Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/f7OOaS7EQTZaPMfPC1wuJzXciFk.roa
File: f7OOaS7EQTZaPMfPC1wuJzXciFk.roa (raw, json)
Hash identifier: F32o0qmB+fVIskgY/zl/fkftMZmvt0gNrKbXti6sm5Y=
Subject key identifier: 7F:B3:8E:69:2E:C4:41:36:5A:3C:C7:CF:0B:5C:2E:27:35:DC:88:59
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 0184E2DC234688BF6E70C69B52B5D733DA80
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/f7OOaS7EQTZaPMfPC1wuJzXciFk.roa
Signing time: Mon 05 Dec 2022 15:16:28 +0000
ROA not before: Mon 05 Dec 2022 15:16:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49711
IP address blocks: 176.118.152.0/21 maxlen: 21
91.220.250.0/24 maxlen: 24
91.215.176.0/22 maxlen: 22
2001:67c:57c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:dc:23:46:88:bf:6e:70:c6:9b:52:b5:d7:33:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Dec 5 15:16:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fb38e692ec441365a3cc7cf0b5c2e2735dc8859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:e9:e9:22:a8:0f:26:31:ec:dc:41:ea:d9:
e9:4d:77:5c:ab:d1:81:56:e6:e9:c0:34:06:5a:db:
36:66:fd:c9:8f:07:5d:09:0f:ef:e1:4c:f1:39:bb:
23:d9:46:ce:ae:eb:e8:c2:fe:06:04:81:5c:bd:a1:
06:da:26:c2:5b:cd:19:49:6e:c7:dc:a6:3c:08:b3:
86:f8:05:87:bc:d6:94:99:5e:78:da:97:c6:b4:b4:
e1:34:bf:22:2a:52:b3:68:25:31:ab:db:de:41:bb:
be:f2:ac:7b:af:5b:30:43:86:ff:06:47:8e:41:e0:
39:65:cd:23:b1:e9:62:b7:58:ad:11:bb:29:25:94:
47:c6:6b:37:9d:b8:11:ce:f0:d6:f4:4c:53:ea:87:
6e:c3:58:06:4c:26:32:22:57:57:b7:5f:35:d9:84:
39:f8:37:82:7e:0e:df:ae:80:91:3e:71:2d:20:d2:
af:1c:ca:02:59:1a:7c:5d:8e:d0:ba:08:fc:90:a3:
e0:ce:95:a4:82:de:9d:3a:45:78:d4:1f:b4:c6:28:
c2:3e:b3:e2:4f:d1:a7:a3:e6:bb:ce:a2:56:53:2b:
a2:2d:af:2f:ab:e5:94:7a:be:7b:d8:dd:f6:cf:66:
29:98:c8:af:20:f9:ca:a6:a2:84:f2:7a:ad:3f:0a:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B3:8E:69:2E:C4:41:36:5A:3C:C7:CF:0B:5C:2E:27:35:DC:88:59
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/f7OOaS7EQTZaPMfPC1wuJzXciFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.176.0/22
91.220.250.0/24
176.118.152.0/21
IPv6:
2001:67c:57c::/48
Signature Algorithm: sha256WithRSAEncryption
1b:6e:42:43:33:78:34:77:63:52:3f:91:72:9d:a8:4a:5e:ea:
f6:44:7a:7b:dc:aa:b9:df:79:b2:b5:55:09:d5:dc:e6:55:c3:
d8:af:e2:bc:86:71:87:05:d6:4a:26:36:37:62:39:e4:86:89:
38:84:33:a5:7c:98:fe:9a:84:39:ff:87:ff:c7:9d:7b:e6:b0:
95:12:f5:cb:38:7d:06:f3:03:1d:39:6a:9a:f6:cd:5c:b2:8b:
6c:a0:57:5b:e0:55:51:5b:44:f0:95:ca:15:87:b1:98:43:55:
61:71:f2:6c:d2:92:24:7e:f6:19:93:d3:e9:c5:2d:e4:6d:4f:
b1:af:84:3d:b0:c6:3e:f4:85:34:e9:06:9c:be:a8:01:16:28:
42:39:ea:9b:f4:b2:0e:10:81:b5:76:fe:50:c7:a3:6c:43:8d:
e9:aa:02:c0:bb:73:02:d5:06:1f:f4:fd:c7:1b:24:b6:79:58:
e1:b2:5d:42:4c:b5:69:8e:22:1c:e3:1f:4e:34:fd:85:75:3b:
59:b4:66:f9:91:ac:29:32:e1:ff:24:77:1e:98:93:f9:1e:36:
f1:d7:a2:d4:91:f2:8e:87:0d:9c:11:b4:61:34:16:3a:05:07:
ca:1e:ad:2b:5f:af:d4:f1:19:8d:75:5f:12:86:36:ee:5a:ff:
d1:96:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-fra.rpki-client.org