Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/7fTvDbPZvttT15Tw_c89SdHIaaM.roa
File: 7fTvDbPZvttT15Tw_c89SdHIaaM.roa (raw, json)
Hash identifier: 2eXAKChfSx02H2JFJOFJO6p3mcZeQDu6nGPEaY0Cg0k=
Subject key identifier: ED:F4:EF:0D:B3:D9:BE:DB:53:D7:94:F0:FD:CF:3D:49:D1:C8:69:A3
Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Certificate serial: 12B71C4B
Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/7fTvDbPZvttT15Tw_c89SdHIaaM.roa
Signing time: Sat 01 Jan 2022 10:59:52 +0000
ROA not before: Sat 01 Jan 2022 10:59:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61145
IP address blocks: 185.8.112.0/22 maxlen: 24
194.38.12.0/22 maxlen: 22
2a03:38c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313990219 (0x12b71c4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a
Validity
Not Before: Jan 1 10:59:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edf4ef0db3d9bedb53d794f0fdcf3d49d1c869a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:6d:69:b8:4f:58:f7:49:27:fc:e0:06:c1:
d0:5a:24:46:09:c9:45:db:9d:57:91:c6:c6:88:bd:
a3:17:5f:17:ae:99:a1:46:9a:4e:a4:d1:0d:e1:8a:
f1:ae:95:d2:40:71:d4:52:19:4b:06:54:54:db:a3:
69:51:e9:3c:8c:70:cf:4c:19:a1:d7:1c:6a:dd:62:
05:ab:bb:77:b2:ae:ee:ee:83:d0:5d:77:e6:a1:d8:
ec:5d:97:d8:50:1b:d3:2f:ba:10:f1:8e:cb:07:82:
64:08:5c:62:89:50:bd:ee:5f:7e:a4:22:cb:d7:42:
87:26:85:18:69:9b:24:97:1f:4b:fc:41:7f:70:d3:
dd:ff:20:93:bf:fa:17:4d:05:08:2b:25:91:c8:a3:
33:f9:cd:cd:81:b0:d4:47:fe:67:40:b2:f3:0b:4a:
16:3b:6e:df:b9:16:79:a6:cb:fa:3e:53:ab:bd:ee:
b4:eb:1f:c9:75:e3:b9:f2:89:f0:0b:b1:61:80:31:
7a:10:5c:7f:92:5b:79:52:92:9f:cc:1c:fe:16:f3:
32:bf:bb:69:4c:b6:ce:06:52:19:10:91:b8:3e:f0:
8b:28:9c:a1:25:9b:50:ad:82:cd:6b:46:38:ef:1a:
24:8a:cb:19:28:98:81:68:f5:62:70:43:73:b2:5c:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F4:EF:0D:B3:D9:BE:DB:53:D7:94:F0:FD:CF:3D:49:D1:C8:69:A3
X509v3 Authority Key Identifier:
keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/7fTvDbPZvttT15Tw_c89SdHIaaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.112.0/22
194.38.12.0/22
IPv6:
2a03:38c0::/32
Signature Algorithm: sha256WithRSAEncryption
71:6b:88:a4:2f:23:24:e0:d5:6c:48:82:26:54:c2:81:99:57:
19:f9:f6:47:4f:5b:ea:16:eb:81:7e:6d:cd:5a:b2:c4:88:75:
e9:10:42:94:0a:4b:b8:5d:b0:eb:75:3f:c4:76:d3:15:92:62:
ba:9f:9a:c2:1d:68:40:82:47:b8:43:ed:09:46:d3:4c:4e:5d:
47:2a:8b:91:a7:ac:0d:44:c7:42:59:74:25:ec:cb:a0:05:3a:
0c:e6:69:8c:ff:c5:6b:56:cb:d1:20:22:6e:2e:f5:57:18:84:
7a:c6:32:3d:16:7d:50:be:4b:5d:40:f8:02:8e:d3:5d:2d:37:
7f:1e:ee:21:2b:05:2a:7c:c8:99:de:93:2e:d8:3e:a6:ae:d5:
6e:78:6a:b0:60:46:88:71:97:99:82:20:91:d0:1f:21:03:e8:
9f:f0:c6:dc:67:e3:ff:6a:cd:f6:fd:bf:b8:e4:b0:32:96:bd:
7e:1c:66:8d:17:2f:ef:14:8b:8d:c5:0a:db:d7:45:c8:0d:31:
a2:38:f7:25:15:c5:d5:b2:ef:c6:45:82:fb:3d:87:1e:6b:4c:
99:b8:c4:ee:77:ac:a0:5b:9b:8a:8f:92:62:9c:65:da:7f:59:
ed:1b:c0:25:27:a6:de:10:e1:59:89:8c:77:b7:a2:ea:71:d1:
4d:01:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org