Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/FRqSumm7tJ3FchwpIzohT-4fXZE.roa
File: FRqSumm7tJ3FchwpIzohT-4fXZE.roa (raw, json)
Hash identifier: et16t735FOzLlJYThPuh6i6kJ9frFkUpJ83GyFuEhWw=
Subject key identifier: 15:1A:92:BA:69:BB:B4:9D:C5:72:1C:29:23:3A:21:4F:EE:1F:5D:91
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 018215F455241CAA30A9E0C7688679B5BBF7
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/FRqSumm7tJ3FchwpIzohT-4fXZE.roa
Signing time: Tue 19 Jul 2022 10:15:10 +0000
ROA not before: Tue 19 Jul 2022 10:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205780
IP address blocks: 185.206.98.0/24 maxlen: 24
185.206.96.0/24 maxlen: 24
185.206.97.0/24 maxlen: 24
185.206.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:f4:55:24:1c:aa:30:a9:e0:c7:68:86:79:b5:bb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Jul 19 10:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=151a92ba69bbb49dc5721c29233a214fee1f5d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8b:da:fe:91:46:dd:42:7c:24:89:ab:62:15:
da:bc:6e:97:06:8b:27:5f:96:23:34:3c:e0:b5:06:
8d:e8:c7:04:f4:e4:45:5b:1f:e2:a6:75:bf:1e:31:
01:b9:a1:06:68:4b:38:8b:86:73:90:f4:86:48:ef:
0c:56:c4:fd:8c:d4:85:da:eb:bb:55:b4:cb:dc:53:
02:1e:c3:f9:4a:b6:91:e9:25:3b:b2:0e:ce:fc:38:
8e:e9:0a:05:ff:21:cf:14:a1:97:91:87:a3:54:81:
91:d1:02:5f:7c:68:28:ed:81:3f:49:b4:b2:7d:13:
6d:a4:a7:a6:69:5a:9f:33:15:1b:26:16:8d:3c:d3:
02:aa:2b:97:a8:01:94:c2:cc:27:c3:f5:61:95:43:
b8:39:96:2e:b4:31:b7:10:2f:57:2b:13:05:70:46:
93:96:34:a4:3e:86:2f:4d:2a:f1:0e:0e:30:e1:d1:
13:ab:34:55:97:34:05:cc:08:11:2c:36:a5:21:2c:
8a:ac:20:75:71:bf:07:41:63:c6:80:46:99:13:99:
7f:61:38:79:da:51:ac:f2:b7:3b:06:f7:74:08:fb:
2d:a7:20:a7:07:07:9c:ef:da:3d:e1:11:1d:58:93:
a5:02:2f:99:1c:16:59:c4:fc:1f:f3:9a:68:ec:7f:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1A:92:BA:69:BB:B4:9D:C5:72:1C:29:23:3A:21:4F:EE:1F:5D:91
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/FRqSumm7tJ3FchwpIzohT-4fXZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.96.0/22
Signature Algorithm: sha256WithRSAEncryption
32:a1:e7:1f:cd:22:19:16:9d:26:d3:37:54:00:1e:82:56:64:
7d:d1:0a:ac:38:63:97:17:5f:15:84:83:e0:fb:1c:67:26:14:
94:ca:b5:c2:c2:06:dc:bd:06:37:b3:23:c2:66:30:90:10:24:
b5:a4:f2:b1:76:43:7e:78:d0:a3:73:b8:94:2c:bb:5b:61:93:
a8:5d:fa:07:2c:ea:02:8d:05:7d:e2:50:78:0a:4a:5d:8f:2d:
f5:da:80:40:6e:91:fa:e3:85:df:28:d2:7b:ae:f3:41:4f:f3:
25:51:14:bf:bb:10:44:b0:e3:90:9a:bd:85:02:98:1c:45:75:
57:31:a2:93:03:c0:0d:85:6c:5a:05:54:4d:08:70:bf:da:6e:
4a:77:54:0a:6f:8d:c2:0e:7a:47:78:b6:cf:51:ac:39:73:99:
72:a7:cf:90:89:5c:dd:24:6f:03:b9:b3:f2:bf:2e:74:b8:d1:
a4:ae:42:a2:e8:b3:cc:43:51:9b:20:ca:3c:6e:02:f2:5a:f5:
9b:ce:d5:1f:96:61:db:40:d6:cf:b9:a5:c3:51:a0:ca:3d:86:
af:63:27:07:ef:90:61:cb:7e:00:32:40:a4:59:b4:96:be:43:
6f:60:6d:d2:9e:40:d2:f1:cb:6d:59:03:b7:47:75:bd:3e:67:
ac:0f:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org