Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/DPeTfQ0Ar6SEOg9vQVxRrq7QOc8.roa
File: DPeTfQ0Ar6SEOg9vQVxRrq7QOc8.roa (raw, json)
Hash identifier: 2gk+JaWNOo5crGsXzC8DlR63/3a6e897RkPc+dtMBJc=
Subject key identifier: 0C:F7:93:7D:0D:00:AF:A4:84:3A:0F:6F:41:5C:51:AE:AE:D0:39:CF
Certificate issuer: /CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Certificate serial: 037A37D8
Authority key identifier: 0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/DPeTfQ0Ar6SEOg9vQVxRrq7QOc8.roa
Signing time: Sat 01 Jan 2022 06:02:37 +0000
ROA not before: Sat 01 Jan 2022 06:02:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48781
IP address blocks: 185.33.246.0/24 maxlen: 24
185.33.244.0/24 maxlen: 24
91.107.0.0/18 maxlen: 19
95.128.240.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58341336 (0x37a37d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcbf748e9f4998685d0c965d2dfdf0f362a5052
Validity
Not Before: Jan 1 06:02:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cf7937d0d00afa4843a0f6f415c51aeaed039cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:c1:d3:cc:44:d5:d6:b5:5c:dc:63:9f:00:
d1:93:51:a7:0c:86:67:28:de:30:81:f1:07:19:6b:
79:f5:b2:0b:5a:dc:f0:dd:4e:da:78:69:ec:be:9d:
c6:52:b2:d7:4a:fe:db:04:c3:eb:ff:e0:22:51:ea:
39:a1:34:3c:a7:a7:47:ae:eb:13:b4:45:5a:d5:07:
70:45:7e:df:42:d2:1c:25:c3:68:f0:52:a6:1c:17:
70:79:59:96:49:83:70:1e:b6:9f:f6:24:5d:f7:d1:
09:42:25:b9:e3:96:d4:6e:95:c1:6a:4e:32:bf:e2:
ad:89:64:42:9b:4e:70:08:59:1c:c9:b2:d8:b8:c9:
1f:dd:c8:57:53:45:d8:64:17:f1:6d:da:f0:1e:2d:
db:6b:5b:be:70:2b:92:6c:95:15:7e:44:cb:74:2b:
32:01:a8:ce:e2:bf:3b:d4:b3:89:d1:77:91:9c:ef:
b0:26:e6:d9:f8:61:9c:fd:03:b7:a5:6e:41:2f:46:
41:62:70:8d:0a:6c:6c:ed:3e:f9:31:4d:d4:69:77:
74:3a:8a:5e:aa:d8:16:a6:58:11:58:d5:71:0c:c9:
a8:55:d0:c0:20:00:dc:1a:2e:9b:84:b1:cd:9b:8b:
1a:94:c9:73:49:b3:24:1d:1c:a0:63:4c:82:73:d0:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F7:93:7D:0D:00:AF:A4:84:3A:0F:6F:41:5C:51:AE:AE:D0:39:CF
X509v3 Authority Key Identifier:
keyid:0B:CB:F7:48:E9:F4:99:86:85:D0:C9:65:D2:DF:DF:0F:36:2A:50:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8v3SOn0mYaF0Mll0t_fDzYqUFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/DPeTfQ0Ar6SEOg9vQVxRrq7QOc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/C8v3SOn0mYaF0Mll0t_fDzYqUFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.0.0/18
95.128.240.0/21
185.33.244.0/24
185.33.246.0/24
Signature Algorithm: sha256WithRSAEncryption
96:18:02:95:ff:4a:28:b3:62:a6:f6:33:2c:4c:58:db:3f:72:
66:dd:67:21:d2:42:d1:9e:60:41:8f:87:67:42:2d:33:74:11:
1a:96:b5:ae:b7:af:82:ad:27:3a:c1:4a:91:71:e6:56:56:5b:
d2:1f:6a:92:33:f3:c2:bf:74:a1:b8:9b:b4:6f:7e:d3:ba:e6:
f6:22:45:f1:5c:68:2c:f5:6e:1e:fe:0f:64:88:2a:f4:d9:10:
ac:06:73:1c:ed:8e:ef:a1:c7:e4:6a:c4:73:9b:fa:e1:2d:b3:
e4:0d:d1:82:ce:b8:b3:d7:fc:b9:35:9a:8d:64:c2:92:2d:08:
ff:52:fe:1b:93:c2:89:38:88:23:83:11:cd:45:63:c2:a1:2d:
cc:c8:c9:6d:ff:75:36:1a:98:f9:90:e7:4a:ea:9f:ab:be:e0:
83:ab:91:71:0f:1f:b8:b0:78:41:89:18:dc:f0:f7:32:de:f5:
eb:84:49:36:11:2f:96:b2:f3:69:c4:7a:2c:06:59:e1:ff:96:
78:6b:db:e8:15:44:82:68:e8:e0:93:23:54:47:04:91:55:60:
d1:cb:e7:06:6a:aa:ed:92:28:84:83:33:76:53:81:14:fa:39:
46:0d:bc:3e:69:56:8a:a1:05:e0:96:f5:4a:c6:6c:8f:52:5b:
e4:cb:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org