Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/V0dNVo3wSuTSBeOmqOy_RoomDRM.roa
File: V0dNVo3wSuTSBeOmqOy_RoomDRM.roa (raw, json)
Hash identifier: wyo9xi7B+EyFJvr7nHYvLAUOMz/EW/ZXAFDkE+qXV0U=
Subject key identifier: 57:47:4D:56:8D:F0:4A:E4:D2:05:E3:A6:A8:EC:BF:46:8A:26:0D:13
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 018327D8D467F5EDBD32BF4E56D031309330
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/V0dNVo3wSuTSBeOmqOy_RoomDRM.roa
Signing time: Sat 10 Sep 2022 14:41:04 +0000
ROA not before: Sat 10 Sep 2022 14:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199725
IP address blocks: 185.48.216.0/22 maxlen: 24
2a04:b580::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:27:d8:d4:67:f5:ed:bd:32:bf:4e:56:d0:31:30:93:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Sep 10 14:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57474d568df04ae4d205e3a6a8ecbf468a260d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:0d:bc:b1:f8:32:a1:f6:fa:4c:42:5c:cc:
d9:b5:34:0f:dc:ea:5a:26:97:71:81:e4:6d:22:63:
ca:ed:b3:4d:5f:b5:bf:4d:81:7c:6c:ba:c3:3c:53:
f6:2e:94:7f:a4:b3:df:6c:28:27:fb:04:43:ef:8a:
c6:95:4c:d9:0e:84:da:66:28:aa:c5:fb:94:56:b2:
ed:26:f0:39:9a:1f:fc:de:71:b9:55:17:4b:c7:86:
7f:08:5e:82:b9:46:b5:58:c1:03:b0:d4:89:20:55:
91:bb:ff:b6:f9:4f:1a:e3:2a:fe:8a:23:66:82:a3:
41:30:31:33:92:08:78:15:ea:9b:5a:36:2c:d4:75:
72:c1:2d:bc:51:ce:39:b6:70:b6:04:ab:e6:7c:33:
fb:34:73:d4:9f:58:6f:ba:88:1b:94:58:de:b4:dc:
9d:8e:6b:62:bc:81:b2:b0:da:f5:54:e7:42:c9:1e:
8c:b8:4d:2e:fd:97:07:b1:9d:78:38:1a:c4:a3:85:
81:8d:22:44:7a:eb:b9:32:3a:a7:d0:0c:f2:42:c3:
f8:23:2d:cb:c8:75:39:70:e6:f4:f2:6b:18:4e:bb:
02:a9:f5:b4:c6:f5:db:3f:7b:47:d2:09:bf:08:1f:
47:46:29:63:10:52:88:59:61:74:8d:f7:62:95:e4:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:47:4D:56:8D:F0:4A:E4:D2:05:E3:A6:A8:EC:BF:46:8A:26:0D:13
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/V0dNVo3wSuTSBeOmqOy_RoomDRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.216.0/22
IPv6:
2a04:b580::/29
Signature Algorithm: sha256WithRSAEncryption
1a:60:88:61:fc:db:8e:e9:08:84:02:99:1e:c3:fc:18:70:09:
23:77:7f:7d:f9:c3:88:8e:da:a2:ee:95:a0:7f:b3:50:84:85:
eb:e8:74:70:8d:35:62:d1:d4:8d:bd:53:e9:e1:5b:99:b0:46:
83:34:53:bf:28:6a:51:78:c4:df:94:09:d7:79:0b:6a:ff:6e:
5d:b7:ab:93:1c:e6:d2:36:1e:73:5d:c4:0f:d8:3a:d4:59:a1:
1f:64:3f:f1:76:25:ac:a2:3f:9a:9d:b7:82:a9:c4:ce:e4:44:
a2:d6:1c:fb:d8:80:cc:34:a0:84:78:ba:f6:e8:c3:4b:5e:17:
6b:2c:41:e8:31:bf:ef:34:71:5a:19:58:1d:ed:da:a9:56:37:
d3:8d:33:10:9b:01:45:cf:fd:cf:22:92:43:e6:a5:3f:32:d6:
ee:4c:60:26:7f:4b:e7:d8:da:34:08:72:32:d7:08:fd:85:5c:
d3:38:b4:00:91:51:09:09:26:1d:b1:eb:71:5b:c2:09:b3:a2:
6a:bb:34:39:a3:82:32:80:c6:eb:ea:5c:e5:70:f7:9a:d8:e4:
81:6a:8a:64:47:bd:a4:29:d9:ce:80:52:fe:da:00:26:03:9a:
ec:ea:74:a0:1b:41:6f:c2:53:11:ae:3c:16:c1:d0:40:fa:8d:
9e:bd:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:26 2024 by rpki-client on console-fra.rpki-client.org