Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/DM8Wl5xFFiJ4fpA4L3C8xPHi3ZI.roa
File: DM8Wl5xFFiJ4fpA4L3C8xPHi3ZI.roa (raw, json)
Hash identifier: 9juv6TP2F1tXKGgcNlFWkFr03rUXCerXVD6pXQzi0R0=
Subject key identifier: 0C:CF:16:97:9C:45:16:22:78:7E:90:38:2F:70:BC:C4:F1:E2:DD:92
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0947A33E
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/DM8Wl5xFFiJ4fpA4L3C8xPHi3ZI.roa
Signing time: Mon 06 Jun 2022 15:01:20 +0000
ROA not before: Mon 06 Jun 2022 15:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210993
IP address blocks: 84.54.36.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
80.76.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155689790 (0x947a33e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jun 6 15:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ccf16979c451622787e90382f70bcc4f1e2dd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:03:e8:98:83:31:46:7b:eb:ac:ee:25:b2:
bf:d9:85:fa:8f:5a:15:7b:ed:49:b9:91:ae:06:92:
05:df:6b:2e:7b:3e:90:88:57:c4:66:1c:ae:be:54:
79:6b:ba:d9:d3:29:b2:08:f6:09:77:65:f3:25:49:
4d:60:89:cc:a0:39:eb:81:21:8a:69:fe:c4:c8:00:
ce:25:98:15:18:46:5a:90:71:66:22:8a:12:f8:8c:
43:dd:3e:5e:d1:e0:33:71:02:ee:32:a1:fe:c7:3e:
6f:dc:07:82:08:bf:1d:a8:6c:8e:90:3c:f6:3e:6b:
c7:df:d8:05:a1:92:46:7d:32:5b:98:95:e0:8c:96:
b0:14:27:0c:f6:a1:ae:0b:80:37:47:b7:40:bf:5f:
f8:a0:9e:a7:01:2a:0d:e5:4f:48:de:c5:2d:31:c8:
5a:f0:f8:4b:63:62:35:df:1a:6f:cc:61:da:af:95:
a4:c4:1e:e5:7b:e2:a7:ba:4f:53:75:ac:d8:85:cf:
9d:8e:33:31:c1:5c:39:98:cb:b9:56:2a:bf:d1:8a:
58:2e:d8:d4:02:0a:ed:6a:4b:d8:b6:c1:5c:d9:cb:
d5:05:86:48:1f:88:c9:35:ba:f8:04:de:a6:f5:4d:
ff:32:ba:bd:d7:54:ec:8b:18:9e:39:ca:a9:d2:93:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:16:97:9C:45:16:22:78:7E:90:38:2F:70:BC:C4:F1:E2:DD:92
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/DM8Wl5xFFiJ4fpA4L3C8xPHi3ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.43.0/24
84.54.36.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:71:7c:85:24:0c:5f:24:e4:fb:b8:a9:51:08:94:b4:ed:40:
ea:1b:1f:31:1e:4e:33:28:e3:dd:db:6e:18:19:85:f5:57:c5:
6e:42:24:ea:11:58:50:bc:5d:66:0d:ee:50:ec:0c:46:84:76:
a3:d2:ad:a0:73:88:d8:e3:c4:d0:fb:58:84:5b:3e:c5:6f:20:
c2:c4:ca:49:1d:4b:36:76:54:25:f0:00:0d:2e:48:cc:b1:8d:
05:3b:45:cd:f8:dc:c2:61:8b:7d:de:82:24:fa:d0:48:03:6d:
66:14:be:48:3e:f7:f3:7b:06:21:98:7a:6c:fa:2f:57:30:89:
03:b4:10:0e:81:dc:12:41:35:24:8e:3b:54:34:48:91:7c:29:
b7:88:01:c2:a0:16:f1:c4:92:c5:a8:8c:ee:1f:a5:41:07:59:
eb:b6:ed:92:4a:22:c8:6d:af:16:d0:f9:ef:ad:09:9c:90:0e:
9f:71:d4:b5:43:6a:48:da:42:b3:45:c8:81:d0:29:02:78:b3:
cc:87:46:32:e0:2f:52:72:da:96:e0:fa:6a:e7:c6:3d:39:d4:
62:e3:d9:52:e2:71:3d:78:a2:3f:ee:c5:f5:73:8d:8e:b3:38:
2c:13:05:44:b2:06:d1:85:8b:74:23:62:21:f1:df:cd:15:a2:
9d:e8:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org