Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fuzv48VHiorVpSi99JgfQncKTfw.roa
File: fuzv48VHiorVpSi99JgfQncKTfw.roa (raw, json)
Hash identifier: V5hIkvfRfEgM3lXlFdCi68Ax1jJve7jDDomHdIOBWPM=
Subject key identifier: 7E:EC:EF:E3:C5:47:8A:8A:D5:A5:28:BD:F4:98:1F:42:77:0A:4D:FC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018534FA35E5DACB16FDAB2D6F1224E706D6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fuzv48VHiorVpSi99JgfQncKTfw.roa
Signing time: Wed 21 Dec 2022 13:58:11 +0000
ROA not before: Wed 21 Dec 2022 13:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 62.76.235.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:fa:35:e5:da:cb:16:fd:ab:2d:6f:12:24:e7:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 21 13:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eecefe3c5478a8ad5a528bdf4981f42770a4dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:e6:8d:8e:3b:1b:05:ef:24:88:98:f8:b2:
8d:c0:1d:d5:9f:03:67:f8:9a:88:2a:6a:d7:f2:7a:
42:9a:9f:c1:f3:3a:07:cd:44:6a:c5:bb:de:4f:29:
c0:fc:7c:2a:c1:5a:64:82:48:33:15:83:47:52:a7:
41:74:e5:9f:e9:24:39:c4:86:0c:eb:01:89:39:99:
9f:b6:1a:63:8a:63:b7:14:81:2c:0f:4b:7b:fd:06:
1c:d6:1e:24:f1:55:e4:20:2b:ef:a8:b0:39:cc:9a:
e0:67:c1:e8:e9:8d:ff:98:a5:e0:68:8d:c3:82:c7:
13:7e:c5:95:1c:6b:09:b6:02:bf:20:07:a3:db:79:
c4:3d:66:af:fd:1f:cc:b9:49:c9:b7:6c:fd:fc:e4:
eb:42:80:cf:6e:a3:46:ba:76:c7:d0:8d:36:d2:83:
ab:9b:90:50:7b:5b:85:d4:c0:af:99:5d:34:f0:29:
48:54:a4:bd:5b:7e:eb:6d:a3:08:8d:93:de:23:67:
d5:c6:da:ee:0e:a9:17:11:cb:89:f2:31:88:e1:59:
14:af:76:95:d4:11:fc:ac:90:79:24:62:a5:18:fa:
87:b8:95:48:a6:8e:2e:f6:bb:74:0a:81:2a:32:2d:
a1:d3:2b:12:c1:b7:45:8a:8f:c5:03:b4:6f:37:73:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:EF:E3:C5:47:8A:8A:D5:A5:28:BD:F4:98:1F:42:77:0A:4D:FC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fuzv48VHiorVpSi99JgfQncKTfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
194.87.17.0/24
194.87.91.0/24
194.87.188.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c1:68:b1:0c:ab:c2:32:bf:82:45:b7:75:cf:a7:ed:10:12:
35:a0:99:93:44:4f:11:c7:36:64:08:fc:9e:e3:f8:dc:d3:38:
c3:19:2b:d3:aa:71:e7:f5:39:02:64:71:37:13:92:86:ab:84:
af:ae:84:3c:14:66:d2:3e:43:74:6b:ff:f5:10:c0:ef:8a:42:
9b:04:d0:93:ab:74:4f:02:5b:7a:29:95:4d:bb:d6:35:80:7b:
29:73:0f:a6:54:ef:61:83:4a:18:e6:c3:39:6c:c1:9f:76:d5:
d6:80:de:04:c6:cc:cc:f5:f3:8c:7d:5f:2f:f9:9d:8b:07:94:
36:b7:1e:d7:90:00:62:0b:95:02:4c:fa:ef:bb:d2:d3:53:de:
28:60:f1:4e:29:5b:e0:94:20:ec:39:0c:6a:4a:c1:ff:af:52:
7f:20:64:79:ae:f8:e4:52:f8:a7:e9:00:60:60:92:b3:c8:52:
19:e4:3b:08:62:14:25:82:45:a3:5b:80:b8:85:dd:20:bb:48:
4c:f2:82:62:bd:c3:b5:b2:2c:33:a7:26:75:8a:38:14:af:a6:
3b:12:a9:33:6f:08:59:0e:ff:7a:40:aa:59:95:60:4b:77:75:
b1:69:5a:3c:b3:e7:d4:ec:70:03:7c:4f:86:62:06:e7:a4:9e:
46:c0:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org