Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/DlsbOOSNvTyWyXjSbcuF9l3iEV0.roa
File: DlsbOOSNvTyWyXjSbcuF9l3iEV0.roa (raw, json)
Hash identifier: ZYIftglp0Ehim/vfcw3eggQk2OGUXHN7T4idN8xCZ4U=
Subject key identifier: 0E:5B:1B:38:E4:8D:BD:3C:96:C9:78:D2:6D:CB:85:F6:5D:E2:11:5D
Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial: F7677E
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/DlsbOOSNvTyWyXjSbcuF9l3iEV0.roa
Signing time: Sat 01 Jan 2022 01:57:13 +0000
ROA not before: Sat 01 Jan 2022 01:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48312
IP address blocks: 194.26.116.0/24 maxlen: 24
91.207.140.0/23 maxlen: 24
91.202.234.0/23 maxlen: 24
2a11:1a00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16213886 (0xf7677e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Validity
Not Before: Jan 1 01:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e5b1b38e48dbd3c96c978d26dcb85f65de2115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:23:99:ea:20:a3:af:4f:ab:cd:49:92:3b:
5a:d1:7c:c7:ac:a0:ed:d9:2c:73:c7:92:b8:02:54:
9c:98:40:00:7b:12:44:0c:cf:55:b1:d6:d4:4f:ca:
bb:42:79:84:7a:f8:0c:05:d8:b1:79:2b:a1:7f:71:
e8:14:54:c0:45:5c:b3:72:54:49:4d:59:03:50:a8:
18:4c:c4:fd:6e:d6:80:e7:81:92:38:55:62:d2:63:
93:e7:59:4d:53:22:d0:8d:1c:a5:50:c5:dd:6d:26:
6d:f9:69:c5:2c:82:db:81:d7:5c:b1:75:dd:12:cc:
b5:b3:b1:9e:92:75:c4:5e:65:af:9e:91:29:c4:bc:
be:04:8d:b8:52:5e:fe:de:27:a0:25:26:9c:d5:07:
e7:f3:30:76:84:1d:32:e7:e4:4f:7e:28:7a:24:71:
e6:88:25:cc:08:50:9a:36:b8:04:f6:d6:89:a8:09:
6c:92:aa:c2:10:15:d9:a6:4a:7c:2b:aa:e1:28:ca:
e0:17:3e:92:2e:92:39:2a:3a:97:e4:2c:c7:27:5f:
5b:47:66:2a:56:ad:39:b7:ff:b6:de:0a:eb:85:c0:
1e:49:13:74:1a:0b:57:5e:46:a1:9a:81:b9:00:52:
c1:1a:35:04:1e:16:61:8e:8b:02:25:fb:47:37:f0:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:1B:38:E4:8D:BD:3C:96:C9:78:D2:6D:CB:85:F6:5D:E2:11:5D
X509v3 Authority Key Identifier:
keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/DlsbOOSNvTyWyXjSbcuF9l3iEV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.234.0/23
91.207.140.0/23
194.26.116.0/24
IPv6:
2a11:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
a5:d7:48:f0:ac:6a:2c:c7:d5:8f:fd:9d:e5:58:22:c1:10:00:
30:03:43:c6:a5:06:a1:89:0b:00:4f:06:97:57:b6:ee:be:9e:
8d:69:35:ba:22:7c:e8:3a:a3:b8:cb:3c:41:71:b6:7c:e5:10:
1d:e6:f6:31:05:bd:90:bb:6b:0c:5a:63:23:61:2e:c4:34:13:
5e:c8:25:07:37:93:a6:da:ec:87:b2:1f:a9:da:75:39:fa:da:
35:44:cd:d6:12:f3:c8:8b:f4:5a:e4:01:6e:06:db:d5:36:45:
1a:81:61:a1:81:02:0a:ef:1e:ff:d5:86:4c:66:e7:b6:42:c1:
3a:22:96:29:78:a8:fe:4a:84:f2:6c:46:a2:55:0b:d1:87:a7:
27:97:6a:54:10:f2:fa:20:57:ba:a0:a2:9d:a5:70:a2:85:94:
d1:d3:af:5e:cf:79:09:15:c3:4e:d6:c1:62:38:c8:1f:e8:d0:
bc:33:30:a9:a3:1f:95:df:b2:47:c7:b6:3d:15:58:29:ba:f5:
fc:49:73:cc:37:38:ab:3c:52:8b:c3:97:19:d1:83:62:c6:36:
b6:3c:1b:99:09:e1:28:a0:81:90:68:58:3d:82:20:cc:be:94:
76:2f:ae:d4:a2:be:0e:13:14:41:e4:fb:c0:5e:b7:bc:00:eb:
57:0d:ec:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org