Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/DhOr84XuunUZtFGpKy9EppJgJzY.roa
File: DhOr84XuunUZtFGpKy9EppJgJzY.roa (raw, json)
Hash identifier: FBGCOJMGBZ90faIzlldz795NSFBx3K0SobACqfqngeg=
Subject key identifier: 0E:13:AB:F3:85:EE:BA:75:19:B4:51:A9:2B:2F:44:A6:92:60:27:36
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 02D4782C
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/DhOr84XuunUZtFGpKy9EppJgJzY.roa
Signing time: Sat 01 Jan 2022 16:06:24 +0000
ROA not before: Sat 01 Jan 2022 16:06:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202242
IP address blocks: 195.231.0.0/18 maxlen: 24
195.231.64.0/20 maxlen: 24
195.231.80.0/21 maxlen: 24
217.61.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47478828 (0x2d4782c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 1 16:06:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e13abf385eeba7519b451a92b2f44a692602736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:f1:74:2f:d4:68:60:5a:74:6c:4f:0e:04:
98:d8:fb:1c:cd:38:a3:bc:f4:34:5f:f6:df:e2:05:
7a:69:f7:ae:07:46:1c:66:d0:f1:94:a6:3f:31:49:
2b:70:68:66:b6:ca:f1:d4:7f:dd:eb:1c:12:f7:01:
cb:42:05:54:8d:1a:14:a2:88:38:1a:24:24:0e:93:
c0:da:f4:2b:2d:26:95:d7:fd:b7:b6:6a:4b:f5:9c:
6d:a2:45:95:d6:3a:44:50:69:be:51:29:7c:58:8d:
93:83:c9:0b:44:3f:0d:b1:8d:f9:4a:dc:e0:0c:99:
f9:07:85:36:cf:43:25:48:03:8a:18:b6:59:9d:e6:
15:c8:2d:5e:b2:4e:4e:be:ec:28:58:ae:31:8b:0f:
fb:e9:14:d2:37:a9:f5:6d:3a:8a:3b:a8:76:ec:81:
b7:c5:ff:1a:ee:7e:62:2f:d9:b5:89:c8:fe:56:3d:
1f:67:78:c7:48:a2:97:e8:10:0d:0b:dc:e9:f4:ec:
28:bd:6b:43:47:43:6b:40:e5:13:5a:99:c4:59:cd:
ae:ae:2c:28:ec:4d:76:81:55:51:20:9b:98:1a:48:
f9:ae:45:28:68:70:a7:ec:dd:89:83:a6:26:6f:16:
9b:cc:37:f9:ca:5f:34:32:5e:15:ed:af:32:c6:6f:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:13:AB:F3:85:EE:BA:75:19:B4:51:A9:2B:2F:44:A6:92:60:27:36
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/DhOr84XuunUZtFGpKy9EppJgJzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.231.0.0-195.231.87.255
217.61.56.0/21
Signature Algorithm: sha256WithRSAEncryption
89:4f:6b:8b:02:17:37:3f:e9:8f:83:b0:da:eb:6e:f9:27:ee:
d3:87:af:3a:27:07:5e:b0:31:fd:65:99:97:13:b8:e0:03:be:
25:72:06:95:bc:c7:71:cd:a0:26:71:ad:6c:3a:9c:d5:52:4b:
d2:80:ac:6a:b3:59:4d:35:ba:f6:29:02:a0:91:d2:b9:67:ee:
cf:a7:a3:1b:c9:49:1a:75:ab:cb:56:cb:27:7d:6f:40:8a:5e:
6d:98:5c:e1:13:51:15:f0:c0:fa:73:95:b8:a6:03:b0:76:6d:
3b:5d:59:1d:bd:4d:93:52:13:bf:87:46:b0:63:13:a8:2b:e8:
77:ef:0f:1d:29:40:fb:ff:72:aa:c3:e7:59:c0:3b:43:b2:26:
11:72:e9:31:f9:b9:e6:fa:c4:6c:3b:8c:93:b1:6a:05:bf:b0:
84:26:ae:2c:24:4a:14:a6:75:a2:0c:bf:d9:57:15:92:a7:aa:
d7:f2:e8:c1:ad:3d:13:db:33:2c:a2:57:88:00:02:ed:dd:61:
bc:8a:80:5e:a7:de:5f:ff:b9:cb:f3:01:82:9a:d1:48:a2:84:
d7:29:65:d5:f2:d1:1f:2f:34:73:1d:d8:93:e6:78:5f:22:23:
2e:42:f8:26:6b:24:91:ac:4c:98:b8:68:3d:cb:0b:cb:78:b2:
3f:6e:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:07 2023 by rpki-client on console-fra.rpki-client.org