Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DLAFrETpSnolg2c0z8a8sCKYEx0.roa
File: DLAFrETpSnolg2c0z8a8sCKYEx0.roa (raw, json)
Hash identifier: no1IrEHFkinMBI4LPO7dAwo5+P8iUugdIqKcLq2ElNA=
Subject key identifier: 0C:B0:05:AC:44:E9:4A:7A:25:83:67:34:CF:C6:BC:B0:22:98:13:1D
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0B089EEC
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DLAFrETpSnolg2c0z8a8sCKYEx0.roa
Signing time: Tue 26 Apr 2022 05:37:47 +0000
ROA not before: Tue 26 Apr 2022 05:37:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185114348 (0xb089eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 26 05:37:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cb005ac44e94a7a25836734cfc6bcb02298131d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:62:d9:ad:55:d0:8e:a6:c9:ec:f3:f1:2c:
ee:cb:26:02:74:32:59:c5:6b:49:a5:d4:27:00:11:
bb:e9:06:7b:2d:37:59:35:60:04:73:1f:fc:23:b3:
3c:0b:0e:ef:b1:5e:73:8e:5e:df:60:10:59:2e:d1:
e3:34:e0:7b:fe:da:ba:32:80:c7:a2:50:b6:f2:1f:
49:12:a3:6d:4b:75:40:d1:cc:e7:d7:8e:6e:e5:67:
92:e9:05:e8:2a:8b:c3:2d:5b:d3:9c:0f:4f:9a:33:
f3:e8:d4:05:94:4c:74:6a:36:78:b5:3d:b0:4b:63:
54:32:f0:66:90:3d:90:90:d8:60:07:11:e2:e6:0b:
95:ed:38:91:23:84:f2:73:a8:a6:f0:36:f0:cd:4b:
a2:89:9b:68:96:2b:cc:ee:22:17:17:87:f1:a7:df:
92:a7:37:b0:ba:75:f7:87:2b:4b:92:92:87:23:3a:
53:f5:63:98:1a:fa:42:32:c4:45:36:06:57:3f:a8:
8a:79:a2:be:4a:be:9c:f3:c7:ce:25:34:7e:29:d3:
18:c6:bd:18:34:2b:29:6a:e5:22:93:95:a7:e4:32:
25:5e:05:2b:6e:5f:89:f4:7f:04:d4:14:03:94:e3:
e2:11:77:7b:03:64:cc:59:a1:be:0a:84:8d:47:c8:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:05:AC:44:E9:4A:7A:25:83:67:34:CF:C6:BC:B0:22:98:13:1D
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/DLAFrETpSnolg2c0z8a8sCKYEx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.194.0/24
85.133.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e6:48:c0:76:2b:2d:6f:82:c3:13:d5:9e:62:f4:68:f8:ae:
61:28:64:b4:a3:73:5b:6c:57:be:40:8f:20:fb:17:af:91:da:
46:67:fa:d7:3a:35:11:53:5a:b1:44:59:e5:a6:10:9d:22:08:
52:f7:df:17:a1:f3:27:c5:d6:bb:f6:05:f5:b4:af:b1:77:47:
ce:79:31:ed:a0:6a:a5:93:82:03:93:6b:36:ff:46:a6:92:95:
7f:8f:40:4e:15:29:fd:04:d2:21:b8:27:2a:e5:0b:f1:e8:ce:
0c:83:84:0a:97:77:e4:c8:25:c6:5e:fb:62:8d:73:12:4e:9d:
bc:e8:f2:db:58:6d:bf:6c:b9:5f:20:40:57:8c:91:e0:2a:d4:
d8:60:61:f8:cf:12:86:72:68:b7:b8:b0:5e:b7:0e:38:bd:e6:
e4:7d:72:d2:e5:71:b8:7b:88:38:96:0b:a1:22:b4:a4:69:c8:
09:cc:2c:66:70:ab:f5:ad:76:14:b4:06:54:59:37:34:0c:1a:
08:d3:62:07:69:2c:8a:49:bd:47:30:94:f7:42:56:68:b6:29:
2b:e4:71:9e:51:cd:e3:50:75:6c:a7:b8:e1:d6:c5:03:11:c6:
31:ce:19:ff:0a:92:c2:1e:4c:73:95:58:98:d8:5d:37:b9:2f:
a1:0d:5a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org