Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/DWvoHSoxZjJB6im4JMXTzgktwN0.roa
File: DWvoHSoxZjJB6im4JMXTzgktwN0.roa (raw, json)
Hash identifier: MwXMZyUDvXYUaMy5gJZVt6n8gOQZOw7KTU9zhcyjkRU=
Subject key identifier: 0D:6B:E8:1D:2A:31:66:32:41:EA:29:B8:24:C5:D3:CE:09:2D:C0:DD
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0892CC2A
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/DWvoHSoxZjJB6im4JMXTzgktwN0.roa
Signing time: Sat 01 Jan 2022 03:51:02 +0000
ROA not before: Sat 01 Jan 2022 03:51:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206198
IP address blocks: 84.245.88.0/23 maxlen: 23
85.248.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143838250 (0x892cc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 03:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d6be81d2a31663241ea29b824c5d3ce092dc0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c9:3b:19:16:1f:8f:77:aa:3f:03:76:d9:08:
57:8b:8b:0c:c7:86:6a:f1:ef:67:da:fd:51:b4:a4:
75:71:56:bc:a9:0e:61:3c:87:9a:71:06:03:16:fa:
8b:6a:b7:a9:1d:2b:79:28:9c:0a:84:a3:98:4c:3c:
79:8e:4b:ef:2d:eb:c9:a5:d5:0f:04:cb:7e:bd:33:
75:4a:57:cb:22:63:89:ab:dc:04:44:12:ba:7c:e4:
18:7b:7b:66:ce:26:a5:e3:8a:5a:e8:aa:c1:08:1d:
4c:0a:f8:07:55:c0:0a:a8:84:60:a3:44:8a:20:4a:
11:92:09:bb:c6:50:3e:ed:01:d4:93:1f:c7:24:ac:
ba:a0:3e:67:be:13:c5:6f:35:53:4f:25:cb:f0:9f:
f4:00:32:1f:41:8a:4a:67:80:44:46:62:6a:dc:79:
7c:0a:f0:62:cc:b4:2a:40:a2:d7:44:c3:ba:48:1d:
e2:b5:25:ab:75:f6:9c:d1:c6:97:cb:d5:fa:0c:13:
b2:53:e0:ab:0a:35:65:d8:c4:b0:b3:8d:39:a6:df:
77:d1:cd:cc:92:85:91:1f:9e:6c:6e:9e:22:b1:91:
25:4d:5b:39:11:93:45:bb:57:7b:4e:e9:e2:64:84:
a2:53:04:4e:3d:6f:8f:1f:60:de:1e:a5:6e:8e:6f:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:E8:1D:2A:31:66:32:41:EA:29:B8:24:C5:D3:CE:09:2D:C0:DD
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/DWvoHSoxZjJB6im4JMXTzgktwN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.88.0/23
85.248.24.0/22
Signature Algorithm: sha256WithRSAEncryption
46:05:a4:25:c0:7e:7b:45:fe:23:3c:48:0e:03:22:aa:e6:9f:
f6:9e:78:d1:ad:ef:ef:51:b8:5f:96:83:d0:23:dc:7b:5e:de:
9b:99:66:c5:32:11:19:26:64:83:75:0f:70:a4:87:39:c7:9e:
d6:0e:42:e7:82:3e:50:40:43:93:4e:25:88:12:36:96:6c:26:
10:69:c4:75:dd:db:10:f7:c6:29:18:4d:be:c4:dc:8d:76:39:
27:51:f9:3d:63:b3:e2:e2:f6:4d:87:7f:e3:2d:a1:77:4c:1f:
e9:a5:fa:41:ec:f9:76:b6:5e:b8:d2:6f:41:81:1c:ae:46:aa:
11:81:b8:61:51:93:3b:6e:33:88:17:86:3d:1a:50:5e:6d:7e:
8a:71:66:48:d6:f7:33:66:61:88:83:54:82:4f:cd:57:bb:fe:
de:02:dd:3a:e4:a9:13:bb:07:74:09:f9:c5:03:37:3b:7c:7b:
da:93:e3:c4:1d:86:50:38:d8:15:e3:aa:21:98:9b:b1:68:b2:
8b:28:ee:7a:8a:4f:6f:58:4a:66:f3:9c:bd:a7:e5:71:56:a5:
5c:5d:13:90:fc:0e:03:51:8a:da:df:44:71:73:ba:6b:4c:cb:
36:12:d7:09:2a:e2:ce:a1:20:15:b6:d2:73:f8:92:51:34:6b:
ba:3c:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:23 2023 by rpki-client on console-fra.rpki-client.org