Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/DC1tT1cZx6xGNc2hAmeBtkqxwlc.roa
File: DC1tT1cZx6xGNc2hAmeBtkqxwlc.roa (raw, json)
Hash identifier: jRFM6NVIjCWSxCjJWeYf8G67mttJYWF8GnQDPBOfdX4=
Subject key identifier: 0C:2D:6D:4F:57:19:C7:AC:46:35:CD:A1:02:67:81:B6:4A:B1:C2:57
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 01857315D4BEC09FAE364F5F78C1E5F0D0A3
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/DC1tT1cZx6xGNc2hAmeBtkqxwlc.roa
Signing time: Mon 02 Jan 2023 15:24:48 +0000
ROA not before: Mon 02 Jan 2023 15:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202220
IP address blocks: 195.82.166.0/24 maxlen: 24
195.82.162.0/24 maxlen: 24
83.230.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:d4:be:c0:9f:ae:36:4f:5f:78:c1:e5:f0:d0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 2 15:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c2d6d4f5719c7ac4635cda1026781b64ab1c257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:45:27:ae:36:34:86:aa:64:cf:26:2b:d8:
1c:02:45:9b:50:26:5d:54:3b:f9:00:25:33:5a:d5:
46:22:67:e2:37:9f:50:a1:91:29:d2:7c:6a:7b:e0:
a6:d1:9f:53:e0:79:c5:18:eb:65:63:f6:f4:42:d1:
42:02:33:60:be:91:6b:17:11:5b:43:38:63:fd:4a:
3f:42:b2:ed:f8:e0:d9:f9:6e:cc:f6:9b:ac:79:bf:
19:cd:53:fc:19:8d:eb:9e:03:43:23:a1:ed:d3:70:
e5:e8:ac:ae:1c:fa:31:1b:ab:22:9a:a1:63:81:f3:
93:1a:a8:0d:db:68:35:ab:06:46:61:dc:49:a6:25:
13:0b:de:4d:e7:a1:ff:88:7c:82:08:82:82:fb:86:
db:3c:dc:37:e6:92:18:dc:2e:6a:59:55:f2:5c:3f:
03:28:96:18:f5:2c:40:15:bb:f5:9d:9f:91:43:1a:
4f:04:e4:01:01:02:79:2f:3e:97:d1:28:31:e6:4e:
92:4b:fb:56:d7:9d:95:61:50:24:86:13:57:c0:01:
b6:32:38:1f:5f:3b:db:87:3d:0b:2b:c7:75:c7:58:
29:da:f6:f3:a3:90:5f:5d:61:3d:b3:f2:a2:d0:77:
d0:ef:5a:f4:c0:2e:a0:e5:c6:1f:b2:8c:6a:a8:42:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2D:6D:4F:57:19:C7:AC:46:35:CD:A1:02:67:81:B6:4A:B1:C2:57
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/DC1tT1cZx6xGNc2hAmeBtkqxwlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.230.14.0/24
195.82.162.0/24
195.82.166.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f6:60:e9:74:2c:6d:d5:6b:db:cb:50:57:1d:e0:de:9b:e0:
fd:90:46:dc:55:3d:3e:0b:54:aa:6a:76:84:80:c7:e4:47:33:
18:95:5f:a0:92:60:0d:9d:38:31:15:92:59:34:25:e0:fd:eb:
a8:07:e0:3b:2d:ba:cb:99:ce:17:05:b9:61:21:9a:39:fb:30:
75:d9:54:69:59:42:59:ad:41:98:e0:68:72:6a:d6:37:29:48:
76:37:25:15:21:8c:6b:c8:f1:ef:8a:6e:04:ac:11:48:c7:68:
6a:5a:af:a2:ef:26:7a:42:d6:6e:85:a4:22:6d:9b:7a:44:db:
ef:53:20:c8:3b:68:5e:71:b0:a9:82:43:ae:2f:06:9e:f0:bb:
c8:b0:ac:92:a0:96:48:e8:e6:de:79:d5:f3:ed:3f:a6:66:16:
92:8a:da:6b:bc:5e:78:eb:72:ad:8c:d4:9b:60:6c:a0:3f:33:
34:46:57:5b:b6:b5:44:e0:89:26:0c:9e:ec:95:63:f9:98:51:
4d:af:02:a5:cd:46:33:aa:98:06:c6:b6:d7:64:8b:52:27:79:
9e:9e:c0:e3:8f:a0:0c:6d:50:17:7a:b2:8b:09:b4:2c:27:5d:
d8:2f:38:38:3c:ee:fe:48:61:ea:55:64:75:a2:31:e0:2a:27:
9f:b4:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:49 2025 by rpki-client