Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/DGmwmrN-YITO-3Dpt-C8dezDmYs.roa
File: DGmwmrN-YITO-3Dpt-C8dezDmYs.roa (raw, json)
Hash identifier: bDwuNwW15h87GqNmeyW+XsqORJyJyEdIZZUmv/s6XZo=
Subject key identifier: 0C:69:B0:9A:B3:7E:60:84:CE:FB:70:E9:B7:E0:BC:75:EC:C3:99:8B
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 0136C132
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/DGmwmrN-YITO-3Dpt-C8dezDmYs.roa
Signing time: Mon 04 Jul 2022 09:31:25 +0000
ROA not before: Mon 04 Jul 2022 09:31:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51795
IP address blocks: 185.25.36.0/24 maxlen: 24
185.25.37.0/24 maxlen: 24
185.25.38.0/24 maxlen: 24
185.25.39.0/24 maxlen: 24
46.18.240.0/23 maxlen: 28
46.18.246.0/24 maxlen: 24
46.18.242.0/24 maxlen: 24
46.18.243.0/24 maxlen: 24
46.18.244.0/24 maxlen: 24
46.18.245.0/24 maxlen: 24
46.18.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20365618 (0x136c132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jul 4 09:31:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c69b09ab37e6084cefb70e9b7e0bc75ecc3998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:0c:c8:b8:ca:5c:20:27:2d:23:71:ec:9c:
a9:52:e8:ca:1f:7c:d6:c7:ab:24:80:e4:46:6a:81:
a0:7a:68:9e:62:2e:12:1b:9f:cc:61:02:bb:a7:9c:
d5:85:12:62:87:70:6d:32:62:48:bd:9b:90:6e:a9:
f2:cd:f0:43:7e:12:c6:ce:2c:5e:09:3b:04:f5:a7:
e2:0a:c9:a6:33:44:be:c6:86:65:0b:76:47:61:1a:
c4:23:9e:0b:cc:e5:57:51:18:2a:56:fb:0c:ed:01:
60:f3:09:0e:84:d4:1a:82:46:cd:66:7c:13:9e:e2:
97:9f:f6:1f:45:8f:6f:96:70:e8:c7:91:01:54:08:
5c:2a:28:d4:41:2d:dc:88:db:ed:90:3f:23:4c:22:
44:c7:51:1d:10:a1:cf:5c:36:a9:e9:a7:59:eb:e5:
c5:eb:d5:ba:57:30:7e:3b:20:ac:a5:12:ce:8b:63:
5a:90:58:2b:2b:5c:42:d8:77:76:64:9a:c6:c0:97:
e7:a9:83:17:43:cc:d6:2e:89:84:5f:cc:b2:7f:2e:
02:f1:d1:f0:62:70:3d:9b:eb:c3:c7:a7:a9:76:61:
00:54:0b:2b:52:d0:d4:b2:d8:e8:be:ce:45:77:15:
b3:05:f5:20:d4:15:75:fa:59:0e:3b:fa:42:ce:fb:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:69:B0:9A:B3:7E:60:84:CE:FB:70:E9:B7:E0:BC:75:EC:C3:99:8B
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/DGmwmrN-YITO-3Dpt-C8dezDmYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.240.0/21
185.25.36.0/22
Signature Algorithm: sha256WithRSAEncryption
12:f7:74:d8:85:0c:c5:57:82:47:cd:80:46:11:4d:e4:93:29:
fb:5a:f0:a6:09:5e:1d:13:cc:b7:1f:53:62:01:b8:80:54:91:
38:c3:2c:a1:61:0d:eb:33:ac:42:f0:08:cd:25:cb:e1:96:62:
64:33:9f:9e:08:a9:0f:25:94:2e:36:27:d0:b6:8d:95:57:fd:
2d:6c:5f:92:24:b6:9e:21:d4:40:dd:f9:c8:2e:bc:90:47:f9:
43:81:de:c7:78:f1:d6:e2:0d:73:e8:f5:c5:00:48:9d:39:e9:
9a:10:eb:43:82:2f:a7:ee:58:58:81:6d:59:11:1b:35:1e:3e:
c6:9f:5e:eb:2b:ed:7f:53:c7:d5:40:32:f2:45:12:95:82:00:
40:a5:5a:d1:28:55:cb:c0:98:ae:8d:e4:b4:41:f7:01:72:93:
df:5c:e9:0d:95:cb:4f:24:d1:d2:8a:92:50:9f:9a:07:89:36:
65:9c:20:f5:b1:b2:42:0b:ba:3c:e8:b3:8c:d3:df:7e:9e:e6:
69:d3:f8:51:87:eb:a9:ba:94:9c:e6:81:77:bc:04:7f:d7:d8:
72:a1:5d:6e:81:52:a1:16:dd:d8:83:7c:5e:b2:71:b6:eb:b8:
1a:6b:81:a9:04:b9:4d:ae:65:2c:76:05:c8:7f:ae:99:13:e2:
9a:4f:f2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-ams.rpki-client.org