Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/658egXMrE9x68E7M_dAyeg7VN5w.roa
File: 658egXMrE9x68E7M_dAyeg7VN5w.roa (raw, json)
Hash identifier: uerO76uFNA/dTgysjL9zUHx8EK6anqawvAK+J/ykZbQ=
Subject key identifier: EB:9F:1E:81:73:2B:13:DC:7A:F0:4E:CC:FD:D0:32:7A:0E:D5:37:9C
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 01852F59B4921C89031095F5E7E02E2C0BCB
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/658egXMrE9x68E7M_dAyeg7VN5w.roa
Signing time: Tue 20 Dec 2022 11:44:46 +0000
ROA not before: Tue 20 Dec 2022 11:44:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57494
IP address blocks: 91.199.149.0/24 maxlen: 24
185.175.157.0/24 maxlen: 24
185.133.43.0/24 maxlen: 24
185.177.217.0/24 maxlen: 24
185.135.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:59:b4:92:1c:89:03:10:95:f5:e7:e0:2e:2c:0b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Dec 20 11:44:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb9f1e81732b13dc7af04eccfdd0327a0ed5379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:60:39:2b:20:88:66:26:25:73:b2:5d:34:d9:
6d:a6:7e:f6:eb:fd:1d:a9:80:00:4a:fd:6c:0a:4f:
3c:ce:25:5f:bb:a6:7d:9a:57:0f:cd:d3:88:c6:5f:
47:08:a1:d9:ce:7b:ba:b8:a3:94:f7:e4:2b:d1:ad:
54:04:a9:a0:7d:4d:17:b2:1a:38:7c:40:7c:61:54:
e6:62:03:7a:db:a2:6e:be:67:d2:89:a5:e6:86:60:
8b:13:54:21:ad:29:46:97:91:41:33:ba:1c:d0:fe:
fc:e9:c4:13:56:a6:c5:14:11:4a:2c:6f:19:1a:d9:
81:ea:e9:4c:dd:ce:96:ed:65:29:17:90:78:6d:20:
e7:c9:09:6d:30:25:17:08:57:db:cd:b7:d8:8c:0f:
11:05:02:fd:9f:c0:c3:52:b4:d0:b7:58:70:db:eb:
b3:de:40:44:f6:19:ce:66:2d:34:50:a2:7a:c2:5d:
ea:bb:48:c9:06:29:9e:2f:d6:8f:ba:8c:c1:9a:80:
41:e9:7c:f5:ab:92:7a:7b:3f:22:ef:c2:a3:e8:cf:
c0:79:79:76:00:6f:9b:a6:7d:5e:c4:e0:97:53:7c:
22:84:a5:31:31:3d:1c:a9:88:16:c9:e3:df:ce:79:
b4:a5:05:f9:a7:b2:c1:5e:8d:b1:9c:eb:9e:75:ad:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9F:1E:81:73:2B:13:DC:7A:F0:4E:CC:FD:D0:32:7A:0E:D5:37:9C
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/658egXMrE9x68E7M_dAyeg7VN5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.149.0/24
185.133.43.0/24
185.135.80.0/22
185.175.157.0/24
185.177.217.0/24
Signature Algorithm: sha256WithRSAEncryption
89:cb:41:df:20:a4:ae:80:a9:0c:23:9a:fc:b9:82:4e:e3:6f:
a9:9d:64:dc:55:a4:71:61:fc:f0:c3:2a:72:b6:b1:db:4f:60:
33:02:93:d2:70:a4:d9:d5:8f:27:5b:2c:8f:f8:ba:26:cd:b3:
89:9d:f9:64:72:ea:3f:a1:6f:6a:74:9d:68:d8:2b:36:f4:da:
46:01:51:f2:e6:63:ae:b2:2f:74:fd:17:e3:5e:04:08:c6:dd:
cd:22:8f:be:56:c1:75:8f:0a:51:a1:b8:88:64:a8:f3:21:f0:
ad:ae:e0:d0:ba:39:7f:f0:a3:6b:95:b7:e6:9f:22:db:2c:f9:
9e:8a:af:32:fd:f5:fd:e9:9d:46:2c:b3:4b:6e:1e:d2:f1:0b:
0f:d9:80:b8:28:4c:af:ed:2d:60:a4:8d:b5:d1:a5:77:4b:fa:
d0:af:c8:f6:f7:dd:c4:d9:f9:4e:a6:38:a7:df:78:d1:54:da:
3a:d9:b9:38:bc:93:0d:bc:00:48:93:17:58:c0:00:47:5f:24:
1b:d5:f1:63:fd:7b:4a:fa:2f:3d:48:52:9c:92:25:33:be:0a:
63:e5:1c:0f:b7:0f:da:b9:b9:73:b2:08:b8:63:fd:2c:fa:18:
20:ce:41:03:57:2f:a5:fe:e2:c0:11:43:a6:30:0e:ac:49:65:
76:bd:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-ams.rpki-client.org