Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/dm-FtPL_aWz83scuXq1WDg8s9W0.roa
File: dm-FtPL_aWz83scuXq1WDg8s9W0.roa (raw, json)
Hash identifier: o1rrpc2eTFwhIUapyV8c896+UoO/AVSoe3ounC+mKeU=
Subject key identifier: 76:6F:85:B4:F2:FF:69:6C:FC:DE:C7:2E:5E:AD:56:0E:0F:2C:F5:6D
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 0787FAC5
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/dm-FtPL_aWz83scuXq1WDg8s9W0.roa
Signing time: Sat 01 Jan 2022 09:53:49 +0000
ROA not before: Sat 01 Jan 2022 09:53:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49435
IP address blocks: 31.47.224.0/21 maxlen: 24
151.237.248.0/21 maxlen: 24
185.108.184.0/22 maxlen: 24
188.94.112.0/21 maxlen: 24
2a02:2260::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126352069 (0x787fac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: Jan 1 09:53:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=766f85b4f2ff696cfcdec72e5ead560e0f2cf56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:8e:6f:fc:8c:e4:a8:27:24:42:0b:d9:29:
8e:17:e0:a5:d6:41:b7:a7:30:fe:1f:8d:0a:69:8e:
6d:ed:80:57:6f:29:33:b1:1a:b5:b4:5d:61:e9:d1:
40:7c:e6:be:e2:19:62:30:7b:01:3f:9c:8b:62:17:
d0:2f:63:54:64:41:93:f7:3c:97:ca:41:0b:df:34:
9d:8b:7c:3d:20:a8:6f:36:d0:04:d6:8c:5c:01:1e:
42:27:68:3b:40:6a:81:ba:af:28:af:9a:4e:51:c2:
bd:26:d4:79:38:60:ee:67:37:60:f0:0a:13:66:3c:
ea:65:2f:ba:82:43:2f:f5:7a:9d:12:45:b4:94:60:
be:ab:76:02:41:52:bd:b6:4f:8d:ce:35:75:41:f5:
41:7b:7b:74:2b:91:c5:0a:c6:37:e9:02:bf:3b:ca:
35:05:44:cc:dc:dd:3f:5c:de:42:10:36:1a:be:1e:
5e:ff:d9:8d:03:41:44:83:7b:98:0c:d7:56:9f:da:
62:b7:b2:95:59:6d:df:9f:b6:19:fd:a6:d1:64:ce:
48:6f:06:b6:9d:09:81:b3:10:c0:43:a2:5c:4d:6e:
ac:14:72:9c:04:d3:fe:22:81:f5:70:1d:73:26:26:
80:6d:38:ad:cf:19:cf:d1:dc:ce:06:61:26:95:61:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6F:85:B4:F2:FF:69:6C:FC:DE:C7:2E:5E:AD:56:0E:0F:2C:F5:6D
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/dm-FtPL_aWz83scuXq1WDg8s9W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.224.0/21
151.237.248.0/21
185.108.184.0/22
188.94.112.0/21
IPv6:
2a02:2260::/32
Signature Algorithm: sha256WithRSAEncryption
ac:6b:6d:ff:77:54:eb:38:ad:4b:f3:91:ad:66:e0:44:c2:88:
3c:40:3a:e1:9e:f0:ab:d2:25:3b:50:73:65:b0:06:79:73:f9:
2c:02:e9:e3:5a:fc:fd:cd:94:62:89:6d:06:e7:86:54:4d:77:
7d:49:0d:fd:20:bf:03:66:99:ae:85:b5:86:eb:06:7c:f5:01:
f8:96:c3:b8:db:2a:07:7a:bf:54:89:61:01:41:c3:16:e6:8f:
97:06:67:9f:c2:f9:ed:7d:69:c4:ff:8a:28:5f:32:bc:c6:91:
79:0a:db:32:0b:28:d2:72:cb:64:17:35:63:e1:cb:39:cb:75:
46:ef:1c:05:67:9e:56:58:df:e8:20:ee:cb:ab:b7:65:d2:be:
dc:c4:80:2e:f8:f7:34:6d:5c:af:ce:52:f6:60:10:93:56:1a:
b3:a8:e1:08:e8:b2:13:46:34:00:91:ae:b4:6b:22:8a:76:68:
61:4d:64:d2:ad:28:d2:ef:95:b4:bf:38:c5:72:37:2b:1c:b5:
ec:0e:e3:aa:08:b0:6b:17:33:e6:d2:4c:01:07:af:69:05:43:
ee:23:b8:21:26:cd:29:cc:32:3f:be:f0:bc:4d:d2:93:10:b0:
76:4d:41:4c:cb:60:64:82:ab:19:5b:3e:34:ee:df:d7:5c:5b:
64:1b:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:51 2024 by rpki-client on console-ams.rpki-client.org