Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/DbpJOz1ZHt2xchM1NsIZsJilOkw.roa
File: DbpJOz1ZHt2xchM1NsIZsJilOkw.roa (raw, json)
Hash identifier: 64sOJRv/ghICvA8UV10GWSZRbOrjP3pq8QOJliSrOX4=
Subject key identifier: 0D:BA:49:3B:3D:59:1E:DD:B1:72:13:35:36:C2:19:B0:98:A5:3A:4C
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 0181D53B6AAB9DC3F5EAC202C038D5F7C417
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/DbpJOz1ZHt2xchM1NsIZsJilOkw.roa
Signing time: Wed 06 Jul 2022 20:37:29 +0000
ROA not before: Wed 06 Jul 2022 20:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14593
IP address blocks: 145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.92.0/23 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:3b:6a:ab:9d:c3:f5:ea:c2:02:c0:38:d5:f7:c4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Jul 6 20:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0dba493b3d591eddb172133536c219b098a53a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:da:0b:60:1a:c9:e6:4a:58:ed:5d:13:0a:
a6:52:45:46:dc:ab:de:2a:70:ae:20:7b:0d:62:6c:
20:4a:9a:22:38:aa:64:15:b8:41:d1:f7:a6:72:85:
8c:a4:56:9b:d2:e2:9b:74:f4:16:0a:8e:0c:99:8e:
16:fe:3c:1b:00:29:39:e7:14:18:56:70:66:5b:af:
7d:8d:e6:2b:68:7b:c6:e4:bf:4d:69:e2:61:f4:8e:
25:21:4a:14:6b:2b:a2:71:28:ce:ed:0a:d4:50:fc:
29:81:98:88:ae:3e:4a:e1:d4:01:75:da:52:5f:28:
5f:fc:60:fa:34:3a:ec:ed:38:f9:54:2d:7f:f3:2e:
fb:0b:3f:97:fd:82:90:69:f1:7b:40:ef:a7:e4:02:
bb:81:56:5a:6b:07:93:ce:0c:be:be:fe:e9:ef:a6:
e1:d7:9f:ca:db:3c:fe:35:2c:6c:34:b6:74:92:08:
be:a2:da:7a:11:a5:54:3d:6d:00:e7:a1:39:c6:b4:
4d:e0:50:15:eb:f1:5f:7b:32:01:d8:a1:21:d2:0e:
e8:66:bc:ee:49:77:a4:4a:82:c5:6f:1d:0f:c9:ef:
b9:ac:b2:99:75:1c:17:0f:9d:73:34:bc:6b:64:f3:
65:2f:3e:63:8f:c4:97:6f:86:e5:03:0c:9b:d4:fd:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BA:49:3B:3D:59:1E:DD:B1:72:13:35:36:C2:19:B0:98:A5:3A:4C
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/DbpJOz1ZHt2xchM1NsIZsJilOkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.64.0-145.224.103.255
145.224.108.0/22
145.224.124.0/22
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
07:3c:0b:a2:c6:38:f8:0a:04:e8:27:58:22:21:fb:04:db:3f:
70:9c:39:0a:23:6f:6b:1e:f4:94:83:cb:56:ed:2d:ab:14:68:
7b:84:b1:ff:d3:46:d0:b6:f7:b0:21:b0:6e:40:13:66:d3:d3:
a1:79:27:70:75:1f:5d:2a:ac:a2:2b:d7:7f:ef:93:16:80:36:
f5:dc:ff:09:9d:4b:bc:c9:eb:2b:ae:e0:52:77:f0:c8:33:97:
6d:38:ee:4a:34:13:fb:fb:70:85:69:fe:c3:ee:cf:ee:07:9a:
5a:66:ed:f9:e6:be:ec:1c:cc:5f:26:c2:bc:03:06:ff:f5:e1:
31:cd:24:15:33:d6:ab:e8:c6:5b:26:80:ba:7b:ca:fb:98:46:
34:4e:14:c6:f0:3e:65:19:0a:a3:82:ed:c3:ec:c3:ae:80:3b:
17:af:69:ac:0c:cf:75:94:55:73:82:85:f7:08:7a:2e:dd:fb:
d0:77:ca:1c:37:34:e0:c1:18:36:6e:f6:4d:f6:2d:f6:2e:d5:
11:5e:27:dc:45:39:87:a5:26:02:2c:ae:7c:cb:8a:65:58:1e:
db:a4:8e:53:1c:48:db:07:58:58:49:17:94:c4:72:e1:85:4e:
79:34:b0:06:65:7f:9f:1c:b9:d0:79:bf:02:a5:99:e1:18:14:
a1:f0:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org