Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/DMIVCuQfuWwhLxcDceMBPTJ9naQ.roa
File: DMIVCuQfuWwhLxcDceMBPTJ9naQ.roa (raw, json)
Hash identifier: pf4ex2NPZ+aCx9uw27H7xwzoktrIkMbbbbavaVVYzU4=
Subject key identifier: 0C:C2:15:0A:E4:1F:B9:6C:21:2F:17:03:71:E3:01:3D:32:7D:9D:A4
Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial: 0928CB92
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/DMIVCuQfuWwhLxcDceMBPTJ9naQ.roa
Signing time: Sat 01 Jan 2022 13:58:26 +0000
ROA not before: Sat 01 Jan 2022 13:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198970
IP address blocks: 194.49.126.0/24 maxlen: 24
185.159.116.0/24 maxlen: 24
185.159.117.0/24 maxlen: 24
185.159.118.0/24 maxlen: 24
185.159.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153668498 (0x928cb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Validity
Not Before: Jan 1 13:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc2150ae41fb96c212f170371e3013d327d9da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:ad:4b:99:02:6d:d3:e9:b2:bb:07:72:8b:
e8:8a:36:67:0f:11:da:31:3e:0e:5a:17:ed:23:84:
e5:17:80:66:64:35:e6:7c:52:69:b3:bc:77:57:40:
47:7e:c9:2d:45:39:21:e4:68:ea:73:9d:b7:43:1f:
a9:eb:51:bb:5f:77:f4:51:0c:3e:27:50:04:f7:40:
54:56:ff:f0:e3:9c:a9:8e:0c:9f:fe:e1:1c:f6:6a:
bd:9a:bb:75:22:37:17:f2:ec:e0:59:49:91:a3:ee:
93:86:04:4d:3b:86:b8:08:a4:56:e0:62:e8:c7:8c:
35:cf:fb:c5:fc:bc:a2:09:70:b8:52:c2:59:13:d5:
84:a4:4f:8f:f3:a9:cb:d8:06:e6:cc:9a:ad:c0:9c:
0a:51:84:f0:ec:4d:53:b0:d5:22:9d:16:d7:1b:a9:
ef:54:a1:45:7e:33:7f:b6:40:6b:59:8f:78:12:0b:
b7:d4:6b:67:67:f5:f7:3e:80:ec:e5:c1:6c:51:4f:
1e:15:61:20:99:ca:85:75:e4:3a:4b:98:0a:ba:0e:
8f:22:0b:6a:d3:84:66:6e:c2:85:ab:0f:a0:ef:91:
12:3c:08:50:4d:1e:c4:6c:44:04:5e:9d:9f:48:96:
62:d5:25:de:49:d0:98:51:fd:f0:26:3f:1a:26:cf:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:15:0A:E4:1F:B9:6C:21:2F:17:03:71:E3:01:3D:32:7D:9D:A4
X509v3 Authority Key Identifier:
keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/DMIVCuQfuWwhLxcDceMBPTJ9naQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.116.0/22
194.49.126.0/24
Signature Algorithm: sha256WithRSAEncryption
33:58:b7:d3:5b:c0:85:90:e8:45:3c:2e:a3:36:63:97:da:3f:
63:d2:2d:16:ac:dd:48:8d:2d:08:86:fe:21:83:da:fd:3c:69:
1b:e3:45:47:bc:c4:73:10:54:93:5b:22:5b:a6:b1:7e:bf:99:
45:26:e5:15:45:6d:fb:71:b0:57:d5:07:13:fc:a7:d4:c8:bf:
bb:8d:83:1a:92:03:6a:db:56:2c:49:f6:96:a0:7e:63:c9:99:
7f:72:55:38:4e:00:9b:95:39:9d:0f:38:62:83:26:df:3a:dc:
42:42:72:c8:00:61:22:c9:d1:0c:3e:c1:f5:27:7e:d1:6e:df:
e4:82:72:80:bc:6c:b8:d1:33:47:19:dd:2d:e2:35:de:0b:9e:
60:4d:08:5b:b7:fc:e2:49:c2:38:5f:20:6b:2d:e0:50:d2:18:
02:20:a1:90:cb:d8:6a:ed:99:8e:49:ba:90:22:4c:55:d7:78:
6e:c0:82:25:28:55:9d:9c:79:b2:2b:f8:bb:d9:79:00:36:56:
a5:fd:67:33:41:e5:20:cc:64:ae:88:db:41:82:10:20:10:26:
01:43:b3:96:de:e6:a2:57:6a:7a:c7:ee:16:04:00:c0:53:c4:
46:09:d8:91:d2:a8:b5:74:da:c4:37:04:db:c9:9d:4f:6f:e2:
a2:da:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:17 2023 by rpki-client on console-ams.rpki-client.org