Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/dkdyDfIfcKUKSfl5RPzZcm1FgIQ.roa
File: dkdyDfIfcKUKSfl5RPzZcm1FgIQ.roa (raw, json)
Hash identifier: EYQvFNWvxyvXP61gfTiYZ7Ghf3GSs2NldiLp6lNugA0=
Subject key identifier: 76:47:72:0D:F2:1F:70:A5:0A:49:F9:79:44:FC:D9:72:6D:45:80:84
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 129155B4
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/dkdyDfIfcKUKSfl5RPzZcm1FgIQ.roa
Signing time: Sat 01 Jan 2022 10:05:51 +0000
ROA not before: Sat 01 Jan 2022 10:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204834
IP address blocks: 185.177.233.0/24 maxlen: 24
185.177.232.0/23 maxlen: 23
185.177.232.0/24 maxlen: 24
5.202.106.0/23 maxlen: 23
5.202.106.0/24 maxlen: 24
5.202.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311514548 (0x129155b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 10:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7647720df21f70a50a49f97944fcd9726d458084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:2e:bd:ff:59:a5:ce:89:07:16:3d:c7:fa:
03:d7:77:2e:10:b9:73:59:51:f2:79:f7:a0:3d:1f:
25:d8:31:4e:5d:59:7d:8e:c3:69:6e:de:99:79:fc:
91:c1:32:2a:da:80:67:a3:6e:0a:30:74:c5:b1:14:
2b:c1:d6:97:c9:3e:2c:40:8a:c4:0c:37:d5:42:ac:
4b:4b:e8:a8:30:99:2c:07:a7:c6:fd:46:16:56:cf:
62:bb:28:ba:e5:a7:b6:c1:79:f0:a6:7d:d8:d3:6b:
97:ff:ef:b9:ea:02:75:59:cd:69:8a:0a:99:fb:43:
ba:da:07:dd:31:ee:c5:d6:00:8c:a5:81:59:77:1a:
0a:aa:09:e1:c2:dc:65:8a:5e:c7:23:4d:d5:6c:91:
24:21:8c:4c:07:b6:b8:3f:9e:ab:10:84:bb:67:4c:
b4:74:3b:ac:91:a3:ab:f3:e2:4d:91:f9:dc:ca:0e:
54:a3:64:c6:07:40:1d:4b:90:78:47:e4:17:5e:d3:
bf:e2:03:c0:80:90:3e:6a:de:a0:93:71:d4:49:f2:
06:63:b0:c7:55:0b:2f:de:d3:45:86:a0:b5:cf:25:
54:be:5d:e9:a9:fa:8a:a9:fe:a7:54:3f:be:cf:74:
f7:34:6c:e5:18:64:11:a5:0d:66:bb:12:64:d2:52:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:47:72:0D:F2:1F:70:A5:0A:49:F9:79:44:FC:D9:72:6D:45:80:84
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/dkdyDfIfcKUKSfl5RPzZcm1FgIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.106.0/23
185.177.232.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:4d:b9:14:e6:bb:87:97:f6:00:61:32:c5:47:38:50:e9:32:
b3:cf:6c:4e:cd:56:86:b1:e1:54:8d:47:a6:56:00:b1:4b:1d:
ef:02:2a:4f:a0:0c:25:52:57:c0:cb:68:22:d2:bd:45:9f:3d:
ea:7f:61:66:2f:99:a6:82:aa:5f:e5:e1:2c:e1:05:ed:4e:4d:
e6:90:89:de:b9:68:23:98:24:6d:08:fc:46:77:f9:72:85:64:
5a:4f:b3:3f:2c:a7:d7:f4:f7:65:dd:26:00:02:48:00:94:e8:
ff:df:99:a1:82:24:86:49:ac:96:80:85:81:5c:57:4a:68:27:
ac:05:e8:d6:84:be:fe:10:38:2b:96:bb:fa:b1:34:c1:7b:87:
f2:ee:c5:3d:68:f7:06:7f:df:d8:d0:7d:d4:5f:af:95:2b:ae:
bd:1a:3b:04:53:18:05:d8:ed:38:90:ef:c8:2f:bc:c8:a5:cd:
6f:b6:9b:27:bc:c2:d2:0c:3a:4e:fe:01:63:b4:d5:cb:a2:16:
bc:12:6e:8e:95:74:f7:0a:e5:eb:bb:27:e7:a8:6e:78:a4:87:
cb:4a:cb:36:a9:a6:1e:b4:3f:ce:a9:6a:f9:44:67:15:61:78:
b1:f1:ee:37:b6:ea:bf:90:01:dc:42:e5:40:14:9d:bc:82:ec:
93:a3:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org