: HJ7AzNBQTgJwY1oJ6P+Z73hi1vBCyk4MOiesFzZzAJY=
Subject key identifier: 0D:6F:C5:BF:98:70:F4:14:97:91:5A:A3:4A:8E:01:8A:07:C2:48:7F
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 01852A6786F0CC22F7213557CDA906C674DF
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/DW_Fv5hw9BSXkVqjSo4BigfCSH8.roa
Signing time: Mon 19 Dec 2022 12:41:45 +0000
ROA not before: Mon 19 Dec 2022 12:41:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206276
IP address blocks: 212.63.112.0/22 maxlen: 22
185.179.184.0/22 maxlen: 22
194.49.56.0/22 maxlen: 22
45.8.12.0/22 maxlen: 22
185.190.100.0/22 maxlen: 22
78.142.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:67:86:f0:cc:22:f7:21:35:57:cd:a9:06:c6:74:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Dec 19 12:41:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d6fc5bf9870f41497915aa34a8e018a07c2487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:26:4e:36:07:9d:ed:8f:c3:3b:2c:0b:61:0b:
40:a3:e0:41:3b:b3:64:c8:a8:ba:a7:fe:f2:67:11:
6f:23:7f:5e:86:65:d2:20:71:65:57:b2:ca:e2:90:
7d:74:d4:58:37:7e:b8:34:8d:b4:b7:2c:c1:f6:c2:
44:53:45:08:22:f8:b8:5d:4a:be:e8:7f:02:60:42:
b9:f1:0e:36:0e:52:7b:05:f4:74:51:63:53:ef:22:
92:91:c0:15:e4:5d:2d:40:b4:1a:85:62:e1:1e:e3:
7d:d2:cf:54:99:85:8e:75:06:53:64:dc:69:76:7d:
33:6b:e1:e0:dd:db:cb:95:f1:93:dd:e3:d3:12:67:
de:8a:ed:b3:25:e9:8f:58:8d:ce:f6:c4:62:88:37:
ac:36:0a:ab:c2:08:17:54:55:c7:13:dc:c6:12:10:
66:08:c5:e9:70:41:d5:fb:ad:e0:ce:08:ee:a0:ba:
d7:25:31:64:46:1d:f0:66:e0:b2:1a:3d:37:dc:e0:
eb:f4:a7:4b:ce:e9:73:f6:cd:db:aa:2a:fb:58:d4:
fb:f4:0b:a6:ec:a2:df:ae:4d:31:eb:cf:9c:4f:d4:
80:c3:66:b5:9c:3b:97:4b:63:e3:5a:8e:43:cf:6e:
fc:ed:3a:43:4d:e6:6f:78:b2:dd:97:46:30:e0:01:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:C5:BF:98:70:F4:14:97:91:5A:A3:4A:8E:01:8A:07:C2:48:7F
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/DW_Fv5hw9BSXkVqjSo4BigfCSH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.12.0/22
78.142.212.0/22
185.179.184.0/22
185.190.100.0/22
194.49.56.0/22
212.63.112.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:0d:b6:50:d3:c7:63:93:12:4a:99:34:67:7c:8c:a8:4e:40:
de:a5:5c:a6:a0:40:fd:d7:8a:fd:38:57:30:a5:8e:1e:8e:f0:
2d:29:8f:53:e7:58:e1:65:de:a0:f9:17:df:72:8f:15:80:9e:
84:05:22:d5:77:54:1c:56:f2:45:24:67:fd:e3:61:43:d9:15:
5e:e0:37:66:1d:58:e5:63:28:11:83:f8:45:7c:93:41:7f:51:
5c:b5:03:4c:22:0b:4e:0b:89:93:cf:30:dc:a6:5c:cb:a2:25:
0e:f1:61:b5:b1:2e:04:dd:85:a2:32:92:be:a9:d0:67:58:77:
d7:e2:76:89:95:73:11:26:e4:c7:c0:51:6d:c4:52:e0:88:bd:
4f:f9:21:8e:92:f0:54:e7:e9:72:96:64:bb:a7:6f:65:77:cf:
f7:17:1c:1b:69:d1:b4:2e:f6:c3:b8:b6:ff:1d:fc:47:37:af:
6a:e6:42:c7:8e:80:f6:26:69:87:12:47:5f:34:71:2d:d5:d8:
e3:08:db:5b:d2:b3:be:b8:52:ad:41:f8:f9:99:b7:4b:13:16:
43:93:62:0d:bb:fd:a2:89:54:0d:b9:03:d1:74:ee:7f:ea:7c:
ca:ae:88:88:5e:1a:d0:30:08:93:47:53:fb:46:28:02:b8:52:
d7:9c:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:32 2024 by rpki-client on console-ams.rpki-client.org