Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/DRdIYwcW1lMJUNuKwVsN3jyp73A.roa
File: DRdIYwcW1lMJUNuKwVsN3jyp73A.roa (raw, json)
Hash identifier: h2k+4sHd1h97TD9zu9ywJkDKTazFhbSGNma9s6khXSE=
Subject key identifier: 0D:17:48:63:07:16:D6:53:09:50:DB:8A:C1:5B:0D:DE:3C:A9:EF:70
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 2FDF3346
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/DRdIYwcW1lMJUNuKwVsN3jyp73A.roa
Signing time: Sat 01 Jan 2022 12:03:18 +0000
ROA not before: Sat 01 Jan 2022 12:03:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43561
IP address blocks: 83.222.184.0/21 maxlen: 21
109.160.116.0/23 maxlen: 23
87.246.4.0/23 maxlen: 23
87.246.8.0/21 maxlen: 21
87.246.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803156806 (0x2fdf3346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 1 12:03:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d1748630716d6530950db8ac15b0dde3ca9ef70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:4c:97:74:bb:d8:e3:98:95:71:31:57:2d:
ee:94:74:c6:73:12:53:72:f9:e0:cd:2a:6b:c0:a1:
5c:bf:73:ae:73:bc:90:61:06:59:ed:f8:a3:dc:3d:
59:e1:c7:6b:48:6e:e8:82:3f:e0:24:42:0a:9c:8a:
fb:62:59:fa:34:fc:fe:f3:bc:90:c4:c4:8b:68:36:
01:8f:98:04:14:8c:6a:1d:bb:e3:ea:1c:ad:c2:ce:
64:2e:99:ba:f4:6e:e3:b3:4f:08:71:6b:13:07:50:
c1:28:7b:ae:5d:01:29:b7:f4:f7:4e:c0:1c:77:b8:
b6:18:64:7b:f5:52:fc:fb:2f:65:2c:82:ab:d2:be:
6f:08:0a:fb:ad:c9:8c:dd:c7:df:44:21:c9:e9:27:
d7:5c:c6:76:e7:49:e2:dc:a4:35:22:cf:80:3d:98:
03:a0:c9:92:5d:98:37:79:62:94:ec:cc:fc:cc:93:
1b:0f:39:5a:76:55:70:96:76:8d:fb:24:3e:79:95:
17:71:66:43:a2:42:be:10:e5:a7:ef:c2:fe:62:ce:
a9:86:7f:39:89:b4:e2:b1:5d:0a:ec:3a:f8:f8:c2:
1c:6f:b4:d5:5d:26:13:ef:98:33:25:0d:7b:e9:03:
6e:03:6f:38:5c:38:6e:56:aa:3f:ab:45:ac:3a:2c:
ee:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:48:63:07:16:D6:53:09:50:DB:8A:C1:5B:0D:DE:3C:A9:EF:70
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/DRdIYwcW1lMJUNuKwVsN3jyp73A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.184.0/21
87.246.4.0/23
87.246.8.0-87.246.23.255
109.160.116.0/23
Signature Algorithm: sha256WithRSAEncryption
44:03:1f:42:93:21:6d:30:43:df:11:cb:66:bf:4a:1a:a3:cc:
8d:f7:82:6c:85:db:70:8d:c3:7c:36:5c:97:e0:6b:5d:cc:1d:
52:b1:16:8e:1c:ae:3b:2f:cd:36:6c:fb:ef:45:c0:8f:31:b9:
cd:c0:4a:19:25:32:9a:c1:25:df:e7:e4:df:5e:ab:02:c0:42:
f2:11:72:27:6e:a4:d8:a8:71:c9:42:50:ce:91:7c:93:11:16:
ac:4e:fc:5c:1a:0c:66:35:b8:ce:42:9d:96:24:cc:e3:d8:8a:
b3:0c:40:f1:e6:43:4a:73:75:b2:05:1e:9a:b2:fa:12:52:96:
21:8f:30:a5:52:dd:46:4e:1c:c1:67:4e:d4:52:86:f1:a7:9b:
c3:92:36:3f:3c:9c:34:26:e9:eb:3a:f6:9b:0b:86:82:2f:0c:
1c:66:2a:a2:76:02:e3:41:08:3e:74:f4:f3:6f:45:d6:ea:68:
28:0f:89:1e:5b:a6:43:9a:36:df:88:f4:93:c3:52:a6:bb:f3:
ad:42:2c:90:70:38:f0:99:db:5d:5e:43:32:1f:1d:bb:66:ef:
3d:4b:19:c9:3d:e8:5c:80:11:50:d5:f2:75:7f:04:75:23:68:
70:f9:4f:87:74:06:73:3f:19:82:36:92:7f:e7:46:e6:90:57:
3c:fa:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:40 2023 by rpki-client on console-fra.rpki-client.org