Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/_-ij5iHSqluaEf2PmqGgVF-8Kc8.roa
File: _-ij5iHSqluaEf2PmqGgVF-8Kc8.roa (raw, json)
Hash identifier: iOaO3gUqmDRSpczHbkTtsq7qY1ZhmA96eP3KOvF7CHA=
Subject key identifier: FF:E8:A3:E6:21:D2:AA:5B:9A:11:FD:8F:9A:A1:A0:54:5F:BC:29:CF
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 0284AE5E
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/_-ij5iHSqluaEf2PmqGgVF-8Kc8.roa
Signing time: Sat 01 Jan 2022 14:05:51 +0000
ROA not before: Sat 01 Jan 2022 14:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25279
IP address blocks: 217.68.0.0/20 maxlen: 24
185.138.4.0/22 maxlen: 24
2a02:328::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42249822 (0x284ae5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Jan 1 14:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffe8a3e621d2aa5b9a11fd8f9aa1a0545fbc29cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:34:74:5e:18:e5:47:86:af:87:79:e5:30:
93:0e:54:6d:21:e7:33:c2:77:fe:c6:64:27:a3:c2:
3f:3d:43:84:a6:1f:ec:23:67:39:6e:70:bd:27:7f:
5d:2c:ed:76:5e:7c:8a:e1:e0:5d:e9:64:28:34:e9:
61:a8:ab:90:c8:d1:01:85:00:e6:14:b4:10:be:74:
de:b5:5e:3e:eb:b5:2b:65:f2:dc:53:4e:b6:6c:ab:
40:56:12:cb:28:d5:ac:15:75:75:a4:17:2c:2e:01:
f8:79:b6:3c:de:9f:e1:f4:3e:5e:aa:1b:bd:cc:c3:
87:66:ea:d8:72:77:67:3e:1e:7e:34:41:f4:07:a8:
73:d6:01:c0:9a:2b:e0:f2:8d:a7:4f:75:b2:9c:32:
71:03:ae:6a:34:5e:88:17:57:8c:a1:c6:50:46:50:
33:0c:02:05:28:58:2a:2a:c1:5a:9f:f2:dc:a1:b5:
f1:2b:82:da:22:26:9a:a2:ff:75:8f:f5:c2:95:a3:
e2:67:0b:07:87:5d:ad:71:48:65:e7:27:c4:11:aa:
0a:df:0b:a1:14:46:12:2b:55:9c:ac:3f:21:ae:7c:
9b:3a:42:c8:b9:75:73:42:68:86:46:3d:7f:d8:c8:
ef:83:d1:b9:96:91:ec:ee:85:89:ff:d6:0e:35:28:
b0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:A3:E6:21:D2:AA:5B:9A:11:FD:8F:9A:A1:A0:54:5F:BC:29:CF
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/_-ij5iHSqluaEf2PmqGgVF-8Kc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.4.0/22
217.68.0.0/20
IPv6:
2a02:328::/29
Signature Algorithm: sha256WithRSAEncryption
77:92:94:37:d1:5e:f4:ba:8a:e0:03:dd:dc:ca:82:5c:d8:3d:
86:fa:93:e8:3b:06:56:9a:6c:41:d6:db:da:35:24:a2:c6:d6:
8a:ca:01:3a:ae:78:22:a6:3a:cc:95:bc:64:85:dd:e4:01:28:
9f:ba:dc:61:d0:9c:b5:ef:3f:60:30:cb:8b:68:77:d2:1c:0d:
ca:95:ee:c7:82:05:36:b3:48:bf:f6:8c:57:ab:dd:39:68:ef:
b7:3b:66:8c:2b:55:74:b6:fd:47:63:1a:8a:65:25:e2:ae:5c:
8a:11:ca:f3:d7:da:5a:64:f0:c5:78:9c:06:75:62:b2:8f:ec:
d0:17:fa:c1:ad:34:68:47:fc:69:55:07:72:95:ee:86:b9:a8:
36:c6:a6:c9:06:3f:97:71:b2:2c:40:55:6f:64:81:6b:52:6f:
44:d2:cf:6a:55:03:55:99:01:cf:ec:57:57:76:da:3d:31:52:
2d:75:dc:4c:ae:64:39:67:42:fa:c3:78:ed:28:52:03:22:87:
dd:8b:19:07:2c:be:15:c7:fb:97:ca:03:a9:ff:e9:36:b9:74:
df:d4:79:ca:2e:41:ee:bf:42:da:82:4a:74:94:4f:09:1b:ca:
52:92:62:d1:58:fa:aa:37:33:56:ae:69:fb:7c:08:23:9b:b2:
75:78:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org