Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dmdbVUQSmze0c_vb1vuv7de2Okc.roa
File: dmdbVUQSmze0c_vb1vuv7de2Okc.roa (raw, json)
Hash identifier: 02VJZIyxNqU/7/qD3lRA9c28TNWdXfbjNJD2UxfuCQg=
Subject key identifier: 76:67:5B:55:44:12:9B:37:B4:73:FB:DB:D6:FB:AF:ED:D7:B6:3A:47
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0182590DA86BC6EA977AAB66EDCE34EAFF29
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dmdbVUQSmze0c_vb1vuv7de2Okc.roa
Signing time: Mon 01 Aug 2022 10:57:23 +0000
ROA not before: Mon 01 Aug 2022 10:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 194.5.83.0/24 maxlen: 24
45.8.70.0/24 maxlen: 24
194.5.82.0/24 maxlen: 24
45.133.6.0/24 maxlen: 24
45.133.5.0/24 maxlen: 24
45.133.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:59:0d:a8:6b:c6:ea:97:7a:ab:66:ed:ce:34:ea:ff:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 1 10:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76675b5544129b37b473fbdbd6fbafedd7b63a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c1:83:cd:33:ac:f7:fb:95:0d:fd:19:f9:c6:
9a:b9:0c:22:12:35:83:fb:1e:07:57:90:b9:cd:1c:
a1:a3:0f:33:a7:80:d1:ce:11:4a:6d:61:ef:4f:f8:
da:28:59:95:5d:4e:6c:31:cf:30:b6:97:16:1c:8d:
2c:34:ee:cc:71:32:e0:b6:dc:35:fd:b3:39:64:b0:
58:da:83:6c:01:b6:03:25:c1:d0:5f:31:40:16:1d:
24:01:3b:06:6c:ab:73:39:c2:30:bb:cd:cf:60:4c:
74:11:62:52:79:56:df:97:cd:b2:59:ef:3d:63:a2:
3e:f7:70:4e:b4:4b:8b:b0:c8:00:e7:f3:12:c9:dc:
05:9f:82:0b:00:a6:ad:3d:9f:b0:cd:30:b9:e3:5d:
f1:5f:26:ef:5c:54:24:36:55:65:71:ae:e5:1b:27:
0e:f6:74:1a:b7:35:e1:e6:f1:a8:a1:49:3a:87:42:
50:25:54:60:dc:cc:51:24:df:93:d5:66:99:c6:f3:
4b:a2:1b:25:d2:ec:cc:cc:70:6c:41:93:70:6b:0b:
6b:20:07:39:3f:75:b8:bd:40:05:f1:65:3a:94:49:
14:7a:f1:5b:72:6f:c0:95:50:42:9b:e4:d1:2d:b7:
b1:77:bb:e2:77:dc:1b:7d:0d:64:00:9d:27:49:52:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:5B:55:44:12:9B:37:B4:73:FB:DB:D6:FB:AF:ED:D7:B6:3A:47
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dmdbVUQSmze0c_vb1vuv7de2Okc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.70.0/24
45.133.5.0-45.133.7.255
194.5.82.0/23
Signature Algorithm: sha256WithRSAEncryption
48:59:ed:61:e5:85:bc:e5:2d:14:dd:55:53:bf:45:88:3c:d4:
12:f2:74:56:34:39:d9:6e:1e:34:55:4c:65:50:b7:05:a6:07:
e1:72:eb:38:6c:d9:f6:8a:15:ea:90:3a:db:8b:c8:52:d0:4d:
34:f0:15:dd:e0:c3:49:9d:26:ce:d1:61:51:1c:ba:68:53:6b:
17:30:ac:50:c7:91:ec:b7:28:f2:7a:19:35:9d:a4:29:d5:5b:
7e:71:7c:80:9f:f1:57:24:03:16:2e:84:af:42:c0:f7:fc:c8:
c2:34:c0:5e:7d:b8:31:29:4f:7c:0c:b4:17:58:db:cb:8e:23:
82:9e:00:f5:42:1b:51:cf:5e:e8:d5:8d:7f:52:ef:37:5b:71:
a0:c6:3c:95:97:1d:36:15:24:4e:53:81:03:0a:4a:bc:c0:d8:
13:d5:b8:43:da:e4:7a:c4:6b:fe:b2:42:2b:00:69:bc:e0:30:
ea:ae:a6:6c:6f:cc:76:53:4d:3b:5c:68:f8:01:eb:53:9c:89:
73:45:99:a6:5e:8f:dd:61:ed:47:67:d2:b3:6b:d0:d5:48:e7:
9e:2c:6b:24:29:2f:5b:5c:e7:aa:21:b4:d6:42:9f:09:a2:d0:
68:9e:08:44:8d:e0:d8:94:d1:e1:96:11:b5:33:58:5c:7b:cd:
fd:28:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:12 2024 by rpki-client on console-ams.rpki-client.org