Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DLYm25CX8y9i-6J8j7xwI-rSuaw.roa
File: DLYm25CX8y9i-6J8j7xwI-rSuaw.roa (raw, json)
Hash identifier: 4GYr4IBa9JVt7Ubkjk3uX4eYsNOU/kwxTZc1YkslzJ0=
Subject key identifier: 0C:B6:26:DB:90:97:F3:2F:62:FB:A2:7C:8F:BC:70:23:EA:D2:B9:AC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0740D2E6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DLYm25CX8y9i-6J8j7xwI-rSuaw.roa
Signing time: Mon 21 Mar 2022 16:46:57 +0000
ROA not before: Mon 21 Mar 2022 16:46:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210876
IP address blocks: 194.35.40.0/24 maxlen: 24
185.255.124.0/22 maxlen: 22
45.134.84.0/23 maxlen: 23
45.134.84.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121688806 (0x740d2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 21 16:46:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cb626db9097f32f62fba27c8fbc7023ead2b9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:1e:c0:61:01:78:a9:ee:29:3b:67:53:79:
ed:4a:a1:28:dd:c1:c5:71:c7:05:23:f8:77:18:cd:
da:f7:0d:c4:47:85:c0:fd:bf:63:b5:66:95:2a:46:
c7:a5:9a:4e:a2:a6:9b:5a:a5:da:56:9e:60:80:db:
5b:19:0f:69:c8:9f:06:00:b4:b3:63:7f:43:3b:aa:
4a:06:47:f6:99:28:2f:1e:88:4f:17:c9:6e:85:7a:
cc:52:b4:fd:22:6d:c7:84:ea:9f:e8:f1:a7:c3:43:
73:cd:58:7b:e6:a2:2f:6f:0b:b8:92:57:e5:bf:62:
05:eb:e6:98:36:f4:f4:cd:e6:cd:a8:de:eb:ef:e9:
1f:ba:16:5f:62:aa:e4:6c:f7:2e:61:dd:2c:a3:f3:
f9:80:0d:80:0b:bc:9b:c5:fe:b9:0f:d1:1b:06:73:
6f:60:33:15:4d:fc:48:d0:a9:e3:1d:45:22:21:4c:
c0:70:d8:6a:26:0b:cb:de:e0:ff:6b:8c:9d:67:58:
2b:80:3a:73:a7:4d:27:fa:64:28:3e:d8:6c:5a:1f:
fa:7d:1c:87:0d:41:10:7c:5a:0d:ce:80:d8:e2:f7:
ef:cb:32:38:66:19:7e:88:e2:ec:81:93:55:7d:c1:
c8:db:17:14:c7:0a:78:15:34:9b:4b:f3:a4:78:df:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:26:DB:90:97:F3:2F:62:FB:A2:7C:8F:BC:70:23:EA:D2:B9:AC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DLYm25CX8y9i-6J8j7xwI-rSuaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.84.0/22
185.255.124.0/22
194.35.40.0/24
Signature Algorithm: sha256WithRSAEncryption
89:49:58:ec:04:27:3d:0b:d0:3d:e2:e4:61:e0:aa:fc:b6:53:
1d:9f:be:be:21:18:65:0a:49:49:6c:31:ed:fc:56:1e:73:c3:
ac:1a:c1:b9:22:9a:4d:7b:39:c2:ac:0b:db:22:59:b4:c1:cc:
99:a2:97:03:15:3b:28:c3:31:83:a5:60:3d:38:66:42:b3:92:
ab:02:37:87:f2:f4:a2:de:b6:47:a5:d4:31:86:ea:1c:83:b1:
97:6f:ed:72:7a:75:f2:36:27:58:d0:fa:e3:8e:ef:3f:f1:92:
66:22:1b:fb:93:79:e8:d5:62:c3:38:36:28:ed:ce:a0:1b:89:
37:99:48:9d:b1:f2:92:ef:99:18:c4:56:cb:fa:e8:75:3f:57:
e7:d7:f7:5a:01:6c:1f:dc:ae:db:7e:f1:f1:5e:68:90:48:a3:
ee:aa:39:76:c3:89:1f:60:0d:4b:17:80:b3:10:08:07:e8:80:
bb:fe:19:e3:5e:f9:2b:9a:e0:d2:c5:af:de:d2:45:b3:60:60:
e1:c6:4a:45:5c:cb:8f:71:bb:c2:d7:49:20:ba:58:05:cb:9e:
22:ad:ea:48:1c:a7:0b:71:c6:2f:c8:1d:c2:79:31:0c:80:e6:
ae:3c:76:ad:fb:cc:94:01:32:95:af:9e:d7:5c:77:81:d9:19:
8e:0e:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org