Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/f5A4GC_ZkW1CHBHC9pqhptcfNJg.roa
File: f5A4GC_ZkW1CHBHC9pqhptcfNJg.roa (raw, json)
Hash identifier: Htcyo1wt8x02r+/7LYYhsJf8gbXzvnWgSNOyB815ZkY=
Subject key identifier: 7F:90:38:18:2F:D9:91:6D:42:1C:11:C2:F6:9A:A1:A6:D7:1F:34:98
Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Certificate serial: 06F58327
Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/f5A4GC_ZkW1CHBHC9pqhptcfNJg.roa
Signing time: Sat 01 Jan 2022 12:58:13 +0000
ROA not before: Sat 01 Jan 2022 12:58:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48954
IP address blocks: 85.91.40.0/22 maxlen: 22
195.88.100.0/23 maxlen: 23
37.48.240.0/24 maxlen: 24
185.83.120.0/22 maxlen: 22
37.48.240.0/21 maxlen: 21
2a00:7640::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116753191 (0x6f58327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727
Validity
Not Before: Jan 1 12:58:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f9038182fd9916d421c11c2f69aa1a6d71f3498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:a2:ee:9a:45:94:e6:eb:db:3a:e0:05:5e:
08:c6:3c:be:84:49:f0:90:5b:72:a2:ca:8d:87:7a:
00:91:a2:09:fa:b7:00:d9:c1:f3:93:dc:a9:ce:5a:
20:25:1e:3b:1a:b9:61:bd:84:ff:17:69:67:eb:ea:
a7:01:68:50:b9:c9:ae:4a:41:29:d7:be:e1:2e:b2:
14:46:14:e7:ea:25:91:98:f2:7b:08:fc:87:ec:10:
69:f0:e7:99:7e:93:b8:a5:38:f6:35:73:9a:58:64:
ee:f4:54:52:99:77:c6:21:ab:68:7c:96:6e:78:13:
b0:11:34:3d:2d:35:1d:84:24:39:0e:e0:9a:7b:9c:
d7:b5:02:9f:0a:f1:f0:66:07:d9:20:95:33:37:4d:
7a:4f:94:93:8a:b7:64:29:7b:51:c2:cf:f3:6e:6e:
ad:71:2d:5d:46:26:f8:56:53:34:de:b1:72:86:3a:
ea:72:16:ab:6e:d5:07:42:64:cb:af:4d:0a:fd:26:
2c:cf:7e:57:b2:73:27:42:67:9e:aa:11:0d:68:f6:
e0:8e:f0:ee:9e:88:52:43:d8:3a:48:77:45:4c:2a:
8d:ac:de:80:4b:b7:44:1e:73:ef:16:2a:ea:13:1f:
5a:79:55:5d:a2:a2:5d:86:eb:c8:a6:69:d5:81:9d:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:38:18:2F:D9:91:6D:42:1C:11:C2:F6:9A:A1:A6:D7:1F:34:98
X509v3 Authority Key Identifier:
keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/f5A4GC_ZkW1CHBHC9pqhptcfNJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.240.0/21
85.91.40.0/22
185.83.120.0/22
195.88.100.0/23
IPv6:
2a00:7640::/32
Signature Algorithm: sha256WithRSAEncryption
d4:6f:d0:a5:d5:d2:a5:35:28:2f:50:a8:4b:24:3b:7a:95:80:
ef:d1:0c:be:bc:ce:8f:b8:fc:c3:75:b7:a8:5a:9c:ed:ff:52:
d2:6f:5c:ac:33:ad:e2:c9:30:52:b0:1f:98:0c:a1:f5:fb:97:
4e:2f:0e:e3:39:6d:76:a4:4e:ba:b5:05:b7:08:5d:6a:b4:52:
51:59:56:69:44:b9:b0:1c:fb:75:03:13:28:a2:ca:a4:4b:fc:
38:fd:8e:69:81:16:0d:fe:95:1a:db:1e:71:8c:7b:78:8f:00:
38:d3:2e:68:a5:a6:f0:e4:a9:d3:f3:ac:20:3c:bc:f0:ae:9a:
17:4d:04:03:a6:01:d5:63:90:13:8a:07:65:e8:9e:da:30:b5:
17:0c:45:af:b7:d0:05:27:5c:19:d8:cf:cf:41:57:61:37:da:
3e:02:40:82:d2:b2:b9:7d:b1:eb:7f:cc:fb:90:c2:9a:ad:50:
18:23:37:a9:d7:56:fd:bd:a2:6b:1b:de:38:ec:58:d5:08:7c:
ce:c6:3a:46:f7:77:c9:19:c5:57:33:fc:e7:64:e4:a0:b8:92:
e1:16:a6:29:80:16:5d:d4:65:4d:ec:b1:1c:38:22:32:1c:15:
85:05:21:55:1b:62:86:a6:b0:59:67:48:62:63:19:44:60:b5:
5f:69:60:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:28 2024 by rpki-client on console-fra.rpki-client.org