Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fLnoCKJDBBbkv5gmxV9lgYn9ZX4.roa
File: fLnoCKJDBBbkv5gmxV9lgYn9ZX4.roa (raw, json)
Hash identifier: ojUowo+O14osH5LibHQk8KirDzY13U2lpCbDYcNWZ7A=
Subject key identifier: 7C:B9:E8:08:A2:43:04:16:E4:BF:98:26:C5:5F:65:81:89:FD:65:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1EC2B698
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fLnoCKJDBBbkv5gmxV9lgYn9ZX4.roa
Signing time: Tue 31 May 2022 06:09:14 +0000
ROA not before: Tue 31 May 2022 06:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
193.58.120.0/22 maxlen: 24
82.115.208.0/22 maxlen: 24
193.42.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516077208 (0x1ec2b698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 31 06:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cb9e808a2430416e4bf9826c55f658189fd657e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:2b:8a:b7:fa:2d:ac:8d:b8:8f:8b:0d:ed:
3a:ec:6c:0b:e8:18:2b:a8:65:26:36:88:da:e4:b1:
4e:d1:d4:a3:ef:3f:a2:9a:9c:66:ec:72:37:25:11:
b7:df:a9:a4:b4:8d:07:03:d3:69:a0:8f:8f:df:be:
26:2a:cf:51:68:b6:32:52:bf:07:0b:c7:31:a1:84:
05:7a:a0:d3:dc:48:56:94:00:f3:c0:91:6b:f6:3f:
40:2b:45:98:4b:85:45:ef:c5:73:02:47:c7:81:44:
f0:8b:f0:16:26:10:de:54:9b:95:31:7f:88:0a:35:
34:61:96:12:a1:6a:6b:4e:a6:2d:19:33:9f:98:1b:
98:dd:b8:98:c7:a2:ae:61:27:cb:61:3a:f1:ac:5c:
65:b7:79:4e:72:c0:ca:ce:e8:45:91:78:1f:f1:d3:
99:58:52:6f:c2:27:a1:ca:db:97:91:0a:ac:86:a1:
58:7a:97:7d:20:ed:3d:ea:3f:5a:7f:f6:8e:bd:28:
56:1b:0f:b3:bc:7c:af:be:fc:70:f4:51:af:45:c1:
5d:1d:8d:5e:36:1e:75:62:74:fa:6c:50:61:85:c4:
e7:89:47:53:32:a1:2e:fb:63:33:ef:41:44:f0:6b:
81:7a:28:ec:2e:53:52:3a:a8:1e:dc:14:78:1f:70:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:E8:08:A2:43:04:16:E4:BF:98:26:C5:5F:65:81:89:FD:65:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fLnoCKJDBBbkv5gmxV9lgYn9ZX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
82.115.208.0/22
193.42.32.0/22
193.58.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:7f:01:46:fe:98:db:4f:2c:e2:91:22:0d:f1:b8:8b:ea:58:
fc:f2:ca:4a:f6:77:7c:55:93:04:07:03:b2:7f:5e:c7:be:89:
09:44:92:8a:66:84:66:0c:14:7f:ef:af:24:2b:48:7d:78:76:
dc:aa:f1:21:22:ea:5b:0a:41:1a:f9:50:54:15:f3:b1:b8:c9:
e8:3d:88:b3:b1:a4:2b:df:f8:00:70:11:94:e4:ca:fa:2b:cc:
f9:6a:cb:1c:50:bf:2c:32:62:63:a6:ae:49:19:56:ed:c4:53:
d5:97:80:26:bf:52:99:ad:86:13:59:33:99:88:9e:01:8c:ca:
d4:d3:e9:9e:ac:73:3c:b9:e1:d7:c3:79:bd:36:c2:dc:a9:bd:
38:af:bb:e1:67:9f:fb:47:58:7b:63:c5:d8:3d:0c:be:26:d6:
9c:c2:c8:91:ff:5d:bb:bb:39:ef:8a:9a:95:d1:fc:0a:01:df:
39:1b:bc:f5:74:fa:7d:14:84:0b:0f:65:2c:43:0e:f7:b5:50:
08:f8:78:9e:91:bf:a6:1c:b2:11:f4:13:fd:7c:2f:a0:a7:ae:
90:07:1e:df:e5:38:aa:ab:25:bd:97:28:67:d3:11:c0:3c:35:
e6:8c:7f:1d:69:31:96:e2:2e:01:af:7e:3c:42:c5:7a:d1:5e:
94:0f:95:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org