Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Dn6P3y29hYJ0ccwFUeNeSDUa3OM.roa
File: Dn6P3y29hYJ0ccwFUeNeSDUa3OM.roa (raw, json)
Hash identifier: 40+PwfSzTDgYVnO8Afn2rYsTsD5oPCsno0EfoZ5DLI8=
Subject key identifier: 0E:7E:8F:DF:2D:BD:85:82:74:71:CC:05:51:E3:5E:48:35:1A:DC:E3
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018481C4200A1083DDDB79BDCDC9B31B416C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Dn6P3y29hYJ0ccwFUeNeSDUa3OM.roa
Signing time: Wed 16 Nov 2022 18:47:04 +0000
ROA not before: Wed 16 Nov 2022 18:47:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 91.186.216.0/22 maxlen: 24
91.186.220.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:c4:20:0a:10:83:dd:db:79:bd:cd:c9:b3:1b:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 16 18:47:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e7e8fdf2dbd85827471cc0551e35e48351adce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:f4:d8:2b:73:13:ea:d9:61:93:42:55:e9:
db:bd:57:c5:8d:0d:25:60:e9:1e:2a:2e:0b:ac:88:
47:70:bb:df:1f:1f:45:6a:1d:1a:09:ee:2a:29:f0:
02:d3:46:a4:65:a4:1d:e5:d4:47:0d:72:ef:e4:29:
45:69:dd:c5:35:24:77:9c:d7:8f:50:9c:f2:26:df:
6d:87:e0:92:f2:f0:b5:fa:df:0e:c6:ad:f4:73:48:
8f:fa:f0:8e:58:61:24:7d:54:2d:01:55:1b:43:79:
08:f1:f0:08:cc:1f:be:6d:33:64:25:29:1c:e2:5c:
19:a9:d9:1b:0d:91:5a:82:e8:ab:9b:33:d2:13:ec:
70:e2:15:04:22:c5:61:ae:fc:9a:17:d9:df:24:bc:
f3:81:10:ac:f1:6e:1c:84:66:0d:6a:07:dd:72:66:
f8:34:68:b2:47:4d:0e:89:41:d4:20:57:49:5a:bc:
f0:da:5d:e1:b4:16:4c:df:33:bf:e4:b4:c8:b8:20:
21:a2:53:ef:ca:e2:8d:b1:38:ee:3b:75:5e:2e:a8:
13:53:47:93:21:72:4f:c7:a1:6b:1b:00:25:27:42:
6f:ed:90:92:2a:48:45:f7:2b:88:a9:3a:09:c8:4c:
c0:36:f1:45:73:b0:9d:c1:e1:38:ff:d1:46:ad:1a:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:8F:DF:2D:BD:85:82:74:71:CC:05:51:E3:5E:48:35:1A:DC:E3
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Dn6P3y29hYJ0ccwFUeNeSDUa3OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
91.186.216.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:e9:2c:f5:2e:96:75:f6:8b:e5:c1:02:f4:bd:b9:50:c2:7f:
7c:2c:2f:c8:05:50:ba:92:21:6d:3d:a8:bf:75:a6:c1:d4:52:
6a:e3:f2:5c:09:92:36:15:e7:ce:f3:b0:5d:df:ed:da:db:c5:
d7:1e:3b:46:eb:c4:50:05:44:77:4b:bb:51:eb:0d:6c:19:53:
55:4b:4d:94:9b:f2:76:89:7f:e7:84:37:32:06:82:3d:5b:33:
07:d8:a7:78:e7:46:f1:c6:a7:60:a1:be:d5:23:db:c1:46:5a:
76:33:d8:70:69:00:5c:47:e3:45:90:03:11:2d:ab:9a:ac:58:
78:03:3e:b7:71:bd:5c:f0:5f:04:d9:aa:0e:d0:65:ac:af:0a:
d6:fc:d9:03:0f:be:50:45:d0:cb:6f:cf:49:21:4f:5b:0a:6e:
4d:0f:7f:34:96:8f:1e:56:22:8a:b6:55:eb:50:8f:26:52:44:
47:77:46:f5:81:49:ed:94:9b:c4:63:f4:56:7f:d7:59:c4:17:
da:7d:05:f2:84:23:1e:83:c6:ad:c7:2a:8d:b6:0c:d5:fb:40:
a0:6b:d0:35:7a:2c:75:87:eb:3f:32:fb:ee:1d:a9:f5:83:2f:
80:f4:2f:f1:f0:18:bd:9a:f0:f6:ad:3a:5e:c2:3f:2e:d1:37:
c1:7f:ec:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org