Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/DbBoyMWsjWZZVavSq0o5pNnyrFs.roa
File: DbBoyMWsjWZZVavSq0o5pNnyrFs.roa (raw, json)
Hash identifier: p2UOw0VlF4JqTvnBuudh3/CM3uCgb87LMqJwR6dcfKI=
Subject key identifier: 0D:B0:68:C8:C5:AC:8D:66:59:55:AB:D2:AB:4A:39:A4:D9:F2:AC:5B
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 018316A127E8329B3E1897BC0ACB2726D182
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/DbBoyMWsjWZZVavSq0o5pNnyrFs.roa
Signing time: Wed 07 Sep 2022 06:26:43 +0000
ROA not before: Wed 07 Sep 2022 06:26:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 185.48.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:a1:27:e8:32:9b:3e:18:97:bc:0a:cb:27:26:d1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Sep 7 06:26:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0db068c8c5ac8d665955abd2ab4a39a4d9f2ac5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2c:90:ce:8d:13:df:d4:ab:b9:63:16:a8:03:
3a:b8:4f:51:ef:7c:20:8d:ac:ab:1d:37:b7:09:c6:
43:30:0b:22:f9:3e:59:a9:d1:66:cf:49:e5:2c:59:
6d:e5:db:28:d5:01:a9:69:61:a5:1c:b7:76:9d:55:
62:56:18:3b:d5:4a:2b:2e:6d:dd:19:ba:23:ef:b6:
eb:b5:e3:57:a6:d9:39:04:eb:13:47:ed:9a:03:14:
8f:37:5b:a7:82:01:2d:8e:41:92:28:bc:7a:98:c6:
ea:06:87:ad:8b:fd:05:32:1b:8c:16:65:45:f9:ef:
4d:e7:76:84:19:cd:c2:39:9a:bf:da:97:8c:58:e4:
f8:6e:51:63:e1:48:70:53:b7:3c:a4:f2:a6:c6:f8:
62:4c:16:35:79:25:95:74:50:d4:5c:0e:f1:88:fd:
cb:f3:9b:94:12:45:25:57:cf:bf:65:0a:f0:eb:29:
02:32:f1:5d:d1:3e:76:4e:fe:3c:f9:87:c6:df:f6:
6d:31:2c:3d:03:32:21:3a:01:a7:a6:7d:a1:7a:07:
b7:f7:5a:6f:6f:7b:3a:72:c4:ae:aa:da:17:58:4f:
c0:a8:e8:c0:d1:f7:31:9e:ab:a6:af:6b:96:6b:ae:
41:66:2c:d8:70:63:92:37:e5:14:b4:c4:bf:8a:ac:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B0:68:C8:C5:AC:8D:66:59:55:AB:D2:AB:4A:39:A4:D9:F2:AC:5B
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/DbBoyMWsjWZZVavSq0o5pNnyrFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.132.0/22
Signature Algorithm: sha256WithRSAEncryption
43:3c:b6:24:03:61:bc:c0:b8:28:b5:88:06:39:59:11:59:58:
d6:a9:8f:85:dc:06:24:8a:3c:52:bc:21:53:ad:f9:71:f1:18:
0b:f3:33:34:77:30:b5:33:68:b7:12:0a:9e:9f:82:7e:73:4a:
fc:ea:18:9c:bb:c1:d0:d8:0d:7b:5e:e1:8d:33:92:fd:18:a5:
10:10:66:ff:9e:ee:73:ed:7f:b8:a7:5c:c6:b9:58:66:2d:c4:
1d:74:97:06:d1:ee:e2:2e:26:c9:e5:f8:83:b6:1a:37:49:b2:
c0:30:05:bf:eb:a2:a4:91:e7:26:85:b9:8a:10:8e:84:ec:fc:
d6:8b:d1:d3:9b:cc:65:ee:bd:7b:f6:19:6a:c7:10:cc:d4:84:
73:54:4e:14:df:e6:ea:83:6e:55:fc:3c:3c:9f:66:d5:6d:19:
b3:65:99:19:89:a9:f0:a5:4a:bc:df:30:d1:cb:04:2d:ed:10:
af:22:bd:99:9e:22:b9:5e:a7:37:13:19:84:3a:36:b0:bc:7b:
a2:30:75:53:bf:c7:50:e0:73:b8:99:0c:da:e8:85:57:e4:e5:
04:f7:4a:34:db:08:01:6a:06:8e:f3:ec:a3:dd:26:2f:09:05:
7d:25:05:4d:5c:77:62:cf:7a:30:29:b4:17:b2:24:a3:5e:41:
9c:be:92:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org