Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/fMfLe1CN5gSqxntJX_ccNuigF00.roa
File: fMfLe1CN5gSqxntJX_ccNuigF00.roa (raw, json)
Hash identifier: +yYr7EVVafGBWR5P9x1DneQ6yD1SrnSNHNa0jMzMezY=
Subject key identifier: 7C:C7:CB:7B:50:8D:E6:04:AA:C6:7B:49:5F:F7:1C:36:E8:A0:17:4D
Certificate issuer: /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial: 018215C2E382004502618E0B8ED44CC9961A
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/fMfLe1CN5gSqxntJX_ccNuigF00.roa
Signing time: Tue 19 Jul 2022 09:21:09 +0000
ROA not before: Tue 19 Jul 2022 09:21:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 94.143.105.0/24 maxlen: 24
94.143.108.0/24 maxlen: 24
185.236.125.0/24 maxlen: 24
185.236.124.0/24 maxlen: 24
94.143.107.0/24 maxlen: 24
94.143.106.0/24 maxlen: 24
185.236.126.0/24 maxlen: 24
185.236.127.0/24 maxlen: 24
212.1.219.0/24 maxlen: 24
212.1.218.0/24 maxlen: 24
212.1.222.0/24 maxlen: 24
212.1.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:c2:e3:82:00:45:02:61:8e:0b:8e:d4:4c:c9:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Validity
Not Before: Jul 19 09:21:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cc7cb7b508de604aac67b495ff71c36e8a0174d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:1a:a5:fc:b6:be:55:f3:b3:a6:48:0d:85:
ad:57:3a:e3:62:4d:7b:8c:5d:06:bb:84:2e:91:d9:
5b:9f:b5:e6:46:01:af:b0:f3:a8:ff:eb:a2:0b:f9:
ca:3e:e9:53:bf:aa:ca:18:59:67:fb:4e:ad:75:cd:
f3:76:7b:19:78:44:d9:dd:7e:19:c1:55:04:59:59:
7d:5e:d8:48:ea:4c:65:30:2d:f7:cc:69:74:df:db:
1f:e0:89:c1:3c:d5:44:a4:c1:13:97:fa:ad:cd:0d:
aa:03:10:20:94:0f:fc:56:25:ec:d0:fb:e3:d6:e8:
ae:c1:73:5e:ee:86:62:19:bd:0e:f2:b5:c3:3e:7b:
9f:b9:43:22:dd:23:c3:33:cd:80:a9:8d:63:27:45:
16:1a:dd:31:2c:a7:5f:94:df:58:91:37:cf:49:3e:
9d:43:79:f7:81:9b:ba:50:15:23:33:f5:46:75:2f:
b1:a2:f6:2a:43:45:59:a5:9b:59:3b:c8:81:57:c2:
a5:06:ee:2e:2f:f5:ee:9c:0c:02:20:d6:58:54:b3:
58:35:6c:ee:0a:89:be:be:c4:77:b6:97:5c:c3:bd:
d7:d0:ec:b8:af:51:18:cd:a2:1f:34:b7:37:61:7e:
f6:e3:d9:e9:29:bf:7f:df:b1:dd:6a:fe:bf:26:c1:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C7:CB:7B:50:8D:E6:04:AA:C6:7B:49:5F:F7:1C:36:E8:A0:17:4D
X509v3 Authority Key Identifier:
keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/fMfLe1CN5gSqxntJX_ccNuigF00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.105.0-94.143.108.255
185.236.124.0/22
212.1.218.0/23
212.1.222.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:73:71:dd:ca:48:5d:46:d7:5f:7f:05:aa:aa:66:5c:5a:de:
0a:c2:e3:ef:ef:33:ab:82:a7:dd:53:c5:32:2a:19:9d:88:8b:
c1:5c:af:b0:df:ff:62:29:a9:9d:ba:8b:27:dc:ba:f7:e5:79:
4d:b4:ce:64:05:03:24:b1:08:55:27:b7:95:bc:07:ca:d5:d4:
eb:00:92:97:02:a1:f9:84:14:28:bc:bc:c4:cb:53:4f:94:8c:
f5:e6:bc:ee:3b:40:03:40:ef:57:5b:69:cd:15:fc:73:8d:f7:
2d:a5:68:f7:57:01:3b:e8:52:3b:fe:e4:17:bc:5a:40:c9:cd:
4d:46:01:84:21:a7:41:1e:61:2e:ec:f9:d4:77:21:5a:5b:53:
bf:5b:94:51:e3:53:f6:3c:f9:4b:5c:2f:0a:0b:5a:2d:53:16:
db:fc:c9:87:5e:64:71:48:0d:71:1b:1a:5e:2c:21:2e:d7:c5:
48:53:67:cb:21:92:0b:84:a4:9f:79:1f:b9:7e:16:9e:93:6f:
c8:33:d8:6e:2b:ff:6e:15:14:c2:e8:7a:78:42:ed:86:99:10:
4c:4f:60:e0:5f:33:d2:f9:52:7e:7c:ab:bd:7d:1f:88:cf:ca:
c6:37:25:e5:39:67:32:1c:e4:96:a0:ab:5f:5e:82:5e:51:16:
64:3c:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:38 2024 by rpki-client on console-ams.rpki-client.org