Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/DSy65g_AV90KbWzJRewEADhI59E.roa
File: DSy65g_AV90KbWzJRewEADhI59E.roa (raw, json)
Hash identifier: X2mrta8e1p5ObvY3y51x/w1H3IErar2/DdDFk47J30I=
Subject key identifier: 0D:2C:BA:E6:0F:C0:57:DD:0A:6D:6C:C9:45:EC:04:00:38:48:E7:D1
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 059D44C2
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/DSy65g_AV90KbWzJRewEADhI59E.roa
Signing time: Sat 01 Jan 2022 07:04:01 +0000
ROA not before: Sat 01 Jan 2022 07:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47574
IP address blocks: 185.248.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94192834 (0x59d44c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 07:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d2cbae60fc057dd0a6d6cc945ec04003848e7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:d9:f5:40:3b:c3:0f:61:26:3f:ff:ee:3d:
9a:4d:fe:92:c4:e9:d9:e9:49:1f:ad:40:53:4d:13:
47:9f:68:77:7c:9b:a3:5e:57:81:5d:17:78:0e:ce:
cb:1e:95:92:d4:61:f7:b0:6b:26:ac:19:5f:4c:35:
e1:6d:93:01:34:eb:40:b0:e8:ec:90:67:32:5b:ae:
2a:a0:85:4d:3e:01:fa:3d:b5:9a:05:1b:f4:f4:2d:
e6:9a:9b:8c:46:c8:a0:ba:ed:1b:2d:f2:b1:15:57:
27:20:7b:0b:c2:94:a3:73:4e:5a:ac:c6:4d:68:06:
07:30:b2:f9:24:c2:ee:fb:31:c7:2b:91:a5:5e:61:
5e:f8:34:31:a5:b2:68:9a:86:71:bc:5f:03:49:cb:
df:61:cd:e3:4d:25:4f:84:41:e3:b1:12:3e:5f:d3:
ce:47:b1:5d:3f:83:00:ac:f3:c9:89:5b:6d:38:bd:
d6:d8:0d:c1:b0:e6:b3:71:67:96:ad:15:bc:86:71:
4b:1e:5a:c9:de:5d:59:4b:ea:f8:ac:c0:ed:1a:c1:
f2:fa:2b:cf:39:c2:8c:26:4a:e7:3e:1a:ef:ea:84:
f0:b5:4e:99:36:52:fa:c4:3a:57:1f:41:49:17:d7:
b7:3a:30:3e:78:69:65:14:fa:b7:bd:36:27:85:22:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2C:BA:E6:0F:C0:57:DD:0A:6D:6C:C9:45:EC:04:00:38:48:E7:D1
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/DSy65g_AV90KbWzJRewEADhI59E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.136.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6c:e1:55:31:a2:c0:5f:59:73:ad:49:10:73:a4:fc:ee:e0:
a6:86:98:48:52:1f:2c:1d:f8:2f:52:37:6f:32:3d:20:8a:8a:
67:09:c0:cb:fe:6e:8c:76:da:b4:b7:2e:d8:0f:fc:58:93:91:
a2:97:e0:49:ac:f8:2a:9b:8c:dd:cf:8f:34:c7:64:93:33:25:
a0:e1:7f:65:75:f5:b5:a1:c9:85:56:1d:16:c3:c8:3c:c3:0d:
6d:19:63:f7:19:3c:4a:73:d8:dc:3a:93:97:21:f9:33:bf:b1:
27:66:82:76:2f:c9:a7:15:ee:d0:2f:6f:a7:cd:e6:9b:88:f9:
dc:b4:62:47:e3:15:a5:8f:cd:0a:fa:61:19:2c:3a:34:c7:6f:
fb:66:00:0d:ba:ab:47:49:98:5e:1f:d9:bc:67:2b:f2:f6:51:
4b:e7:87:db:f4:f8:88:9b:d5:04:5a:f4:19:9b:94:4c:ce:cc:
62:5a:20:ab:5f:46:44:6e:0c:1a:6d:b9:ee:db:1c:d9:10:52:
18:27:c6:01:01:79:2b:d5:9f:e6:83:c7:cd:cb:64:7a:95:7b:
bc:f8:5d:50:0f:f0:50:25:2c:15:a2:f2:2b:e2:cc:79:db:77:
54:95:1b:f5:ee:be:af:dc:83:3f:86:d3:10:3b:c4:3d:7c:65:
59:ed:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org