Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DVck-iDNQuhl4bm2dXTn4VFIAQc.roa
File: DVck-iDNQuhl4bm2dXTn4VFIAQc.roa (raw, json)
Hash identifier: y8D6dStINO74M7UiU6xFv+tRxI8xdEzmSlM62pDw2Lo=
Subject key identifier: 0D:57:24:FA:20:CD:42:E8:65:E1:B9:B6:75:74:E7:E1:51:48:01:07
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 33E43BDF
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DVck-iDNQuhl4bm2dXTn4VFIAQc.roa
Signing time: Sat 01 Jan 2022 04:55:35 +0000
ROA not before: Sat 01 Jan 2022 04:55:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206887
IP address blocks: 95.183.220.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870595551 (0x33e43bdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:55:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d5724fa20cd42e865e1b9b67574e7e151480107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:7a:92:38:13:8d:e1:40:01:58:81:9f:c7:
75:e9:f4:b6:05:c2:56:be:31:02:1a:41:2c:34:2c:
02:ec:68:b0:d8:62:c3:da:28:0a:d2:70:25:e6:68:
ac:8a:9f:4d:8b:e7:0e:80:79:1b:18:7c:c1:82:1d:
09:a1:23:aa:48:8d:91:bd:d5:e8:b3:60:74:f5:e2:
6d:52:3a:f0:11:74:75:41:2f:ff:58:f1:97:80:29:
75:47:6e:7e:10:87:60:e8:b5:33:f8:c7:2d:f1:22:
f2:59:b2:3b:68:1a:9a:1a:cc:bd:a0:c8:3a:8c:55:
a6:b4:3e:ae:37:23:b6:b6:cb:01:7f:2a:e7:de:88:
a6:2d:45:01:d7:10:74:8e:51:32:ea:ce:e8:c1:ce:
60:5d:93:20:f1:ca:2f:6e:86:e4:c1:f3:a3:4e:b8:
a8:fc:19:4f:7e:95:c0:11:85:3b:89:ce:03:94:d4:
ee:72:7a:1d:9e:ca:52:f6:31:ca:94:c0:fb:03:a0:
73:6a:1d:81:68:61:7a:a8:af:50:b4:68:55:32:f5:
d7:0a:5a:6c:f2:f2:b8:db:a2:ef:a8:a9:3e:0f:7a:
86:68:af:6c:ed:c6:93:e4:41:67:16:31:20:46:9a:
1e:12:d6:8c:53:cb:86:be:68:03:ae:31:f7:5f:53:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:24:FA:20:CD:42:E8:65:E1:B9:B6:75:74:E7:E1:51:48:01:07
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/DVck-iDNQuhl4bm2dXTn4VFIAQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.220.0/22
Signature Algorithm: sha256WithRSAEncryption
85:ee:08:b6:cd:b8:43:f4:e3:cc:a1:c1:ed:b6:ea:20:84:6d:
8c:3e:27:01:b7:04:3f:cc:b4:9c:78:ae:55:da:9c:17:4d:53:
b1:d7:1b:f0:0f:73:41:67:13:22:5e:cd:c5:87:26:c8:9b:a0:
35:4a:d0:a8:4f:8d:07:1f:74:a3:ab:07:bb:f3:1b:59:6e:c6:
8f:de:9d:d1:c7:6b:88:ae:2e:51:df:0e:5c:ce:f3:c5:86:f8:
08:16:f3:9e:84:e1:20:06:83:8b:4d:28:7a:0b:c8:93:86:26:
ac:6e:cf:34:27:3b:3f:9e:65:e7:56:e5:e0:97:ef:a2:3d:95:
39:08:bc:3d:f9:03:33:14:e2:38:33:44:a9:1d:6d:30:f7:57:
64:8a:c2:65:79:5e:c6:e0:21:8d:9c:a7:68:3c:88:a6:36:6f:
12:04:54:c2:58:23:be:ec:ba:c1:a9:0e:76:9d:15:59:ce:4c:
1b:5d:14:34:b5:6e:93:44:86:13:49:ad:a9:99:55:67:7f:d7:
70:17:6a:7f:6e:41:ea:44:a1:89:b5:c6:f4:12:f8:1d:af:87:
79:99:47:c0:8a:a4:81:45:78:48:54:38:45:b1:e9:a1:6a:2a:
a4:ef:ce:1d:f8:31:d3:4a:15:12:1e:67:a1:a2:53:ef:c5:f0:
fe:63:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:09 2025 by rpki-client