Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/fUMf0btG_6mO-ihYEm-xv2LN6Wc.roa
File: fUMf0btG_6mO-ihYEm-xv2LN6Wc.roa (raw, json)
Hash identifier: IoO3tfTBT582EA47nWgIaUQ7+Z9EunfnTrFZB33NUgw=
Subject key identifier: 7D:43:1F:D1:BB:46:FF:A9:8E:FA:28:58:12:6F:B1:BF:62:CD:E9:67
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01845783C2F9796B28D0292C47A995E0D9AA
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/fUMf0btG_6mO-ihYEm-xv2LN6Wc.roa
Signing time: Tue 08 Nov 2022 13:52:43 +0000
ROA not before: Tue 08 Nov 2022 13:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.93.221.0/24 maxlen: 24
94.124.160.0/23 maxlen: 24
78.142.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:83:c2:f9:79:6b:28:d0:29:2c:47:a9:95:e0:d9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Nov 8 13:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d431fd1bb46ffa98efa2858126fb1bf62cde967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:17:69:db:54:11:4f:fd:03:f1:6e:b9:98:
21:d3:11:88:1d:31:a1:c9:cd:b7:ef:d5:83:71:3e:
db:20:6f:3f:ca:87:a5:65:a5:37:ed:42:d0:e1:90:
79:ba:72:4c:e2:43:5a:2b:fb:3c:cb:f0:18:08:d0:
4d:51:76:c8:90:db:0f:09:93:67:3e:61:c5:7d:fe:
b9:0f:53:39:62:89:44:97:db:50:ac:23:32:e1:e4:
9f:32:c6:2b:31:82:f1:d9:01:a6:64:be:d5:85:0a:
be:35:ab:b7:a8:e1:7a:67:c8:21:59:f9:7c:b7:52:
ab:11:94:b5:8c:99:d9:0f:f7:9b:1c:77:40:d2:2a:
42:9e:16:a0:2e:b9:f9:9e:e4:22:5c:19:4a:dc:5c:
30:61:2a:bb:f2:a2:5e:81:e1:ea:a4:93:17:c9:37:
a6:48:37:d5:91:b1:b4:26:37:63:c5:e2:53:a5:bf:
e2:dc:21:85:c6:53:d7:83:9a:40:63:69:1c:ca:15:
a1:62:10:cf:c3:a4:8b:5d:26:5a:95:d6:2a:d0:f3:
b4:dd:b4:fa:f9:71:60:47:5a:36:6d:b3:59:44:9f:
2d:19:7d:a8:b5:8b:7e:b7:fc:d7:f5:f9:ba:b4:73:
47:78:ce:ab:f0:e9:52:4f:4c:40:0e:ac:3a:d5:44:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:43:1F:D1:BB:46:FF:A9:8E:FA:28:58:12:6F:B1:BF:62:CD:E9:67
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/fUMf0btG_6mO-ihYEm-xv2LN6Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.216.0/22
94.124.160.0/23
185.93.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:19:6c:0b:d6:c6:5d:39:46:2c:e0:2f:0f:6e:0f:b2:7d:f8:
5e:b0:69:4e:f9:f4:1a:c7:40:3c:ce:d8:1b:1d:2d:dc:33:14:
89:3d:d4:f5:e9:be:80:da:25:e6:41:32:6e:8a:c1:b9:25:3b:
56:a0:53:eb:10:a2:b8:78:43:d3:5f:cb:fc:e9:ea:00:b3:54:
45:23:d9:bf:0c:33:34:c2:73:68:ff:73:96:e5:f7:a0:c9:89:
48:d6:35:2d:2c:74:fc:02:d5:e2:29:47:d9:ab:ed:5b:d9:a0:
c5:fc:db:ac:6c:d0:dd:2d:f0:db:d1:02:cc:c9:94:57:23:14:
f1:99:54:30:54:63:a3:07:78:5f:c3:bf:82:01:56:41:48:05:
81:93:f9:6d:2b:8e:fb:63:46:0d:8a:01:6c:d9:e0:54:ed:f1:
1f:45:19:17:6b:6e:b1:7f:0d:28:fd:fe:27:b3:48:6e:bc:66:
53:f9:18:d7:6d:ee:36:67:ab:bd:20:0d:5c:56:7a:df:ac:27:
d3:8b:a8:17:77:54:d3:43:52:c7:c4:2f:f3:e0:86:23:4c:3e:
ba:41:d7:12:09:f2:b7:dd:fb:56:a5:18:2d:dc:c2:ee:fc:72:
57:02:82:b8:da:34:66:fa:03:c4:f3:8f:cf:5f:57:4e:50:c8:
b9:04:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org