Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/dBFv84Y7dpNoAjH3xcMGGBxSCMc.roa
File: dBFv84Y7dpNoAjH3xcMGGBxSCMc.roa (raw, json)
Hash identifier: nIyHsYBzi6pktIAdVRI2dLuh/t8GBp56Xt7tgIBVzQg=
Subject key identifier: 74:11:6F:F3:86:3B:76:93:68:02:31:F7:C5:C3:06:18:1C:52:08:C7
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 118BEE7D
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/dBFv84Y7dpNoAjH3xcMGGBxSCMc.roa
Signing time: Wed 23 Feb 2022 15:33:17 +0000
ROA not before: Wed 23 Feb 2022 15:33:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47638
IP address blocks: 91.229.174.0/23 maxlen: 24
91.237.197.0/24 maxlen: 24
185.59.204.0/22 maxlen: 24
23.90.64.0/22 maxlen: 24
2a02:6da0::/32 maxlen: 32
2001:67c:248c::/48 maxlen: 48
2a02:6da0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294383229 (0x118bee7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Feb 23 15:33:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74116ff3863b7693680231f7c5c306181c5208c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:c8:8e:87:be:76:30:cb:43:2d:d5:5a:91:
c1:32:dd:09:9d:a2:a4:73:d4:be:34:41:9d:53:33:
46:60:7b:b2:59:b4:90:6a:4d:75:b8:b6:59:23:0c:
a0:34:4f:c9:bf:52:c4:0a:28:aa:85:8d:bc:96:29:
e5:25:b2:92:13:72:fc:48:7a:ba:cc:9d:4c:9a:c3:
d8:b1:7e:89:97:20:60:bf:b6:b0:a6:b1:d0:36:30:
b7:fa:91:5d:a4:12:b9:69:be:ac:01:d1:7a:5e:9c:
c1:46:49:60:37:77:e0:8a:80:eb:48:c6:b7:fd:0c:
2e:3d:83:15:ef:9e:c0:ff:f8:1d:b1:93:07:c2:70:
b8:ee:16:df:a3:4a:6c:4b:a9:85:f2:5c:02:c4:e0:
04:3c:ac:ec:6f:e2:da:7a:07:37:12:1a:1d:54:f2:
5f:4c:95:25:7f:92:59:71:05:0a:33:7b:a8:0d:05:
ed:cc:8b:04:49:bb:07:e3:b7:01:57:7b:cd:d6:50:
6b:34:d0:44:f6:e7:21:37:c7:38:3c:f2:32:49:17:
40:db:8c:f1:f1:ba:0f:07:b9:be:48:de:ff:40:4a:
de:75:26:51:a8:83:27:b1:e2:21:7f:07:41:0c:ba:
cd:81:8b:3b:64:12:17:4f:a1:23:ed:b4:73:c5:ec:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:11:6F:F3:86:3B:76:93:68:02:31:F7:C5:C3:06:18:1C:52:08:C7
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/dBFv84Y7dpNoAjH3xcMGGBxSCMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.90.64.0/22
91.229.174.0/23
91.237.197.0/24
185.59.204.0/22
IPv6:
2001:67c:248c::/48
2a02:6da0::/29
Signature Algorithm: sha256WithRSAEncryption
33:99:66:32:06:65:73:dc:37:31:ee:12:0d:aa:9c:e1:7a:85:
02:2e:ca:d2:f2:04:82:98:43:a6:ed:5c:29:6b:7d:b7:1e:61:
05:88:7e:cf:56:f5:8a:40:85:0f:c9:67:5d:97:53:7b:f1:5d:
d8:aa:e9:d2:32:54:21:0e:e2:d6:17:0d:7d:c8:56:50:f3:15:
12:13:bb:4d:fb:33:5d:28:99:ae:df:36:a9:17:80:5e:9d:da:
4d:c2:ec:24:3a:16:91:c5:45:3b:f2:d7:93:60:b5:62:02:64:
a9:95:9c:3d:0f:d6:c6:f5:67:92:98:19:d0:77:34:93:d4:8f:
77:07:ce:7b:07:9a:63:27:11:d9:0e:f4:b3:95:11:ed:ed:6e:
1a:33:b9:f4:fb:e8:4c:62:5a:6c:cc:02:ad:50:67:95:d8:f5:
9f:05:79:c1:2f:52:c3:9f:25:e0:f0:f9:1e:16:f6:83:85:14:
2b:a5:1a:91:7b:fe:1d:1d:b6:fa:3a:25:8f:d4:8a:17:66:53:
3e:b7:50:6e:cf:36:f0:27:0f:d7:29:8d:c8:b7:d7:f6:be:bb:
ae:bb:4e:2a:00:68:69:7d:4b:98:34:43:d9:33:05:b0:3e:97:
54:e1:bb:7c:14:ee:b2:bc:18:3d:63:67:c3:e2:9a:68:8e:5b:
06:9a:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:13 2025 by rpki-client