Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/cfrsFssAXc-JD5MuLwhFm6fsD8o.roa
File: cfrsFssAXc-JD5MuLwhFm6fsD8o.roa (raw, json)
Hash identifier: YldyRR0NR4TDDt5qo2uPik6cNpWpdTDcIjRu7o+jzSM=
Subject key identifier: 71:FA:EC:16:CB:00:5D:CF:89:0F:93:2E:2F:08:45:9B:A7:EC:0F:CA
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 0181D81516D455B646B872F588014AFC42E2
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/cfrsFssAXc-JD5MuLwhFm6fsD8o.roa
Signing time: Thu 07 Jul 2022 09:54:29 +0000
ROA not before: Thu 07 Jul 2022 09:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24631
IP address blocks: 109.95.64.0/24 maxlen: 24
109.95.65.0/24 maxlen: 24
109.95.71.0/24 maxlen: 24
109.95.67.0/24 maxlen: 24
109.95.66.0/24 maxlen: 24
109.95.68.0/24 maxlen: 24
109.95.70.0/24 maxlen: 24
109.95.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:15:16:d4:55:b6:46:b8:72:f5:88:01:4a:fc:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jul 7 09:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71faec16cb005dcf890f932e2f08459ba7ec0fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:94:dc:55:20:18:dc:52:8d:cb:43:2c:6b:
0a:54:a6:70:1e:45:35:90:2e:1a:81:48:0f:f4:67:
b7:cc:8a:f6:40:c3:d2:95:64:a2:56:89:af:55:c6:
ea:ca:28:1c:76:b2:4d:d0:18:63:1b:ca:cc:36:6d:
40:89:1b:5e:c9:7e:f5:0b:18:ef:3a:5d:3d:ed:21:
d0:29:12:da:7a:2e:de:01:c0:70:1e:cc:b0:1d:97:
78:43:65:ab:12:94:eb:39:c8:51:1d:9d:1b:9e:1e:
22:33:57:9a:65:14:53:5f:0b:55:94:3a:db:1c:6b:
12:f7:cc:68:29:01:1e:bf:b0:b7:c2:16:66:a0:19:
4c:f5:65:42:7d:a9:52:98:b1:6b:7f:2e:50:a3:4a:
67:94:00:91:d4:62:63:b0:3a:c8:f7:54:09:c8:4a:
de:2d:30:d6:f5:70:2c:83:8d:ee:00:2b:43:3e:0c:
02:af:ef:ed:c1:de:95:f9:83:44:10:83:e0:67:0e:
ad:51:2b:cf:06:b1:bc:c6:41:32:df:0a:02:56:44:
f6:d3:ee:6a:a5:b0:64:ec:d7:45:9d:bd:20:63:4e:
4f:37:e4:96:ac:b5:a3:92:f5:55:46:f3:5c:99:35:
33:34:a1:83:19:16:83:4b:f9:f1:93:2b:99:4c:01:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:EC:16:CB:00:5D:CF:89:0F:93:2E:2F:08:45:9B:A7:EC:0F:CA
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/cfrsFssAXc-JD5MuLwhFm6fsD8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.64.0/21
Signature Algorithm: sha256WithRSAEncryption
84:25:d3:93:6a:a8:00:85:2a:bc:31:4f:a4:3b:77:91:8e:93:
3e:29:90:25:92:a4:31:22:da:e5:7e:b2:46:52:06:58:3a:d0:
d6:f7:4e:05:99:13:87:5b:f5:8d:71:e4:ef:47:34:f6:cf:6a:
dc:73:97:2f:c2:fc:ff:e2:ed:e0:1d:96:d5:7a:f7:3b:0f:10:
89:ef:5c:9c:9d:c4:31:60:04:e4:bb:5b:28:2e:57:a1:d7:90:
7d:18:4b:2a:3b:4f:dc:8f:d5:f9:da:91:a9:35:16:a5:4c:36:
38:30:c0:ff:83:f8:ea:a2:9e:2c:da:20:4b:3f:bb:08:7b:56:
5c:c9:9f:8b:ce:2c:bd:cc:51:f3:24:4d:a5:cd:7e:98:67:48:
60:57:15:2a:d7:a6:06:fb:2d:aa:79:13:f7:d7:bf:94:c1:f3:
ac:5a:b3:61:e7:fa:29:a3:82:4c:60:8d:4e:a1:05:a7:97:4a:
bb:3b:74:50:84:96:14:35:2d:63:78:1f:3c:92:4b:0b:d4:35:
e8:67:3e:7c:24:b9:47:68:72:a3:da:5b:96:6e:1d:43:0a:50:
3b:c0:da:1c:67:2a:23:0e:42:56:3a:40:fa:b7:65:b4:c2:fb:
81:fc:72:b6:c4:18:08:ed:31:06:2b:02:55:17:4b:6b:3f:95:
58:a2:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:34 2024 by rpki-client on console-ams.rpki-client.org