Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/F80pePDysJ_LnRo5-iFRJi1qtzA.roa
File: F80pePDysJ_LnRo5-iFRJi1qtzA.roa (raw, json)
Hash identifier: 5hlTeV0omfHUb7mXY9gPh7ZF05PBysm+2ytPRtL8Hug=
Subject key identifier: 17:CD:29:78:F0:F2:B0:9F:CB:9D:1A:39:FA:21:51:26:2D:6A:B7:30
Certificate issuer: /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial: 04D26546
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/F80pePDysJ_LnRo5-iFRJi1qtzA.roa
Signing time: Sat 01 Jan 2022 13:01:24 +0000
ROA not before: Sat 01 Jan 2022 13:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58040
IP address blocks: 185.185.86.0/24 maxlen: 24
185.185.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80897350 (0x4d26546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Validity
Not Before: Jan 1 13:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17cd2978f0f2b09fcb9d1a39fa2151262d6ab730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:30:df:3f:01:ee:96:9d:85:9f:60:72:e0:
c0:42:45:ab:ae:d1:06:95:02:ce:99:f1:27:c2:0e:
10:7a:6f:90:56:62:28:e5:dd:09:2c:ed:65:6b:2a:
f8:b5:f9:ac:14:9a:b6:15:06:ac:67:6b:3d:17:7d:
7d:f5:50:88:c0:a7:fe:95:84:4b:53:a9:ec:0e:5d:
e0:9f:df:d8:ff:ee:1d:78:0c:a5:cd:42:67:04:43:
f0:33:ca:d0:4c:24:60:2f:be:f0:35:2d:09:36:87:
07:8a:1d:7e:54:b7:9d:b7:4a:a1:7a:a5:8b:11:02:
0b:f3:10:bc:f2:1f:a5:7d:54:e6:dd:9f:a4:4c:7b:
aa:86:97:ee:44:30:04:72:4c:49:0a:07:02:1e:5e:
89:8e:1e:84:4d:14:53:0c:40:03:50:ef:bd:d1:8c:
07:b2:2e:46:8b:5c:86:6d:d5:c4:78:db:04:d6:7b:
78:c2:48:6a:fe:b0:07:64:b0:aa:4f:72:9b:65:9d:
ed:9b:d4:f2:07:55:56:dd:f0:48:9e:ad:f3:81:77:
ac:9e:6e:6c:c8:8e:fb:95:0a:7c:1a:f4:14:56:a1:
fd:8b:17:ca:91:14:ce:ea:e9:f7:a2:7f:80:a3:70:
90:1c:65:03:fe:1a:06:3d:1c:e4:d7:43:d4:1e:eb:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:29:78:F0:F2:B0:9F:CB:9D:1A:39:FA:21:51:26:2D:6A:B7:30
X509v3 Authority Key Identifier:
keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/F80pePDysJ_LnRo5-iFRJi1qtzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.86.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:cc:75:94:10:39:5d:5a:11:9a:8c:f0:9b:8b:83:0c:57:0a:
e4:42:20:bc:8f:5b:61:25:e2:53:e1:8c:94:b5:47:e1:2b:87:
11:ce:a4:b5:ae:ce:7b:bd:65:81:0b:7a:3c:65:d8:15:8b:9c:
76:34:e3:68:ff:6f:cb:13:cc:7a:57:f1:23:2b:8c:63:09:4f:
80:64:de:30:30:40:c3:9a:3f:4c:a8:fc:5b:ab:ff:83:ed:5d:
84:0b:f5:aa:82:f2:2e:24:16:02:97:19:4c:48:90:ea:5a:9f:
21:06:72:04:c9:38:8c:44:b7:b6:a1:9b:f0:0b:97:de:78:03:
e5:22:52:ab:b6:f4:45:83:30:71:b9:11:ea:b2:1d:a0:ca:9b:
59:72:d1:10:81:be:d6:8e:64:19:a6:ca:b0:aa:b7:09:e2:90:
94:7e:93:09:34:df:fc:fe:84:a0:36:a9:54:e0:ea:d2:ac:2a:
1e:e2:97:68:c3:43:37:fb:03:be:21:8f:ba:57:32:a5:ab:76:
50:92:39:b8:f3:ba:e5:b7:cd:70:4a:4f:75:4f:72:3c:c2:34:
ab:aa:d6:2b:04:ad:cb:1c:03:92:19:01:00:87:5a:a7:f9:44:
0a:82:93:a0:ff:67:19:c7:a2:65:38:3e:8f:82:5d:2e:f0:dc:
15:0e:09:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org