Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/DlBO2Td49nBi6wMMpv9UXISBSsY.roa
File: DlBO2Td49nBi6wMMpv9UXISBSsY.roa (raw, json)
Hash identifier: rAWKJTe+x4aSGblMSIWfYJtFPmXpyhl057RmRnjeYRo=
Subject key identifier: 0E:50:4E:D9:37:78:F6:70:62:EB:03:0C:A6:FF:54:5C:84:81:4A:C6
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 01843F9F37E268C8E489D4F573DDFB0AB174
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/DlBO2Td49nBi6wMMpv9UXISBSsY.roa
Signing time: Thu 03 Nov 2022 22:31:49 +0000
ROA not before: Thu 03 Nov 2022 22:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208006
IP address blocks: 130.185.123.0/24 maxlen: 24
130.185.122.0/24 maxlen: 24
130.185.120.0/23 maxlen: 23
185.235.40.0/22 maxlen: 22
194.5.192.0/23 maxlen: 23
194.5.206.0/23 maxlen: 23
185.215.235.0/24 maxlen: 24
185.215.234.0/24 maxlen: 24
2a0d:4ac0::/48 maxlen: 48
2a0d:4ac0:3::/48 maxlen: 48
2a0d:4ac0:1::/48 maxlen: 48
2a0d:4ac0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3f:9f:37:e2:68:c8:e4:89:d4:f5:73:dd:fb:0a:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: Nov 3 22:31:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e504ed93778f67062eb030ca6ff545c84814ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:52:d8:a8:3b:55:0e:8a:4e:08:22:cb:40:
85:c7:0f:78:9c:3e:9c:46:00:f8:3a:49:f1:71:e7:
4a:9d:b9:54:9b:d7:0c:d9:47:6d:ef:4f:ad:78:7d:
72:71:23:0a:40:1d:52:e0:94:26:6d:34:e5:d2:bf:
d4:75:67:9c:21:f1:8f:71:0c:ae:67:48:81:06:35:
7e:a3:89:16:7e:96:fd:a6:fe:4b:ee:80:19:6f:a9:
14:2a:f6:38:24:98:39:52:8a:9e:4f:da:da:62:60:
91:01:5e:30:20:94:16:6c:96:c3:9d:44:8c:d4:fc:
f4:2e:17:50:db:7c:0b:07:f3:a2:69:21:21:a1:b8:
cf:f8:34:e8:99:e8:df:76:0e:19:27:ce:fa:86:42:
d9:7f:a9:64:be:8d:49:5b:66:15:88:3b:c9:80:ad:
85:07:e9:cf:51:d8:9e:b4:67:ae:05:09:78:ec:3e:
35:f7:46:21:08:fd:e0:2b:c1:c6:7e:85:0a:6d:f8:
fe:17:3c:db:28:13:d6:46:1b:ba:46:12:8e:bd:55:
0f:b9:22:7e:62:85:49:a2:af:f9:3d:c0:18:a1:66:
66:dd:c3:24:df:be:4d:9d:64:6e:ca:7e:86:2f:58:
82:f6:8a:36:b7:b5:cb:47:49:b2:f6:fb:a0:71:1f:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:50:4E:D9:37:78:F6:70:62:EB:03:0C:A6:FF:54:5C:84:81:4A:C6
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/DlBO2Td49nBi6wMMpv9UXISBSsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.120.0/22
185.215.234.0/23
185.235.40.0/22
194.5.192.0/23
194.5.206.0/23
IPv6:
2a0d:4ac0::/46
Signature Algorithm: sha256WithRSAEncryption
79:ba:5f:82:59:3b:a0:dc:17:bc:c3:6e:5b:b7:9b:11:52:3d:
d7:f7:ac:55:d2:49:25:c8:5c:e2:f0:34:28:05:82:c2:1b:de:
6d:32:54:ee:59:44:66:73:11:c4:02:20:60:fa:b4:6c:b0:88:
ae:e5:03:0c:b0:d1:7f:a7:28:61:e0:49:87:86:02:9a:0f:ab:
c0:bb:b8:1a:c4:d8:66:af:70:7b:7d:b0:8d:f1:68:0c:ae:87:
96:cc:a3:f1:d2:82:ef:2d:0e:19:8e:a1:6d:fc:12:4b:1d:29:
66:a6:6a:89:47:54:cf:20:bf:d0:b2:14:fb:54:5d:2f:4d:eb:
42:f4:6d:87:ad:47:74:98:48:6d:35:07:70:01:15:bc:42:53:
0a:4c:2d:a2:65:1f:e8:e4:eb:7c:24:6b:44:0a:b8:88:35:2c:
eb:7d:93:cc:bf:93:15:f6:87:90:63:15:76:cc:88:c0:bb:71:
84:10:e7:11:4a:49:2c:da:2c:0b:70:50:75:a3:fa:ac:e5:dc:
1f:e4:53:3e:fe:6c:16:2f:fd:a6:b9:f0:e1:ba:6a:9b:63:38:
fb:28:29:bc:db:82:2a:10:cc:8c:a4:25:b8:5b:e0:76:c3:a5:
55:9a:38:9c:a4:c8:d2:9a:72:4d:17:d5:f8:07:a9:63:4c:17:
10:59:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:11 2024 by rpki-client on console-ams.rpki-client.org