Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/DvW-RhEFhZSSlqcSzJhCDAFkk1w.roa
File: DvW-RhEFhZSSlqcSzJhCDAFkk1w.roa (raw, json)
Hash identifier: 89YotD3qhPgwnPQhmpMGvFpnQbDQHHIbwM/5xmm/B+8=
Subject key identifier: 0E:F5:BE:46:11:05:85:94:92:96:A7:12:CC:98:42:0C:01:64:93:5C
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 02902184
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/DvW-RhEFhZSSlqcSzJhCDAFkk1w.roa
Signing time: Sat 01 Jan 2022 06:05:24 +0000
ROA not before: Sat 01 Jan 2022 06:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211606
IP address blocks: 185.254.121.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43000196 (0x2902184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Jan 1 06:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef5be46110585949296a712cc98420c0164935c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:c3:dd:5b:41:c2:5c:c1:74:e3:bd:90:05:
dc:4d:da:3d:17:3a:ed:eb:14:54:21:85:db:0a:d8:
9f:79:5b:41:3b:21:5d:73:46:14:57:8c:6b:e1:b6:
2d:13:ce:a9:64:ae:9a:6a:a0:4e:0a:52:88:b2:6d:
72:8a:28:3a:e0:29:a5:d4:d2:cb:41:da:fc:a7:2b:
68:28:de:59:66:3a:3c:00:fb:9c:11:bc:58:01:47:
d6:7a:22:03:1b:87:2d:e0:50:01:ea:91:ea:2d:75:
64:44:bb:a1:e2:19:83:4a:ab:f3:73:30:cf:1b:bd:
ff:91:79:ae:47:61:92:3e:d1:6f:c9:8a:62:ae:a3:
92:86:ac:7d:ec:61:ea:2c:4c:eb:ad:c2:fe:e1:55:
f9:21:27:b8:7e:84:97:af:dd:2a:15:bb:fd:cc:78:
d3:e9:3c:a1:69:8e:83:5a:30:ec:47:d1:28:22:e9:
2f:64:52:a6:3c:b2:01:cd:42:fb:49:79:3e:ee:a6:
c7:8c:55:0b:c3:10:e7:0f:72:8a:85:de:ee:01:1b:
33:1f:d2:ed:09:ab:a8:c4:d9:3a:25:15:8b:5b:4a:
d4:eb:4d:95:95:72:7e:fa:41:36:18:22:d9:67:d2:
4d:bc:cc:df:b4:93:0c:51:cb:f9:54:66:7f:ea:1b:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:BE:46:11:05:85:94:92:96:A7:12:CC:98:42:0C:01:64:93:5C
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/DvW-RhEFhZSSlqcSzJhCDAFkk1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.121.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cd:f3:21:3a:61:30:b9:50:fd:54:37:2d:85:6b:e7:33:b9:
5d:33:1a:ff:3f:2f:7a:98:ea:68:f1:9e:8c:7c:9a:bc:b3:76:
ca:42:b0:9f:c8:80:74:6c:ef:64:78:53:45:76:df:f8:8f:a3:
41:d8:0f:e4:38:46:a3:37:b7:13:bb:15:2b:9b:82:de:76:69:
5d:48:11:e6:ab:8a:a8:ba:d3:e0:c4:02:4f:b3:1c:4e:6a:1e:
ba:70:f9:93:fd:17:75:1f:ae:0a:ec:06:d3:e4:73:9c:65:35:
cd:9a:28:63:68:d6:b9:09:02:03:c9:0a:5e:11:37:66:52:a2:
e9:46:2e:4c:03:ed:eb:9b:13:74:23:bd:4a:f4:09:ca:52:2f:
e6:f4:4b:ef:18:a7:57:bd:c1:81:d7:d3:7a:94:48:21:41:86:
53:a1:68:b6:29:d2:17:7c:15:19:18:6d:54:1a:b4:98:cb:db:
cd:51:31:b3:85:8b:31:18:92:d4:ec:c8:f4:7a:33:5c:25:2f:
8e:a2:d5:20:bd:b4:c8:54:02:4b:7a:fb:59:2f:f1:72:c4:d8:
d1:0e:9f:84:b6:b6:a2:51:8d:e7:e8:fa:36:b6:3d:f8:72:dc:
16:d0:78:ca:66:cd:3f:33:cf:44:b9:ca:c4:c5:8f:99:d3:6b:
21:5a:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:47 2024 by rpki-client on console-fra.rpki-client.org