Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/DG1TKWMFQ0P9Pj-tq_S3Xd7rA34.roa
File: DG1TKWMFQ0P9Pj-tq_S3Xd7rA34.roa (raw, json)
Hash identifier: tE+eVtBLV2rwWUrLXALM5nX+LfRA2M1B32UgIm4ULLo=
Subject key identifier: 0C:6D:53:29:63:05:43:43:FD:3E:3F:AD:AB:F4:B7:5D:DE:EB:03:7E
Certificate issuer: /CN=da01323efafee332064e278b97cb8d1f9d8fef79
Certificate serial: 0182F2A8755F844180024138CECDACADEB37
Authority key identifier: DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/DG1TKWMFQ0P9Pj-tq_S3Xd7rA34.roa
Signing time: Wed 31 Aug 2022 06:48:22 +0000
ROA not before: Wed 31 Aug 2022 06:48:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35112
IP address blocks: 188.244.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:a8:75:5f:84:41:80:02:41:38:ce:cd:ac:ad:eb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da01323efafee332064e278b97cb8d1f9d8fef79
Validity
Not Before: Aug 31 06:48:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c6d532963054343fd3e3fadabf4b75ddeeb037e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:3b:3b:6f:ad:9a:63:01:f3:8a:8a:83:d9:
08:e6:67:da:aa:bf:02:e1:89:4c:3a:1a:c5:eb:05:
29:a4:4a:bf:66:5d:fe:fa:41:87:1b:0c:d9:23:7c:
27:54:d9:f3:82:0e:a7:36:e6:fb:9b:ca:4b:db:d7:
32:d3:f4:50:f8:a1:c0:9c:db:64:52:c7:2e:cd:4f:
24:0b:5c:91:52:57:b2:e1:ab:4b:b2:26:3c:97:ac:
1c:5a:61:ed:5e:f5:44:01:cc:7e:fa:13:9d:f2:05:
ad:21:43:a4:fc:da:03:0c:01:f7:cc:79:64:ab:17:
9a:89:bc:5b:3c:52:c2:4a:35:54:72:78:94:e1:bc:
6d:3d:2e:37:78:f2:1a:58:94:d7:ba:45:e0:e9:8d:
c2:02:d2:e5:3a:ee:9c:65:9e:83:e4:c8:5d:cb:bc:
eb:0d:2f:6d:85:8e:bd:4d:9a:59:e5:56:c3:c1:2d:
3c:e0:73:7e:1a:32:25:92:e2:cf:73:05:18:f9:9c:
df:04:56:1f:c0:1f:7a:5c:16:c9:64:4a:9e:73:6b:
c4:ef:0d:41:7e:b0:d4:23:9e:59:7d:3d:2a:30:a7:
f8:1d:75:8d:73:25:88:5f:33:c5:6b:32:bc:e8:10:
6c:a7:60:c5:c5:f8:c9:0f:b0:e6:cd:f8:35:4d:cc:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:53:29:63:05:43:43:FD:3E:3F:AD:AB:F4:B7:5D:DE:EB:03:7E
X509v3 Authority Key Identifier:
keyid:DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/DG1TKWMFQ0P9Pj-tq_S3Xd7rA34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fc:7b:91:54:b2:c8:08:b9:0d:87:a4:09:c2:29:ec:f7:6a:
6f:1c:91:c8:a7:51:c1:30:b2:8f:84:11:22:00:40:d0:8b:bf:
4a:c9:4e:67:a6:84:c6:5d:a3:6d:dd:3c:a7:8f:10:82:4a:5a:
a6:50:22:a0:e6:eb:9b:83:36:77:a9:ca:5b:4e:24:82:51:8b:
6a:56:d7:c4:28:8a:d7:3b:b4:cf:07:5a:42:74:1f:f6:8f:d6:
e4:40:3f:25:c1:7d:a5:55:33:c0:4d:9d:9f:de:3e:f4:05:e2:
99:cc:e6:27:7f:da:20:1c:58:46:f2:8d:c2:26:be:f6:bc:85:
d2:b2:d9:44:0b:0a:15:c1:0a:82:ae:06:19:a7:9f:03:44:11:
aa:9f:56:54:62:8d:e8:52:7b:0a:55:f3:44:fd:b0:9f:1b:44:
1f:2c:d6:01:0d:66:07:ee:3b:2d:f3:03:06:c1:7d:81:bc:88:
cb:92:01:16:0b:69:ce:a7:ea:c3:0c:5c:0d:af:98:16:a7:6d:
9a:59:47:ba:e3:75:c0:41:07:e6:c8:ac:8b:a4:29:cc:a1:13:
39:b6:ec:12:d1:69:5a:5b:7c:24:09:1a:a6:6b:2f:6a:a0:28:
d3:ce:78:8a:3f:eb:e8:c8:44:17:b4:a6:51:f6:3e:14:83:dc:
00:4b:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:11 2023 by rpki-client on console-fra.rpki-client.org