Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/DMMT3jkMUUhd6bLHa5dTdWUEqew.roa
File: DMMT3jkMUUhd6bLHa5dTdWUEqew.roa (raw, json)
Hash identifier: ozDCRLnhmQM2njQmui4wZrPMwxTqmwgZ5wRg3EiYMW0=
Subject key identifier: 0C:C3:13:DE:39:0C:51:48:5D:E9:B2:C7:6B:97:53:75:65:04:A9:EC
Certificate issuer: /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial: 0183F0A8675B495CAAF77285A4E27CFF6DDC
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/DMMT3jkMUUhd6bLHa5dTdWUEqew.roa
Signing time: Wed 19 Oct 2022 14:31:51 +0000
ROA not before: Wed 19 Oct 2022 14:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30742
IP address blocks: 80.245.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:a8:67:5b:49:5c:aa:f7:72:85:a4:e2:7c:ff:6d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Validity
Not Before: Oct 19 14:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc313de390c51485de9b2c76b9753756504a9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:67:f2:e7:11:5f:62:f4:11:54:82:6f:61:
99:e0:86:9e:29:d1:5a:1f:a2:b7:47:c1:44:67:89:
6b:04:f1:90:e1:2e:d3:ed:f0:d2:e3:3b:92:69:4f:
69:4e:67:e2:b7:9d:bd:d4:f2:9b:14:05:72:2a:9d:
c0:7c:be:f1:2e:6d:53:78:75:9b:a9:4f:cc:cf:c7:
f7:ce:e6:40:a4:3e:c2:bc:9a:4a:1e:d7:3b:06:41:
2d:41:8c:b0:0d:02:42:98:8a:f6:2b:21:1c:29:8c:
97:c6:4e:ff:22:5e:f0:88:c3:cb:93:14:f1:22:d9:
8b:3c:66:b2:3e:d4:77:fa:1d:e6:eb:b3:9e:79:1f:
f4:bb:92:89:4d:69:4e:27:f4:2c:ba:05:5f:c1:c9:
79:dc:30:20:d5:b2:5c:f7:c3:8a:44:3a:c5:84:ea:
98:c9:fa:db:95:dc:35:a5:39:9b:0a:f8:25:75:d3:
a9:35:d6:d0:3f:93:e5:5c:95:ce:5d:7f:67:cb:65:
be:1a:33:00:3e:2f:2d:71:49:70:3b:4d:bf:e5:e2:
a4:2b:5a:04:37:07:23:a2:8d:36:c3:3e:62:4e:e5:
a0:c7:3a:15:89:bd:97:4a:91:17:7f:3d:97:cb:8e:
07:9a:57:0f:55:3f:12:9d:7d:40:34:75:da:67:e8:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C3:13:DE:39:0C:51:48:5D:E9:B2:C7:6B:97:53:75:65:04:A9:EC
X509v3 Authority Key Identifier:
keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/DMMT3jkMUUhd6bLHa5dTdWUEqew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.128.0/22
Signature Algorithm: sha256WithRSAEncryption
67:74:da:48:d5:10:8e:87:94:d6:90:b6:26:27:71:18:f2:d9:
7e:f5:fe:de:ce:d4:07:12:ee:ea:88:06:a5:0e:73:fb:1d:b9:
4e:16:ba:41:7f:92:ae:58:12:a0:98:d5:14:b6:a9:2f:1d:07:
48:37:ae:2c:12:46:87:ae:d5:e8:b8:c2:77:73:72:3b:96:9b:
12:07:ed:52:16:a7:87:90:72:95:8f:ab:5a:8a:f7:cd:8b:2f:
78:e9:f1:88:33:13:75:2f:a4:74:04:9d:6e:69:7e:10:d8:e4:
5b:02:ba:1d:a9:8f:f8:77:16:2b:ea:bb:8d:95:bf:78:01:88:
8b:c0:ee:18:63:c3:2b:ca:b2:1a:06:e6:18:42:69:0d:54:fd:
66:66:e2:05:67:78:a3:83:dd:9d:43:0d:34:89:ac:e1:cb:ce:
80:b9:0e:3c:0b:33:30:85:a0:43:46:5a:81:c9:34:59:a2:8a:
df:4c:7c:76:45:b4:fc:58:5e:08:8c:93:6a:57:c3:6c:31:c8:
ae:e2:a0:81:71:73:cb:3e:fc:61:ca:ef:f8:92:b9:2c:02:a6:
b2:45:c5:77:e2:c0:b6:d8:f6:b8:51:1b:8e:52:90:59:74:29:
f8:54:11:83:f7:48:21:e6:f9:94:6c:f6:28:dc:ab:70:40:28:
25:bf:29:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:51 2025 by rpki-client