Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/DVS71iI8Md5v6Pvo3kzuYd_W-Zc.roa
File: DVS71iI8Md5v6Pvo3kzuYd_W-Zc.roa (raw, json)
Hash identifier: ll0W0D8yrIvzAp4YmZNSBruU+QtdGuUgZ3CK9u8R8pY=
Subject key identifier: 0D:54:BB:D6:22:3C:31:DE:6F:E8:FB:E8:DE:4C:EE:61:DF:D6:F9:97
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 8919FD
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/DVS71iI8Md5v6Pvo3kzuYd_W-Zc.roa
Signing time: Sat 01 Jan 2022 01:54:17 +0000
ROA not before: Sat 01 Jan 2022 01:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206519
IP address blocks: 185.184.85.0/24 maxlen: 24
185.184.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8985085 (0x8919fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Jan 1 01:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d54bbd6223c31de6fe8fbe8de4cee61dfd6f997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:be:2f:a3:35:58:0f:b3:1a:2a:ed:17:87:
78:1d:f4:71:71:54:2e:ad:11:51:41:e9:07:ef:ea:
a7:c9:4b:b5:99:5d:38:7a:d0:6d:c3:37:8b:1d:03:
82:5a:da:cb:46:92:9a:a5:20:fe:d8:30:23:7f:8f:
0f:ee:77:0a:6f:f8:34:e1:ad:38:a8:48:82:50:7e:
be:ad:1a:f8:6a:9d:60:4b:a6:10:50:e5:b0:e9:ba:
25:f1:01:b2:11:49:93:86:7f:ce:c5:97:44:b5:9f:
02:eb:58:f7:e1:72:32:8a:c7:52:2e:4e:a1:a1:69:
52:8e:a3:67:f6:9d:33:2c:d5:1c:6b:f2:21:fc:0c:
ba:a1:ef:b1:c2:d5:68:97:e0:e1:6f:fc:05:2f:aa:
cb:1f:93:ee:26:0c:9c:cb:27:a3:3e:4d:e7:0e:82:
83:4f:90:fa:90:89:df:9e:32:d3:0c:3f:5f:cb:c0:
9e:63:e1:1e:89:b8:52:e4:5b:14:99:32:d3:9a:5e:
32:cb:c3:8c:07:fe:d5:0f:99:73:e4:e1:ee:15:84:
99:aa:4d:c9:8f:87:2a:e3:95:04:fa:da:f7:f3:af:
46:02:31:9f:9f:94:7e:82:25:6f:2f:ce:a9:6f:e4:
7a:7d:de:22:db:0e:de:46:f1:64:c3:07:d6:f8:f5:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:BB:D6:22:3C:31:DE:6F:E8:FB:E8:DE:4C:EE:61:DF:D6:F9:97
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/DVS71iI8Md5v6Pvo3kzuYd_W-Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:14:c9:35:d6:93:5f:46:c1:49:5b:ac:90:a8:4f:c3:f3:ad:
4e:68:75:97:db:23:46:aa:d7:5b:6b:d9:14:91:32:1c:c3:b2:
c5:eb:5b:cd:b5:a1:54:8f:84:13:3a:1f:7a:cf:5c:4c:83:13:
89:bc:f6:2b:0d:56:52:99:76:dc:2d:5c:5f:2d:3c:93:9a:dd:
19:57:9a:07:f8:60:3e:1c:05:82:9d:33:22:d9:db:c9:45:06:
d9:af:90:9e:fa:87:40:0a:81:f1:1d:1b:d1:c8:64:91:0c:47:
09:e1:09:d5:f8:9b:26:e5:e0:c4:fd:2c:7f:ce:b5:8a:6c:a2:
ac:af:de:ea:ed:e2:a6:36:8d:f0:1c:80:43:84:3f:1b:f1:52:
be:d3:bd:bf:af:6a:8d:64:77:a3:fe:8b:e5:66:e9:1d:02:b0:
e3:b4:51:24:aa:fb:fd:22:72:3a:9d:c0:73:98:e6:79:ba:cf:
0d:e4:5e:2b:8a:dd:7f:23:3f:4e:a4:ac:c1:a7:32:82:18:b4:
8a:82:b5:df:13:c3:b8:8e:1c:12:60:07:4e:4a:6b:8b:47:6e:
b4:73:da:fb:0a:09:2f:ca:e7:cd:35:ad:6b:86:b1:e0:c9:6c:
91:55:de:31:9b:42:1a:49:82:b7:9b:9c:ee:80:d1:60:58:c2:
4e:98:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:06 2024 by rpki-client on console-ams.rpki-client.org