Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/FgDdcHDHE3bOhug6Me4plwnpr9o.roa
File: FgDdcHDHE3bOhug6Me4plwnpr9o.roa (raw, json)
Hash identifier: rm5o9csJKAdPnDuGrb4xs7Lc0AwkPXlzLK2LlIEtOKQ=
Subject key identifier: 16:00:DD:70:70:C7:13:76:CE:86:E8:3A:31:EE:29:97:09:E9:AF:DA
Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial: 0433A82C
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/FgDdcHDHE3bOhug6Me4plwnpr9o.roa
Signing time: Thu 02 Jun 2022 11:51:20 +0000
ROA not before: Thu 02 Jun 2022 11:51:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24577
IP address blocks: 185.108.68.0/22 maxlen: 22
91.187.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70494252 (0x433a82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Validity
Not Before: Jun 2 11:51:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1600dd7070c71376ce86e83a31ee299709e9afda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:5b:6d:9f:15:2b:a7:d4:96:f6:6c:cc:9e:
70:94:31:ff:1f:c1:d2:53:5a:3d:8d:d7:e8:4f:66:
96:42:25:20:17:58:33:0a:be:7a:9f:86:45:37:ca:
53:0b:e8:31:e5:db:2d:c8:db:8d:a7:fb:ee:a6:cb:
39:7d:74:f0:03:14:07:01:77:e4:20:eb:b3:5a:7d:
5c:e1:64:5b:55:ad:44:a5:7b:a8:6f:79:b3:5c:78:
c0:f4:5b:c8:6f:20:4b:7d:68:d6:38:08:30:0e:f9:
fa:12:3c:d3:eb:2a:48:7f:af:21:b2:50:bd:b5:b2:
be:2a:e2:0f:5f:ee:6f:48:10:06:75:4d:0c:ee:58:
c0:86:31:9d:85:a8:f6:ab:08:53:df:70:08:1e:20:
04:c9:6d:fb:1e:09:10:50:49:18:0d:0d:91:b1:6c:
3f:59:f0:dd:06:09:4c:e5:4f:24:a7:c1:02:0e:31:
97:5c:35:bb:dd:4d:0f:67:3b:dd:32:ad:74:71:0f:
68:f8:a6:f3:38:33:2b:d8:cb:92:d0:2f:8b:df:89:
23:71:19:bc:7b:6d:be:9d:51:76:71:9a:4d:24:df:
89:29:e6:4c:3d:fd:84:18:ee:1d:63:1b:5e:ba:d1:
bb:54:f5:5e:4d:64:97:3f:57:27:f9:b7:d0:cf:2f:
f3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:DD:70:70:C7:13:76:CE:86:E8:3A:31:EE:29:97:09:E9:AF:DA
X509v3 Authority Key Identifier:
keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/FgDdcHDHE3bOhug6Me4plwnpr9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.224.0/19
185.108.68.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:6c:44:48:73:a4:e3:93:80:e0:7e:51:87:b8:95:57:b2:4d:
01:c2:89:a8:1a:99:88:43:e3:fd:d8:b5:65:72:bc:66:ee:09:
47:8a:76:28:3a:66:69:2a:0b:44:a6:c1:aa:00:90:fc:05:0a:
ed:25:b4:3f:c4:55:a7:c0:1f:34:34:7c:63:df:ca:eb:eb:a3:
73:36:62:80:68:f2:c4:47:f1:ce:f0:75:ae:da:f6:37:fb:60:
79:37:33:0f:40:c2:24:07:97:01:9f:70:1d:8a:94:e8:19:56:
a4:d4:ab:a9:75:6e:ef:56:ee:ff:09:f5:eb:5c:a1:e3:1c:ec:
38:05:81:fe:21:f6:f8:cf:f8:51:38:ef:df:42:19:e3:ea:f7:
9d:69:cc:ec:f9:69:a7:ba:fa:07:92:d4:4e:84:0a:25:67:57:
04:ba:9b:ad:a5:96:8b:d3:8f:24:db:b0:7a:c5:31:3e:fc:11:
1e:59:ee:fb:a6:4c:08:f2:0e:6d:9e:93:6e:ad:b1:b5:21:93:
b1:be:0d:7e:2c:a8:a9:fd:f9:99:0e:d5:67:4d:16:7d:d7:76:
74:5d:94:8a:01:16:69:cb:bb:34:f4:6f:cd:7a:e1:fa:14:22:
c0:5b:9f:1c:3e:31:fa:4d:6d:c5:61:02:5c:f4:4e:09:bf:30:
81:e3:11:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:34 2023 by rpki-client on console-ams.rpki-client.org