Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/D83M9pqs3i3w0UsYErlUBpaPPnY.roa
File: D83M9pqs3i3w0UsYErlUBpaPPnY.roa (raw, json)
Hash identifier: F1FqJvahzRMvvulQAcT7kDPKnqamLhZevQ/v5lB7Z20=
Subject key identifier: 0F:CD:CC:F6:9A:AC:DE:2D:F0:D1:4B:18:12:B9:54:06:96:8F:3E:76
Certificate issuer: /CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Certificate serial: 0C350904
Authority key identifier: B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/D83M9pqs3i3w0UsYErlUBpaPPnY.roa
Signing time: Sat 01 Jan 2022 06:52:19 +0000
ROA not before: Sat 01 Jan 2022 06:52:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209220
IP address blocks: 185.104.122.0/24 maxlen: 24
185.104.122.0/23 maxlen: 23
185.104.123.0/24 maxlen: 24
2a06:3000:1000::/36 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204802308 (0xc350904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b135377901a7871d3bff7a70277a2f4e2fc0e277
Validity
Not Before: Jan 1 06:52:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fcdccf69aacde2df0d14b1812b95406968f3e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:15:4a:51:81:4a:4a:c0:6c:b6:45:36:b2:
0e:90:db:21:4a:22:85:fe:56:e5:d1:41:48:d3:82:
ce:e8:08:05:7e:c6:fa:33:8a:da:84:b4:0f:c9:9a:
b9:8b:ec:fb:3f:d7:c2:45:3e:ef:31:87:73:39:1d:
de:e6:c5:b3:0f:dc:49:38:cf:f8:c5:6d:fa:4b:cf:
94:83:2f:25:70:51:f1:8c:17:e6:87:70:6d:26:1a:
4e:07:9a:99:73:00:dd:93:c4:9d:3b:14:11:dc:64:
a6:84:f2:d3:05:31:63:b9:5f:28:a8:64:be:15:04:
62:01:e7:83:aa:6b:e0:a6:7a:7c:f0:20:9a:5d:26:
83:2d:88:24:45:e5:01:8f:7d:9e:6b:42:f0:93:70:
25:8e:a8:94:b3:ea:a0:1b:bb:a2:6c:5b:07:2d:5e:
2e:a9:d0:b7:64:29:84:32:88:55:22:11:b1:e8:46:
b7:c6:ed:7f:ce:6b:f8:7d:6d:f6:1d:6e:40:1a:c8:
c3:80:85:24:fb:bd:2b:d8:67:02:26:d0:a9:f0:78:
c9:35:90:3a:e3:41:8f:c9:ea:5d:70:31:c3:18:de:
9e:8e:15:7f:06:f2:10:be:6f:a3:5a:b5:e5:88:2f:
86:6b:5d:7f:30:4b:6d:77:9e:0d:76:87:0c:04:ac:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:CC:F6:9A:AC:DE:2D:F0:D1:4B:18:12:B9:54:06:96:8F:3E:76
X509v3 Authority Key Identifier:
keyid:B1:35:37:79:01:A7:87:1D:3B:FF:7A:70:27:7A:2F:4E:2F:C0:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTU3eQGnhx07_3pwJ3ovTi_A4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/D83M9pqs3i3w0UsYErlUBpaPPnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/sTU3eQGnhx07_3pwJ3ovTi_A4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.122.0/23
IPv6:
2a06:3000:1000::/36
Signature Algorithm: sha256WithRSAEncryption
63:c1:bc:a5:89:bd:0a:cd:c9:80:af:39:74:0b:6f:13:19:1f:
2e:e9:63:3f:49:e4:1a:40:61:11:56:79:3f:cf:10:9c:b3:b7:
b3:9d:e2:39:e3:dc:77:01:a2:5f:e8:c9:79:a8:4c:8c:ea:e0:
b8:1c:22:48:7e:81:0c:b0:3a:e0:9a:da:0f:91:f7:d0:87:f6:
be:c7:bb:e4:48:0d:95:00:ee:67:db:9c:ef:99:05:58:fe:1e:
ed:d4:27:96:a8:3a:3d:07:3a:9b:97:92:98:9b:62:2c:cf:2b:
81:03:0f:02:f9:68:b7:34:4f:d1:4f:60:5d:f8:e2:cb:1a:08:
19:6e:5d:df:5e:d5:60:25:ed:05:10:5f:e5:4d:ab:70:75:43:
54:62:40:ef:b3:08:9f:84:2f:76:35:73:fc:87:35:41:af:f1:
28:03:67:69:6d:5d:bf:f6:fd:55:b5:46:e3:47:1b:b5:c4:90:
30:5b:18:bd:bd:5c:40:d4:98:5f:b2:2f:fb:41:2b:9a:8b:94:
43:79:be:e2:30:07:3f:cf:c9:20:33:ac:b8:20:1d:8f:9e:14:
16:3e:03:18:0f:37:9e:40:13:2b:cc:12:05:b6:67:1f:bb:71:
77:33:2d:fa:a8:81:fc:01:39:16:61:ff:7e:f8:70:e3:70:75:
5c:38:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:03 2025 by rpki-client