Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/dpncQdfr983XHnKtA7yDQdjokEQ.roa
File: dpncQdfr983XHnKtA7yDQdjokEQ.roa (raw, json)
Hash identifier: 4X6YkCYBLdpCJ8phn+1BMwXRTaE6sgOXWiTcX1g+yRE=
Subject key identifier: 76:99:DC:41:D7:EB:F7:CD:D7:1E:72:AD:03:BC:83:41:D8:E8:90:44
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 018438547541DC22F30A226888EA45D4A365
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/dpncQdfr983XHnKtA7yDQdjokEQ.roa
Signing time: Wed 02 Nov 2022 12:32:49 +0000
ROA not before: Wed 02 Nov 2022 12:32:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33911
IP address blocks: 195.254.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:54:75:41:dc:22:f3:0a:22:68:88:ea:45:d4:a3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Nov 2 12:32:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7699dc41d7ebf7cdd71e72ad03bc8341d8e89044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:fe:64:01:cf:be:44:4a:a3:a3:c8:65:89:
2d:90:d1:83:6d:95:16:e6:08:33:3d:6a:71:55:df:
82:7b:61:de:8d:5a:b0:f8:a1:49:bc:97:fc:f3:9d:
8a:89:9d:33:0e:a0:37:f5:e8:96:2c:12:8c:46:ed:
0d:cf:e5:2a:20:62:0c:34:d0:78:ed:36:6e:6b:09:
5b:1c:00:42:1c:f4:00:78:0a:b9:5e:a4:74:b3:10:
d3:5b:ac:83:b1:3e:ad:8e:54:4e:e4:3c:a9:4e:ce:
06:f6:11:3e:42:9a:2f:34:e3:6f:c7:3f:7a:ff:8e:
02:5d:ec:7b:24:28:b5:15:8a:03:8f:3f:0d:3c:6c:
8b:34:cf:25:e5:40:3f:29:55:d5:b4:ff:7c:c6:a0:
a1:ba:3a:95:6e:09:6f:ab:3d:39:62:3c:3d:a2:3d:
32:97:83:92:34:64:9b:15:5a:1d:bb:15:92:f7:16:
9e:9a:7f:e3:88:40:ae:cc:da:a2:e8:12:c4:df:ff:
e7:69:43:71:cf:29:07:a1:e7:20:9f:fd:f4:72:55:
7e:8b:d5:19:84:6c:8e:91:ab:9e:be:53:73:50:0c:
17:cd:16:ab:63:be:b9:fa:ad:24:5b:4c:ac:b1:43:
92:74:0c:c9:d4:7a:b9:6d:ac:97:93:42:b9:92:93:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:DC:41:D7:EB:F7:CD:D7:1E:72:AD:03:BC:83:41:D8:E8:90:44
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/dpncQdfr983XHnKtA7yDQdjokEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:fa:0f:d7:09:a6:08:02:70:03:c7:a9:19:0e:ba:d0:78:32:
f3:1d:62:6e:15:69:5d:a8:5f:1d:84:f8:65:2c:a3:a7:bd:3e:
55:4c:21:81:95:fd:76:af:aa:47:c2:69:bf:d1:d7:51:d3:3b:
94:b0:b9:47:eb:0e:0d:8b:ef:34:2e:22:88:d2:6b:00:39:f2:
72:a1:f3:6f:9a:63:7d:f4:78:e5:a8:ff:0b:62:54:c3:1d:c5:
2b:29:92:9f:91:81:d0:d0:f0:61:a0:cc:10:b5:10:a1:f4:32:
a5:b2:9b:34:01:1f:42:27:fb:ee:3d:8e:a8:09:7f:11:42:e0:
ef:cb:59:e8:19:2d:78:93:b0:d6:fd:1b:7d:7a:19:65:55:5e:
4a:6f:90:f6:59:f1:ce:2f:01:1b:75:12:da:2e:3a:c8:87:09:
e3:9d:b9:92:d8:ef:dc:3b:9b:82:2d:ac:34:0e:9f:70:29:0f:
33:1d:ee:78:6c:7e:85:d4:93:7f:15:34:59:fc:41:aa:0b:77:
57:b9:f1:82:20:32:75:6d:41:20:3a:40:10:d0:a2:66:6e:5b:
4a:25:b3:4d:b4:b4:24:a2:80:6f:fe:d6:e6:47:eb:b0:e5:62:
12:bf:38:52:61:a0:38:85:eb:c1:93:c1:84:41:42:f8:53:2b:
bd:22:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:27 2024 by rpki-client on console-ams.rpki-client.org