Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DpCN5qtUvWOHBtb9UMaZm1D1AxI.roa
File: DpCN5qtUvWOHBtb9UMaZm1D1AxI.roa (raw, json)
Hash identifier: J0HwTRXzpiP/UhDmXNsfIyzgpsqItlBcYLaZmr0Q+Uw=
Subject key identifier: 0E:90:8D:E6:AB:54:BD:63:87:06:D6:FD:50:C6:99:9B:50:F5:03:12
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018362AC3A777425AB237A8B0CDB065AD795
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DpCN5qtUvWOHBtb9UMaZm1D1AxI.roa
Signing time: Thu 22 Sep 2022 00:49:57 +0000
ROA not before: Thu 22 Sep 2022 00:49:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 176.105.229.0/24 maxlen: 24
95.214.176.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:62:ac:3a:77:74:25:ab:23:7a:8b:0c:db:06:5a:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 22 00:49:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e908de6ab54bd638706d6fd50c6999b50f50312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:81:bf:96:cb:13:13:bc:06:79:d5:99:92:
d2:79:9a:98:dc:96:16:c9:89:d8:e6:a3:94:9e:d5:
83:bb:b4:91:55:ed:bb:de:91:88:1c:e2:6b:10:38:
a5:26:1d:7a:3a:97:19:ca:64:60:16:f7:0b:a3:ce:
8b:5a:12:59:17:1f:b5:97:3e:d0:b1:3c:82:8a:4f:
6f:06:25:02:84:8e:60:23:55:f7:4c:2a:85:69:9e:
28:ad:c9:87:76:03:9c:34:54:59:01:b2:9f:33:30:
c4:6e:45:d8:74:8a:77:ac:e0:5a:f7:8b:86:e4:4f:
60:72:e7:f3:8b:5f:93:0e:32:a1:ef:8e:13:28:4a:
2f:6b:04:da:63:3f:12:51:25:66:57:26:a2:20:09:
3c:d7:e9:59:bc:af:e4:d5:98:28:ee:f2:66:01:85:
91:d0:04:77:aa:21:a7:83:e3:6e:0c:0c:e1:35:8c:
bb:02:17:c2:d0:cc:bf:10:ea:44:3f:0a:57:03:21:
d8:70:ac:51:5b:6c:66:82:7e:37:15:85:84:4b:d9:
5f:dd:7e:e1:ff:05:63:6e:b1:c2:67:f6:55:0b:80:
4d:8f:bc:c5:a8:0f:70:83:c1:1c:46:0c:b0:45:cc:
ed:2d:61:31:e9:24:31:17:e9:5e:a5:bb:36:00:e0:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:8D:E6:AB:54:BD:63:87:06:D6:FD:50:C6:99:9B:50:F5:03:12
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/DpCN5qtUvWOHBtb9UMaZm1D1AxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/22
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d9:bf:5d:b2:95:20:bb:13:87:aa:c0:78:d3:1d:e3:82:d7:
c6:09:d9:02:84:7f:29:2a:81:76:b4:83:ec:10:aa:e3:e3:c1:
b4:7c:8a:87:b2:7a:d7:48:22:b5:e0:0d:7b:22:7c:3a:1c:d3:
05:56:20:55:be:a3:e9:6d:1e:b8:34:40:cb:d2:1a:31:30:91:
a4:a5:99:e3:fe:39:de:ba:80:5c:66:74:ca:bc:17:98:f3:a0:
dc:a3:e9:26:ba:7d:0a:85:ce:06:e5:1c:e7:ca:4e:fa:85:6a:
cd:6d:03:48:ff:06:12:dd:95:a1:3c:42:c6:4c:fe:b5:9d:c4:
84:f0:88:de:47:31:f4:97:f7:a3:0e:b5:81:c8:45:6f:97:2f:
74:09:02:51:95:3f:14:98:91:cb:5c:c9:35:68:e5:35:63:3b:
50:e1:9b:d5:39:77:57:5c:43:99:23:43:53:3f:59:3e:d4:90:
79:6c:e6:bf:14:e7:8a:27:f3:3b:57:f5:e5:1b:17:38:87:4f:
c2:04:ad:58:83:cd:a2:21:8c:bc:93:63:2e:12:4e:ac:9d:e9:
28:4c:cf:c4:9b:68:7a:0a:43:f7:1f:ee:74:46:ad:d3:68:59:
47:74:9a:f2:16:de:8b:18:53:1b:2d:a0:6c:30:ac:ee:4a:71:
fe:fa:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org