Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/8FVZPyAjjL0nwQmb99nDugGxWGU.roa
File: 8FVZPyAjjL0nwQmb99nDugGxWGU.roa (raw, json)
Hash identifier: ugIHDRP6VKqT1OV4f5c9hjQU0+vQS0QMkt1nqFyB884=
Subject key identifier: F0:55:59:3F:20:23:8C:BD:27:C1:09:9B:F7:D9:C3:BA:01:B1:58:65
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018558C0
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/8FVZPyAjjL0nwQmb99nDugGxWGU.roa
Signing time: Thu 19 May 2022 13:04:01 +0000
ROA not before: Thu 19 May 2022 13:04:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.239.236.0/23 maxlen: 24
45.150.174.0/24 maxlen: 24
45.139.196.0/22 maxlen: 24
95.214.180.0/22 maxlen: 24
185.115.207.0/24 maxlen: 24
193.239.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25516224 (0x18558c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: May 19 13:04:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f055593f20238cbd27c1099bf7d9c3ba01b15865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:93:52:29:d4:70:cd:36:ce:71:d0:7d:ca:b5:
ff:f0:b4:d5:19:d5:42:3d:cd:41:9f:bc:22:c4:c5:
1b:a7:d2:e2:9b:b2:16:c2:8e:7b:1d:d6:fb:19:1c:
6c:f2:94:af:c7:c6:09:2c:44:7e:63:1c:2c:85:ed:
b4:12:fe:99:3c:15:41:80:b6:f5:d5:f1:7b:18:55:
c4:af:02:d8:95:a7:67:2b:9b:87:fb:61:19:cf:69:
56:9a:b6:8d:64:ee:0e:34:a2:d8:48:26:97:55:0c:
6f:ec:e9:29:50:57:a9:15:19:d6:c7:ba:d2:28:9e:
f8:6a:be:59:cf:de:a4:66:46:39:2d:88:94:ed:70:
1f:e0:dd:97:ed:c9:e1:e8:f4:bf:9a:0d:5d:bb:31:
6b:26:93:93:cf:eb:34:d8:c0:dc:97:1a:43:f8:67:
5b:ce:e7:4a:c2:71:ff:1a:a3:bf:b4:dc:b0:5e:82:
77:11:e7:c3:97:22:dd:e8:6d:3b:ed:22:08:8b:73:
9e:9f:ab:27:dc:9f:47:50:9b:fb:78:b8:ef:02:91:
77:9c:4e:6f:3b:65:42:6c:e8:69:51:7b:94:2d:46:
a7:3a:a6:10:7c:32:ca:a8:ea:0e:76:ab:47:2b:a4:
19:3d:1f:c5:53:8c:c7:10:53:de:cf:62:c6:db:4b:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:55:59:3F:20:23:8C:BD:27:C1:09:9B:F7:D9:C3:BA:01:B1:58:65
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/8FVZPyAjjL0nwQmb99nDugGxWGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.150.174.0/24
95.214.180.0/22
185.115.207.0/24
193.239.196.0/23
193.239.236.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:13:e7:22:af:7e:e2:78:bb:0b:28:96:76:23:b8:60:d4:de:
9a:16:e3:a4:a6:98:7b:f0:02:17:8e:64:e7:7f:d3:0b:9b:31:
63:31:0a:da:f8:6e:9e:fc:6e:2e:26:c2:b8:e8:41:72:7f:45:
80:6c:c5:bf:b1:16:2d:c0:08:90:af:0e:0b:9a:44:ee:93:ec:
1b:59:f3:0b:7a:2c:75:ef:32:23:36:e5:54:b6:22:6f:f4:2f:
7d:f0:5a:2b:0b:df:0e:63:e3:dc:56:a4:fc:06:1b:fb:c5:db:
05:fb:08:ae:a1:43:87:d2:dd:bf:a2:ba:26:6e:7c:59:c4:f9:
66:33:e0:66:18:84:bf:78:0d:b2:42:46:e1:94:1e:1d:db:d5:
f0:50:6e:60:02:00:6b:a6:74:5d:21:63:8b:ac:b3:81:92:9e:
f5:3b:72:d4:82:83:9b:73:a5:07:d9:8a:2e:07:db:ec:a9:66:
1c:66:12:f2:2b:48:57:db:b6:d6:d0:10:46:a7:88:c8:b7:8d:
9a:f1:99:a4:65:62:9d:1d:af:59:84:bd:3b:3a:a1:5b:10:3b:
03:bd:e4:00:7b:f3:1b:b5:0b:7c:d7:bc:55:d1:b3:86:b2:9f:
9c:ab:c6:f2:26:8a:81:82:b1:23:d3:eb:85:bc:56:87:b2:50:
c2:cd:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:27 2023 by rpki-client on console-fra.rpki-client.org