Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/dnNEUJFvNl3EnkMDGZdQBg0s3VM.roa
File: dnNEUJFvNl3EnkMDGZdQBg0s3VM.roa (raw, json)
Hash identifier: tBuHeq5p8k1rmnR0vvJAbzkwav7aeh0Hru1SiR1n3Nk=
Subject key identifier: 76:73:44:50:91:6F:36:5D:C4:9E:43:03:19:97:50:06:0D:2C:DD:53
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 13C369BF
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/dnNEUJFvNl3EnkMDGZdQBg0s3VM.roa
Signing time: Sat 01 Jan 2022 12:59:39 +0000
ROA not before: Sat 01 Jan 2022 12:59:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24707
IP address blocks: 185.122.82.0/24 maxlen: 24
185.122.82.0/23 maxlen: 23
185.122.83.0/24 maxlen: 24
185.122.80.0/24 maxlen: 24
185.122.80.0/22 maxlen: 22
185.122.80.0/23 maxlen: 23
185.122.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331573695 (0x13c369bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Jan 1 12:59:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76734450916f365dc49e4303199750060d2cdd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:37:d6:96:59:68:1b:75:93:43:9a:60:3d:
79:09:4c:13:bf:01:77:ca:fa:03:db:83:c8:d1:6a:
8e:c5:ab:2b:89:d6:04:1e:9e:83:46:9e:1b:6c:f8:
82:15:f2:62:9a:cf:5f:51:54:74:2c:58:3d:98:24:
2b:fc:b4:59:74:b8:76:66:05:07:42:fb:e9:25:4d:
0d:77:56:9e:0b:cb:34:cf:97:6c:6b:a9:db:2b:28:
b7:fb:73:26:5b:3e:86:20:4a:52:a7:5a:1e:0c:f1:
cb:86:22:08:02:b8:91:14:57:f4:df:19:45:d3:28:
5b:6b:9c:65:df:ed:50:3f:b5:4d:1f:c2:40:5d:bd:
1d:91:be:c8:5b:4a:94:a5:41:80:32:6f:75:c2:f1:
17:c8:6e:a8:71:98:23:3d:3d:95:7f:43:b1:e1:8b:
56:81:b5:71:25:3f:8a:aa:9d:55:df:3b:ba:6e:9a:
e5:e2:65:0c:ab:52:ef:98:44:75:fc:91:22:24:fc:
36:03:be:d7:91:a8:b9:22:70:58:d4:c1:2f:22:64:
53:b3:8e:05:17:31:40:cc:8f:19:fb:fc:75:66:29:
ce:74:ad:38:02:33:bc:55:b7:09:cb:62:f7:94:d3:
93:e3:ce:b3:c9:b5:8a:d8:8c:5c:b9:24:89:4d:7e:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:73:44:50:91:6F:36:5D:C4:9E:43:03:19:97:50:06:0D:2C:DD:53
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/dnNEUJFvNl3EnkMDGZdQBg0s3VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:61:62:f2:1f:23:cc:18:05:15:e8:69:fc:92:c9:fe:fa:4a:
0d:db:95:57:70:6e:38:e9:e6:97:71:26:28:4e:13:8f:17:86:
a5:ec:fd:92:3b:3d:f9:32:a6:49:af:ac:14:19:83:59:94:d3:
65:82:f7:8e:bb:4d:9e:e8:37:54:c5:c1:49:76:bb:75:b8:a3:
1c:e5:12:d1:f4:6c:e4:30:83:15:1c:67:ab:2f:24:db:cd:1b:
09:ef:60:bf:cf:32:4a:10:6b:3d:3d:23:3e:51:c5:da:6b:f2:
9c:d8:97:68:85:33:de:67:7c:ec:02:77:55:26:a5:5e:08:47:
2b:ee:61:c7:ef:fd:96:7e:60:3b:6b:24:66:de:9d:0d:f2:ae:
e2:58:d7:dc:32:73:1e:ee:ea:72:2c:2e:f9:f5:64:1d:d1:88:
72:c8:af:87:93:74:4b:81:d0:e4:84:ea:a6:1a:c8:d7:6e:b5:
ae:93:70:3b:7f:7a:97:51:61:ce:dc:f3:b9:a9:db:f8:af:24:
e4:6d:5a:73:89:54:4a:2e:6f:2b:44:6a:12:1d:5e:4f:6b:2f:
60:63:cd:f6:7a:65:90:36:08:05:93:b4:69:2a:af:e9:2c:99:
57:f0:ae:ad:74:8a:47:b4:9c:69:45:0a:af:18:f1:46:41:c0:
66:d1:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:09 2024 by rpki-client on console-ams.rpki-client.org