Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/dpaVj45ieq-Zuvdc-wDiAHHV22U.roa
File: dpaVj45ieq-Zuvdc-wDiAHHV22U.roa (raw, json)
Hash identifier: Srvf6bVTNyI0W0BD/8DYynWWCsJCxVnJ5y35trXUnlk=
Subject key identifier: 76:96:95:8F:8E:62:7A:AF:99:BA:F7:5C:FB:00:E2:00:71:D5:DB:65
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 045C1EF6
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/dpaVj45ieq-Zuvdc-wDiAHHV22U.roa
Signing time: Mon 14 Feb 2022 12:42:05 +0000
ROA not before: Mon 14 Feb 2022 12:42:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 212.8.224.0/22 maxlen: 22
212.8.229.0/24 maxlen: 24
212.8.228.0/24 maxlen: 24
2a07:505::/32 maxlen: 32
2a0e:7c41::/32 maxlen: 32
2a0e:7c45::/32 maxlen: 32
2a07:501::/32 maxlen: 32
2a0e:7c44::/32 maxlen: 32
2a07:504::/32 maxlen: 32
2a0e:7c42::/32 maxlen: 32
2a07:502::/32 maxlen: 32
2a0e:7c43::/32 maxlen: 32
2a07:507::/32 maxlen: 32
2a0e:7c47::/32 maxlen: 32
2a07:506::/32 maxlen: 32
2a0e:7c40::/32 maxlen: 32
2a07:500::/32 maxlen: 32
2a0e:7c46::/32 maxlen: 32
2a07:503::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73146102 (0x45c1ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Feb 14 12:42:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7696958f8e627aaf99baf75cfb00e20071d5db65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:53:af:d0:43:b6:2a:69:6e:3f:a3:02:ac:
d1:9b:39:88:51:88:53:b1:28:2a:2d:df:6a:4c:8d:
ed:71:1f:5e:dc:c6:31:9e:76:d9:c6:ec:dd:e6:9c:
eb:f9:eb:b6:d5:ab:fe:b1:62:19:58:31:8a:4f:29:
73:09:b0:94:d7:0f:b1:52:fa:17:0c:30:b0:3e:86:
ca:85:13:fe:3a:6d:87:a2:ab:41:77:8f:2f:bc:c7:
3c:7e:05:17:e9:5c:f9:76:aa:27:a8:54:d3:dd:48:
6e:1b:56:3e:02:5e:ca:90:15:c4:f0:c9:f6:c1:f0:
24:84:e9:47:29:49:dc:35:1e:f3:c7:04:30:9a:b1:
e5:af:26:1b:9c:22:35:50:86:5a:c6:03:58:08:43:
1e:70:38:8d:72:a3:69:68:9a:d6:b3:1a:ae:82:cc:
71:ea:a6:b4:3d:72:23:24:d9:12:e5:ac:62:d0:2d:
87:53:cb:e2:f6:fe:b1:e3:09:b1:37:d5:ba:47:fa:
90:27:7f:31:3c:94:24:c4:96:4e:70:8c:d3:40:34:
43:6e:ac:81:43:b7:9b:b4:db:71:51:d3:ff:d8:11:
b8:db:a3:2d:48:53:df:68:fe:d1:dd:5b:13:82:4f:
42:2d:45:36:c5:1f:bd:5f:f1:1c:bc:4c:c3:48:b1:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:95:8F:8E:62:7A:AF:99:BA:F7:5C:FB:00:E2:00:71:D5:DB:65
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/dpaVj45ieq-Zuvdc-wDiAHHV22U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.224.0-212.8.229.255
IPv6:
2a07:500::/29
2a0e:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
07:f0:b0:81:80:3a:2c:23:61:db:0d:52:98:a3:f6:42:57:cb:
ac:3c:da:66:8a:21:5e:3d:ee:da:61:e3:f7:fb:24:7d:55:93:
e3:ec:da:8f:23:e9:e4:8c:9e:df:f2:62:8c:f7:a2:3b:29:37:
c2:5e:84:30:e9:c5:15:1c:af:03:bd:9d:81:20:75:d9:10:40:
2c:3a:47:8d:38:b2:cb:60:8a:80:d1:a2:39:18:4e:dd:38:e2:
ac:e1:15:37:f9:83:9d:b6:66:4e:0d:5e:1d:4c:b8:8d:c5:28:
de:d1:08:5f:17:67:cf:54:4e:6c:4f:39:30:ef:ca:1a:a1:41:
3d:fa:d3:c5:52:f1:6f:ed:ec:b8:02:3b:6c:18:1e:5c:3b:18:
17:af:03:1c:be:56:e9:fc:bb:63:1c:eb:d0:1d:19:82:73:59:
45:05:12:35:1d:8d:bd:09:73:25:a9:e4:97:37:5f:23:1d:2e:
d1:d6:22:05:0d:4d:ea:40:44:94:08:33:e4:46:2b:ab:d6:f7:
73:17:ec:d5:80:c2:4a:be:a8:ef:ad:11:7e:fa:87:52:5f:53:
44:61:85:fb:a5:4f:8a:d8:e4:94:6c:c8:ad:d6:07:c4:e5:a5:
41:96:00:b5:4e:01:ea:99:8e:eb:13:d3:74:78:09:89:d2:9a:
3d:19:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org