Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/f000FQJmf2EHhfhpSYcW-D6EfOY.roa
File: f000FQJmf2EHhfhpSYcW-D6EfOY.roa (raw, json)
Hash identifier: r+naQIQvsd0JW5QPn+yX+KTIND1GvOA7x+es3u212+o=
Subject key identifier: 7F:4D:34:15:02:66:7F:61:07:85:F8:69:49:87:16:F8:3E:84:7C:E6
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0CFA9089
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/f000FQJmf2EHhfhpSYcW-D6EfOY.roa
Signing time: Thu 21 Apr 2022 08:17:59 +0000
ROA not before: Thu 21 Apr 2022 08:17:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 195.180.148.0/24 maxlen: 24
195.180.158.0/24 maxlen: 24
195.252.173.0/24 maxlen: 24
195.180.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217747593 (0xcfa9089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 21 08:17:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f4d341502667f610785f869498716f83e847ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:4a:d4:c3:11:0d:bd:b2:b5:d9:16:ae:4e:
ac:7b:e5:d8:84:12:d7:3a:dc:bd:9e:d6:9d:22:92:
28:c2:53:57:6a:12:05:c4:87:89:f4:c5:43:fa:07:
2b:2a:6a:a9:4f:e7:85:4a:79:1c:c0:86:77:0f:a1:
2d:4b:93:a4:ea:a1:2c:8a:81:ce:40:c7:e1:3c:07:
ef:64:28:02:77:f5:38:b5:58:85:e9:c7:f6:9c:32:
a3:b8:0a:39:0e:f9:ce:63:fa:63:f5:79:5d:a6:48:
80:31:3b:58:c4:c5:7c:eb:09:c8:68:23:db:a6:47:
3c:8e:b3:f7:28:f5:69:56:82:a7:47:61:28:ed:d5:
a3:1d:60:c7:18:62:f3:7d:49:2c:69:97:59:30:da:
e3:83:d0:91:45:dd:66:c9:1d:7f:27:fc:5a:82:70:
3a:5a:60:14:54:c6:cf:99:32:60:da:95:fc:c5:0e:
03:48:e3:3d:ba:a2:28:99:ed:56:2d:5a:44:e1:3b:
96:84:11:ca:ae:d1:5d:de:04:80:33:c6:8e:65:3a:
ca:68:c8:ab:47:54:57:f7:55:ca:07:4a:bf:19:ce:
4e:06:84:e3:be:9e:4f:76:6a:57:57:10:c6:01:ad:
0b:28:12:28:d7:24:bd:92:28:d5:ca:7b:a2:7a:86:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:34:15:02:66:7F:61:07:85:F8:69:49:87:16:F8:3E:84:7C:E6
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/f000FQJmf2EHhfhpSYcW-D6EfOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.148.0/24
195.180.158.0/24
195.180.178.0/24
195.252.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:58:65:f3:8b:15:fa:32:39:51:0a:61:a1:24:2d:9c:2e:c7:
39:78:90:e7:fa:ec:a7:b8:5b:a1:5d:68:19:64:7e:b6:f0:40:
75:cc:ce:35:15:93:73:4e:48:6c:6f:d8:19:b1:1f:48:e0:fc:
fd:34:8e:59:d8:23:a8:96:18:1c:af:02:dc:21:92:ce:11:87:
1f:a7:6a:06:6c:86:c2:ae:18:7a:68:9b:d6:76:13:71:c1:53:
fa:c5:19:06:0e:26:bb:1d:2b:89:47:95:5a:26:83:cc:95:49:
bc:8f:d8:49:1b:5e:0f:0a:7f:66:f9:ac:62:5d:90:22:f3:45:
d1:5b:39:b9:51:02:ae:a2:a8:fd:0b:80:83:b5:4e:e3:11:93:
47:83:11:9b:d0:71:dd:a2:8a:de:0a:34:f4:76:d5:d2:01:8c:
8c:63:5a:bb:24:72:76:5b:f8:0a:4a:05:eb:18:a6:f4:35:70:
3d:2d:c9:37:4d:85:ec:2c:54:9d:70:c2:dd:27:39:5d:ee:6f:
34:1f:ee:15:81:b8:b9:35:e3:b6:eb:bb:f8:b5:b1:2c:8d:8a:
c3:36:39:dc:06:90:ad:a2:f2:ab:78:b8:6a:1a:4e:cc:67:5d:
49:ae:d7:a6:2b:78:c0:39:af:20:ac:e7:15:f7:12:d9:fc:23:
49:7c:07:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org