Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/DtVkUbQJMYUi3QmbwSvWMJYQALo.roa
File: DtVkUbQJMYUi3QmbwSvWMJYQALo.roa (raw, json)
Hash identifier: sajTtLtoBiFBqnItnOoP1acaCEomHzdHa9LRyD3AjW8=
Subject key identifier: 0E:D5:64:51:B4:09:31:85:22:DD:09:9B:C1:2B:D6:30:96:10:00:BA
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 0C2FD17D
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/DtVkUbQJMYUi3QmbwSvWMJYQALo.roa
Signing time: Sat 01 Jan 2022 12:05:57 +0000
ROA not before: Sat 01 Jan 2022 12:05:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197190
IP address blocks: 185.209.217.0/24 maxlen: 24
185.209.219.0/24 maxlen: 24
185.209.216.0/24 maxlen: 24
185.209.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204460413 (0xc2fd17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Jan 1 12:05:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ed56451b409318522dd099bc12bd630961000ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:a9:8e:f0:49:d5:bf:c1:f7:33:41:17:0c:
45:00:13:70:72:2f:41:11:c8:84:2b:54:c0:5a:f1:
f3:ff:26:b4:ba:82:0e:81:25:84:85:61:32:c7:63:
55:b0:1e:b9:52:a0:a0:38:f3:c7:2d:48:73:3a:2d:
15:a8:3c:1a:bf:9f:ee:66:fd:f9:e9:36:cf:d7:8e:
aa:3e:ae:f7:2a:4f:0d:25:43:73:27:be:e3:bc:3d:
f1:7a:d8:7d:a7:30:91:9b:dd:ce:82:a7:de:30:b1:
63:a7:2a:17:be:98:5d:75:ca:bd:8a:eb:f2:d3:68:
a9:ef:0c:f2:99:33:8b:70:20:4d:a7:eb:1c:dd:53:
f6:52:99:5b:f2:41:74:16:86:97:a3:2a:a7:b3:6d:
78:0f:35:3f:7f:ed:c6:da:f2:b5:35:05:c4:2a:c8:
bc:d3:9e:64:d4:6f:e0:e6:0c:24:f2:6e:e4:0e:87:
bc:f6:c8:e0:83:c6:8b:8b:88:af:83:cc:36:bb:d8:
78:56:b5:65:a3:db:68:5e:04:2b:fc:9d:d1:12:1e:
65:c3:43:0c:b6:fb:24:a8:8c:80:4d:59:b9:60:4c:
fa:c6:63:95:71:9c:2b:5c:e2:1a:e3:4d:f2:bb:8e:
95:b6:ed:6b:c9:4c:ca:4e:2b:86:aa:1b:78:ac:93:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D5:64:51:B4:09:31:85:22:DD:09:9B:C1:2B:D6:30:96:10:00:BA
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/DtVkUbQJMYUi3QmbwSvWMJYQALo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.216.0/22
Signature Algorithm: sha256WithRSAEncryption
57:c8:4d:35:93:8a:64:db:87:48:a2:3d:46:01:e6:81:5b:77:
b9:c2:bd:9b:db:ca:64:3b:d1:41:91:9c:9e:68:8f:f8:e0:7c:
30:d5:de:a4:75:1e:1e:65:b6:54:7b:b5:46:92:70:45:a5:cd:
e6:97:d2:57:00:da:41:8a:04:c3:bc:9f:56:70:01:75:b3:01:
cd:1e:44:75:0f:e2:86:3a:6d:2e:1b:13:99:ef:b8:72:a5:7c:
22:ba:43:5b:d3:6d:fc:c9:8c:30:79:bb:01:e0:45:ad:b2:fe:
0a:b6:c4:46:0c:ad:50:7d:3c:a8:63:af:0f:c0:b6:3d:de:61:
95:db:42:1b:27:2a:61:4c:19:6a:51:6d:46:e9:9a:28:53:27:
d6:26:a1:7e:8c:3f:fa:ca:62:03:e5:41:30:5b:7e:9f:ea:6f:
22:6c:e7:b8:e1:d5:48:a0:ba:c3:3c:d4:30:4d:4e:45:b3:6d:
b3:2e:0a:09:76:b8:7e:11:57:8f:5b:a5:39:8b:3f:50:c9:e1:
05:02:27:4d:6c:7c:ec:9d:87:db:e9:fb:09:5c:16:bb:4b:24:
71:1f:45:45:97:10:04:34:86:ba:f4:46:9c:ac:84:e5:6b:21:
70:97:7c:f8:d9:90:52:dc:e1:d2:fb:2d:13:c5:31:68:fc:bd:
6f:5e:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:30 2024 by rpki-client on console-ams.rpki-client.org