Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kFspp-9OCHZkd_efMDq-O3HW1-c.roa
File: kFspp-9OCHZkd_efMDq-O3HW1-c.roa (raw, json)
Hash identifier: MuLb/mpTLWP0JbpSs6ujlk7yzJgEuKkgLSqDVPmFYBY=
Subject key identifier: 90:5B:29:A7:EF:4E:08:76:64:77:F7:9F:30:3A:BE:3B:71:D6:D7:E7
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 03CAD9A8
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kFspp-9OCHZkd_efMDq-O3HW1-c.roa
Signing time: Thu 02 Jun 2022 20:11:20 +0000
ROA not before: Thu 02 Jun 2022 20:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4140:4::/48 maxlen: 48
2a05:4143::/32 maxlen: 48
2a05:4140:187::/48 maxlen: 48
2a05:4144::/32 maxlen: 32
2a05:4140:100::/40 maxlen: 48
2a05:4140:400::/40 maxlen: 48
2a05:4140:600::/40 maxlen: 40
2a05:4140:300::/40 maxlen: 40
2a05:4140:190::/48 maxlen: 48
2a05:4140:3::/48 maxlen: 48
2a05:4140:16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63625640 (0x3cad9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jun 2 20:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=905b29a7ef4e08766477f79f303abe3b71d6d7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:58:c3:52:64:fb:9d:ff:f0:67:43:85:70:b4:
29:1e:09:a1:8a:d5:eb:2a:b0:55:72:36:87:fb:36:
58:26:72:36:77:5f:91:e4:73:dd:3e:9a:70:d5:71:
42:77:00:23:a1:9f:1a:f1:7c:b4:03:6e:56:a1:09:
25:8f:75:1d:a8:5a:ab:82:d0:c6:99:17:95:0b:73:
4e:b3:ee:53:27:4a:77:e6:38:48:6f:88:ae:3b:24:
52:cf:d6:fd:f8:4a:d0:43:40:13:c0:06:b8:95:32:
bc:97:7f:a8:6c:a2:37:39:cf:e5:a7:81:87:7e:45:
c8:0f:ca:09:89:07:f4:23:70:c4:29:e5:23:aa:81:
fc:b6:75:6b:87:d6:ce:42:e3:75:f2:f6:e0:17:b2:
75:9b:07:3d:bf:57:07:6f:4f:59:48:36:26:ca:0c:
41:4a:1a:4d:15:5a:d0:53:21:3a:6b:e2:aa:4a:b6:
33:5e:d4:b8:19:4a:4b:79:49:d6:9e:00:b2:d0:9f:
13:d9:69:a5:fa:44:d5:b5:af:d5:04:28:62:61:89:
9b:d5:21:4d:0b:ec:55:5c:84:ff:97:68:23:04:e2:
1c:de:fe:17:d3:49:1b:9e:84:85:aa:3f:d9:40:81:
35:d9:9d:75:dc:16:50:13:cd:eb:47:3a:ab:00:8d:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:29:A7:EF:4E:08:76:64:77:F7:9F:30:3A:BE:3B:71:D6:D7:E7
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kFspp-9OCHZkd_efMDq-O3HW1-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:3::-2a05:4140:4:ffff:ffff:ffff:ffff:ffff
2a05:4140:16::/48
2a05:4140:100::/40
2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
2a05:4140:600::/40
2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5a:71:dc:4c:79:07:46:55:a5:19:d6:9a:17:09:4e:29:af:6b:
24:f0:db:ad:c0:92:9e:31:c5:60:45:f3:b0:41:78:4e:ff:22:
a5:53:b3:e6:02:e8:1d:f3:e2:a2:a2:71:4c:84:24:37:2e:02:
7d:49:03:1f:17:1f:25:46:48:aa:7e:1d:57:97:f4:d7:85:78:
c4:22:60:93:a3:61:10:43:03:cc:14:a1:fd:09:45:ee:4c:64:
ee:9d:e7:4f:f6:0a:28:40:7e:e8:21:7c:ea:34:d4:be:63:11:
96:d7:ef:5f:cc:13:52:cb:6b:d7:32:5c:48:34:77:a8:9c:d2:
e5:40:c0:c7:1a:4d:3d:6e:6f:60:12:a3:7d:f7:41:5f:67:fd:
0f:50:39:56:8d:2d:4c:0f:ca:8e:5e:ff:6b:f7:bc:e4:dc:dd:
ac:60:7c:a0:61:90:5a:54:69:36:88:1b:a0:c8:49:1d:a9:3f:
45:43:2f:5c:3e:ff:e5:e3:65:58:99:35:27:e2:8f:1e:7c:68:
4d:5c:29:6e:45:a9:3a:5b:87:e6:36:1c:f0:aa:27:c9:c6:35:
17:f4:0f:8b:e6:a4:fa:f9:39:f8:2b:30:a4:8d:7a:18:69:6b:
a6:ae:90:56:86:10:60:06:df:94:3e:33:8c:94:a5:5a:db:77:
5c:4c:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org