Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/f7_nAG32ApxVOdk3aW6l21Axm94.roa
File: f7_nAG32ApxVOdk3aW6l21Axm94.roa (raw, json)
Hash identifier: 76/SdTv5Z4zH5NNtmoNERQ/eLrTKq7Vm6AYaUvWNhis=
Subject key identifier: 7F:BF:E7:00:6D:F6:02:9C:55:39:D9:37:69:6E:A5:DB:50:31:9B:DE
Certificate issuer: /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial: 01845BE9E07B1B65374E3478E45FB08AC8EC
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/f7_nAG32ApxVOdk3aW6l21Axm94.roa
Signing time: Wed 09 Nov 2022 10:22:44 +0000
ROA not before: Wed 09 Nov 2022 10:22:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150303
IP address blocks: 185.103.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:e9:e0:7b:1b:65:37:4e:34:78:e4:5f:b0:8a:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Validity
Not Before: Nov 9 10:22:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fbfe7006df6029c5539d937696ea5db50319bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:29:51:ea:e3:6e:19:97:99:56:5e:f2:9f:b3:
77:f4:51:8b:92:1b:cb:69:6c:8a:39:31:7c:8c:64:
b1:93:ae:37:58:32:ca:12:7e:31:d2:1d:88:09:6d:
b1:6c:fd:1f:23:25:c0:d4:d1:e3:23:e3:0b:2e:f5:
5b:b2:0d:e1:a1:e4:2f:04:64:26:c0:a1:80:20:38:
ad:f3:df:17:5f:77:c9:e9:dd:3e:a7:5a:a6:2f:7c:
75:a0:bb:86:ff:af:8b:07:5f:6e:99:bc:bb:72:ae:
51:d7:d0:eb:40:32:3a:d0:60:c3:76:12:c3:de:df:
5b:d9:8a:3f:f8:57:fa:25:ca:97:44:56:f9:b5:c5:
51:b0:c1:1a:29:b7:43:74:a3:6e:b6:42:e4:da:84:
13:31:39:ed:23:b7:9b:08:9f:21:8f:ae:ee:fd:e2:
00:ab:5c:3e:ae:10:6a:13:84:ac:39:99:1c:1e:f9:
dd:5c:eb:e8:64:94:96:92:2c:4f:42:7f:f9:45:2e:
ca:3b:63:6e:5f:54:b6:4c:ac:d3:bc:3a:10:c8:c8:
cc:42:fc:fc:b3:2b:a9:1a:24:a1:d5:88:fd:a7:19:
4e:6d:f8:2c:7b:73:68:5c:c0:81:09:12:0c:5e:9e:
dc:90:d1:a9:3d:b1:39:f3:1d:74:e4:df:f2:49:91:
0f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BF:E7:00:6D:F6:02:9C:55:39:D9:37:69:6E:A5:DB:50:31:9B:DE
X509v3 Authority Key Identifier:
keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/f7_nAG32ApxVOdk3aW6l21Axm94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.7.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e4:f0:92:2e:b8:24:42:ef:3a:33:5c:fa:6d:a7:d3:b5:15:
fb:dd:e8:92:b9:bd:da:3f:5b:fb:69:b6:52:d6:01:98:a6:3e:
47:a2:a5:f2:e7:f0:8c:de:6e:53:a1:44:3c:5e:24:fd:dd:7a:
ca:e8:c6:8c:8b:c6:d5:ad:e8:5d:e7:08:69:eb:6d:65:a2:77:
a9:8a:55:c1:7b:f9:c6:16:8e:47:a5:cc:7f:cd:6c:89:0d:39:
4f:ef:20:eb:02:b6:fd:3c:c1:10:48:bf:e4:26:95:fd:63:6c:
ed:51:1b:b3:1c:92:5d:4d:c9:62:ec:f1:23:9d:ee:5b:7d:b2:
77:8a:11:c6:5f:80:60:7b:34:20:34:f9:75:b1:c1:16:69:ca:
16:e1:83:77:13:c4:21:fc:01:ff:2b:f9:53:5c:d5:4b:26:25:
14:7e:6f:2e:43:be:2d:cb:27:97:e5:a2:cc:a3:af:bb:aa:3a:
fe:95:93:8e:01:65:dd:0e:0a:3f:e2:d9:39:b4:50:52:88:fd:
c3:a5:35:e5:8d:a2:cb:1c:cd:d9:c9:72:a1:12:7b:fa:08:8b:
1b:f0:50:a6:d4:5a:ac:11:90:9b:b1:b9:50:10:40:66:ce:38:
ff:e4:ee:19:af:b4:fb:a9:99:ea:de:89:4f:94:c3:f5:06:2d:
bb:ce:55:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRb6eB7G2U3TjR45F+wisjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MjE5ZWM3MzgzZmEwNjEwNDgwZGRmYTYyYzNmODJjNDAw
Y2Q1NmYwHhcNMjIxMTA5MTAyMjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmJmZTcwMDZkZjYwMjljNTUzOWQ5Mzc2OTZlYTVkYjUwMzE5YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjylR6uNuGZeZVl7yn7N39FGLkhvL
aWyKOTF8jGSxk643WDLKEn4x0h2ICW2xbP0fIyXA1NHjI+MLLvVbsg3hoeQvBGQm
wKGAIDit898XX3fJ6d0+p1qmL3x1oLuG/6+LB19umby7cq5R19DrQDI60GDDdhLD
3t9b2Yo/+Ff6JcqXRFb5tcVRsMEaKbdDdKNutkLk2oQTMTntI7ebCJ8hj67u/eIA
q1w+rhBqE4SsOZkcHvndXOvoZJSWkixPQn/5RS7KO2NuX1S2TKzTvDoQyMjMQvz8
syupGiSh1Yj9pxlObfgse3NoXMCBCRIMXp7ckNGpPbE58x105N/ySZEPjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+/5wBt9gKcVTnZN2lupdtQMZveMB8GA1UdIwQY
MBaAFNchnsc4P6BhBIDd+mLD+CxADNVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4Yjct
ZDBjODJhM2NmNGI2LzEvZjdfbkFHMzJBcHhWT2RrM2FXNmwyMUF4bTk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mYmZmYmMtYWI4Mi00MDU4LWI4YjctZDBjODJhM2NmNGI2
LzEvMXlHZXh6Z19vR0VFZ04zNllzUDRMRUFNMVc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWcHMA0G
CSqGSIb3DQEBCwUAA4IBAQC25PCSLrgkQu86M1z6bafTtRX73eiSub3aP1v7abZS
1gGYpj5HoqXy5/CM3m5ToUQ8XiT93XrK6MaMi8bVrehd5whp621lonepilXBe/nG
Fo5Hpcx/zWyJDTlP7yDrArb9PMEQSL/kJpX9Y2ztURuzHJJdTcli7PEjne5bfbJ3
ihHGX4BgezQgNPl1scEWacoW4YN3E8Qh/AH/K/lTXNVLJiUUfm8uQ74tyyeX5aLM
o6+7qjr+lZOOAWXdDgo/4tk5tFBSiP3DpTXljaLLHM3ZyXKhEnv6CIsb8FCm1Fqs
EZCbsblQEEBmzjj/5O4Zr7T7qZnq3olPlMP1Bi27zlVv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org