Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/DRDI-FeLWyeZcheLd5xKcuS9beA.roa
File: DRDI-FeLWyeZcheLd5xKcuS9beA.roa (raw, json)
Hash identifier: n2FSmXN94J5ridConOrGI+9e/gfPHFCMH7bmk0zyG8Y=
Subject key identifier: 0D:10:C8:F8:57:8B:5B:27:99:72:17:8B:77:9C:4A:72:E4:BD:6D:E0
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 01837846CE216ACF32073D8A4AB17D8FBFBA
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/DRDI-FeLWyeZcheLd5xKcuS9beA.roa
Signing time: Mon 26 Sep 2022 05:30:49 +0000
ROA not before: Mon 26 Sep 2022 05:30:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48966
IP address blocks: 95.130.89.0/24 maxlen: 24
95.130.91.0/24 maxlen: 24
95.130.88.0/23 maxlen: 23
95.130.88.0/24 maxlen: 24
95.130.92.0/23 maxlen: 23
95.130.92.0/24 maxlen: 24
95.130.94.0/24 maxlen: 24
95.130.93.0/24 maxlen: 24
185.88.82.0/23 maxlen: 23
185.88.82.0/24 maxlen: 24
185.88.81.0/24 maxlen: 24
185.88.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:78:46:ce:21:6a:cf:32:07:3d:8a:4a:b1:7d:8f:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Sep 26 05:30:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d10c8f8578b5b279972178b779c4a72e4bd6de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:b5:16:a9:d8:70:29:6f:0b:81:aa:c3:b3:
b9:06:e9:02:4b:a9:c1:59:84:45:25:b9:ac:75:31:
3f:63:7a:86:db:99:49:04:f7:0f:f5:58:e0:41:1f:
51:66:e0:91:45:30:9e:ba:e7:fa:73:f1:1b:e9:8e:
52:a0:a2:3a:78:80:0f:13:8e:73:b5:47:0c:3d:b0:
18:4b:9d:23:4e:0d:12:92:e1:44:9c:50:4c:c0:eb:
8c:f1:6b:d7:70:12:39:d7:fd:35:ec:d3:6c:b1:fe:
84:d7:ee:c3:66:5f:3a:8c:10:91:3d:c1:f3:02:ed:
90:54:b7:b4:26:6f:54:a9:80:f7:ba:99:4a:94:9b:
f3:83:d8:71:68:62:76:23:10:7c:b9:8b:7e:a5:10:
3e:62:47:0b:ab:15:34:a4:d8:62:ac:3d:06:9e:93:
48:44:5d:28:96:80:7d:86:6c:d9:e3:2d:c4:a6:cd:
e6:dd:a9:2b:b7:74:7e:f5:69:ff:d1:18:79:0a:74:
e0:e7:ce:8a:d9:4b:6f:fb:40:a8:92:de:ff:24:69:
29:3c:a6:f9:e6:4c:61:d7:6a:23:5c:43:8c:ca:d0:
9f:3e:a9:4b:82:44:08:3b:77:36:88:6a:28:e7:72:
3b:18:a2:cb:b7:56:74:e5:bd:87:32:15:9d:b7:3a:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:10:C8:F8:57:8B:5B:27:99:72:17:8B:77:9C:4A:72:E4:BD:6D:E0
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/DRDI-FeLWyeZcheLd5xKcuS9beA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.88.0/23
95.130.91.0-95.130.94.255
185.88.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:60:09:07:84:05:d4:dd:a1:a4:e4:0d:6c:dc:14:56:fa:57:
13:b6:a6:9e:60:cc:60:69:7e:7f:32:a3:da:39:a5:5a:0e:e2:
96:ac:9d:d0:10:81:5e:e2:ce:8d:62:17:80:60:81:f4:4b:42:
f8:0a:f5:9a:39:96:62:df:d6:b7:a5:6c:71:7e:f6:f2:13:a8:
f3:3f:6f:f4:dc:a4:9f:02:15:63:c7:40:17:26:b6:82:92:29:
88:2e:c7:33:e8:f4:91:a7:3a:46:7d:a9:da:5a:b9:b5:95:77:
02:a4:15:2f:da:83:07:11:78:34:5d:a3:6f:ce:01:74:c5:44:
7d:fa:7b:13:eb:b7:00:9d:b9:e3:14:9e:23:c9:67:21:ab:dd:
16:f3:4c:b1:9e:19:8c:f9:c9:6b:5e:ad:85:48:ca:21:b5:08:
a2:fb:59:59:66:80:39:a5:3d:d2:b7:33:32:59:c1:42:cc:e8:
67:2b:9a:24:bc:46:47:ea:68:02:19:fa:aa:1f:ce:8f:f2:3a:
0a:8d:ba:d0:45:2e:db:87:91:6f:f3:46:ce:d5:c7:e8:80:05:
48:f4:c0:ed:58:5a:85:7b:63:14:07:8d:1b:ef:a9:7d:d1:87:
03:7d:ca:6b:52:18:4f:be:29:7a:27:99:78:f6:23:09:0a:52:
6b:86:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:03 2024 by rpki-client on console-ams.rpki-client.org