Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/du-3L5WlDkVcmw7LdPotS2eHgMM.roa
File: du-3L5WlDkVcmw7LdPotS2eHgMM.roa (raw, json)
Hash identifier: HAkfHhuSZDY0VTuafpQ9xNMBrru/D9Sr6SawX7Wu6hQ=
Subject key identifier: 76:EF:B7:2F:95:A5:0E:45:5C:9B:0E:CB:74:FA:2D:4B:67:87:80:C3
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 021501
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/du-3L5WlDkVcmw7LdPotS2eHgMM.roa
Signing time: Tue 28 Jun 2022 10:10:02 +0000
ROA not before: Tue 28 Jun 2022 10:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47282
IP address blocks: 185.99.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136449 (0x21501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Jun 28 10:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76efb72f95a50e455c9b0ecb74fa2d4b678780c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3f:74:af:e0:3b:08:be:51:95:cc:24:71:52:
19:27:61:a2:5b:e7:b7:37:0e:2a:f3:fc:9c:54:87:
14:79:46:20:33:5d:00:14:33:c6:81:07:15:58:6f:
5d:78:35:30:20:60:cb:ad:3b:c7:4c:62:b4:7b:db:
fd:14:4f:39:92:e2:7d:16:25:45:e6:9a:55:85:fd:
44:47:c7:3a:45:f0:45:4d:37:6d:71:b2:08:54:44:
da:14:5e:ea:26:b6:d6:00:9b:d8:75:58:36:77:e5:
cf:4c:3b:7c:2e:74:45:56:01:f2:ff:ea:a9:c4:a7:
11:57:49:78:cd:a2:c3:ab:30:c6:67:aa:a0:be:18:
fc:2e:dc:f4:7d:89:21:f6:19:40:b1:7c:ae:3e:1c:
6d:23:7d:a3:46:cb:77:81:f0:f1:84:0e:47:9d:f4:
5e:9e:95:5b:af:8a:9f:34:62:0f:c0:50:4c:ca:25:
a3:a6:c1:59:ac:b2:4c:86:d8:82:bb:c3:4e:dc:c0:
d7:dd:e2:45:45:30:b8:63:63:e0:9c:34:47:51:b3:
05:1c:bb:2f:1f:81:bc:9e:7c:34:98:f9:15:40:00:
8f:32:28:8c:d5:7a:44:5b:a3:6e:ce:25:14:17:dc:
b6:36:b7:ba:9c:2b:17:9c:72:4b:45:b4:3b:91:41:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:B7:2F:95:A5:0E:45:5C:9B:0E:CB:74:FA:2D:4B:67:87:80:C3
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/du-3L5WlDkVcmw7LdPotS2eHgMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.7.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a4:eb:ba:f6:5c:88:a9:f6:79:1a:93:71:46:33:fc:a0:58:
94:e6:72:c7:c6:da:98:ed:ba:0a:3e:d3:84:8c:7a:18:c5:ce:
fc:db:35:33:54:ab:c6:1d:44:47:36:07:7a:a7:2b:5a:99:b4:
e8:de:b5:fa:33:fc:eb:8e:48:b5:86:7b:a5:56:a4:a6:3d:0e:
10:9b:f7:09:db:ee:fc:9b:74:56:2e:cb:31:a6:89:48:d6:2a:
92:58:94:96:41:9b:43:8e:05:77:1e:90:29:9a:4f:b4:9f:b3:
72:7a:d3:ea:b6:5d:11:62:ce:1c:0a:a9:8b:b6:ed:41:c9:28:
15:81:58:38:00:b0:0e:17:e0:8a:f0:d4:4e:6e:44:39:89:44:
48:66:99:48:9c:d0:ec:70:de:f7:f9:42:24:ae:54:42:e5:a6:
b1:13:26:1d:63:44:6d:1b:75:b6:db:be:ea:4e:77:98:09:03:
5e:f5:c1:11:6f:3a:c9:a8:97:74:00:17:d5:27:32:81:cf:d1:
0f:a0:0e:81:52:ea:a6:3e:db:3c:40:bd:d8:c2:d4:5d:2c:bd:
47:9e:bb:39:7c:e6:e7:57:09:96:48:ab:f1:b2:66:d1:15:6f:
e6:c7:26:8e:cf:7e:9c:1d:a4:44:68:a9:9d:cd:dc:b2:5b:b7:
b8:4d:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:59 2024 by rpki-client on console-fra.rpki-client.org