Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/eN15TfAGA9Pw8mAmrcfQdZ6nKP0.roa
File: eN15TfAGA9Pw8mAmrcfQdZ6nKP0.roa (raw, json)
Hash identifier: 8apONIIVDLC38HGk45t24KEHYegGIIC14HmbtThEH9k=
Subject key identifier: 78:DD:79:4D:F0:06:03:D3:F0:F2:60:26:AD:C7:D0:75:9E:A7:28:FD
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 106AD813
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/eN15TfAGA9Pw8mAmrcfQdZ6nKP0.roa
Signing time: Sat 01 Jan 2022 13:59:37 +0000
ROA not before: Sat 01 Jan 2022 13:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44466
IP address blocks: 185.160.162.0/23 maxlen: 24
185.160.160.0/23 maxlen: 24
188.215.109.0/24 maxlen: 24
188.215.110.0/24 maxlen: 24
188.215.111.0/24 maxlen: 24
188.215.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275437587 (0x106ad813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Jan 1 13:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78dd794df00603d3f0f26026adc7d0759ea728fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:44:0a:b6:b0:97:0e:4a:0a:05:a4:29:37:f7:
e6:85:82:de:a6:14:4a:cd:fa:b9:36:33:fb:99:c1:
ab:a5:93:77:c3:db:b9:90:1c:6f:ea:e6:bb:b9:1d:
9b:2f:43:a8:f2:c8:e7:5a:07:5e:8e:7e:80:37:fb:
fc:cc:c3:c7:b3:ce:2e:ff:a2:35:a3:0c:d5:5a:0d:
87:c3:2e:af:99:0e:40:cd:9b:55:6b:6e:05:d2:4f:
2c:36:4c:96:d3:f3:f9:ba:1a:63:73:36:79:1a:9d:
68:84:8c:86:a9:8a:ed:a9:ea:28:a8:c9:ec:ed:58:
ca:39:f7:f1:6c:ae:ec:46:a5:ba:b7:43:dc:4b:6d:
de:9e:5f:fc:bb:63:ac:28:73:bb:83:6c:9a:45:f8:
d0:8a:ba:45:f3:76:56:2c:34:3a:22:7b:49:41:28:
e0:96:cb:d1:44:c0:77:ef:24:ee:77:f6:69:17:5e:
0d:53:60:b9:e0:92:35:70:b1:8c:77:cc:cd:2e:aa:
a3:9b:35:1f:58:f6:38:bf:6e:b6:e8:20:8c:db:8c:
af:c6:d4:e7:57:7f:6a:2d:a5:65:90:a2:28:4d:c2:
c6:bc:d4:ef:c7:d0:c9:27:c1:a2:d6:13:8f:8b:2c:
ee:ea:0f:2f:18:f3:8f:82:06:dc:9d:be:0e:c4:3a:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DD:79:4D:F0:06:03:D3:F0:F2:60:26:AD:C7:D0:75:9E:A7:28:FD
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/eN15TfAGA9Pw8mAmrcfQdZ6nKP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.160.0/22
188.215.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:8b:0d:24:10:10:7c:57:d7:7a:1a:e3:e1:f8:8c:44:7c:d0:
cf:0a:5a:47:cf:bd:d0:30:5a:4b:70:07:ca:81:dd:aa:d9:3b:
b9:7d:ea:71:64:cd:ed:08:02:ca:fa:43:58:bc:c4:58:a7:95:
50:fc:4c:ac:e9:d5:65:ad:a9:fc:cb:34:2b:43:7a:1b:20:f4:
64:c4:7c:ae:6e:61:28:1f:ae:3a:62:91:fc:92:82:0e:66:06:
c4:e9:eb:3e:9d:42:8f:71:55:31:21:4f:b5:e8:be:b9:c6:92:
00:ae:4b:70:5c:d9:a0:5a:5e:7a:cb:cc:5a:15:91:fe:aa:50:
fd:ee:cc:f4:bb:d0:52:02:69:9f:04:65:c2:eb:f5:47:93:ba:
66:ca:97:a7:10:eb:bf:f2:05:10:7b:71:ea:23:4e:ef:8b:3b:
ff:5b:47:ae:a0:53:86:e5:29:fd:27:62:6e:2b:4c:eb:15:40:
2e:07:69:51:5b:6e:99:da:f0:37:88:88:fb:82:b2:20:48:8f:
64:80:39:f6:dc:a8:66:8e:ab:12:00:19:65:d3:64:6e:ef:a8:
35:63:63:1d:33:11:ad:67:c9:e4:4e:27:0f:ad:43:37:00:8f:
c6:64:49:1e:31:98:34:a6:bc:39:03:19:b3:28:7c:cf:a6:da:
70:03:d1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:34 2024 by rpki-client on console-fra.rpki-client.org