Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/fy_ZFwzvDJ-cIa_gcT5sQaA7cVk.roa
File: fy_ZFwzvDJ-cIa_gcT5sQaA7cVk.roa (raw, json)
Hash identifier: Q8+bQZX4lzjHM5vagV9WJgIWb7tkesW7P/bnV4ox22Y=
Subject key identifier: 7F:2F:D9:17:0C:EF:0C:9F:9C:21:AF:E0:71:3E:6C:41:A0:3B:71:59
Certificate issuer: /CN=a8cface114d8cdea6dc5e7a49943f322346cb35d
Certificate serial: 07094547
Authority key identifier: A8:CF:AC:E1:14:D8:CD:EA:6D:C5:E7:A4:99:43:F3:22:34:6C:B3:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qM-s4RTYzeptxeekmUPzIjRss10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/fy_ZFwzvDJ-cIa_gcT5sQaA7cVk.roa
Signing time: Sat 01 Jan 2022 10:00:02 +0000
ROA not before: Sat 01 Jan 2022 10:00:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16347
IP address blocks: 193.47.139.0/24 maxlen: 24
103.73.172.0/22 maxlen: 24
185.247.248.0/22 maxlen: 24
2a0d:4240::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118048071 (0x7094547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8cface114d8cdea6dc5e7a49943f322346cb35d
Validity
Not Before: Jan 1 10:00:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f2fd9170cef0c9f9c21afe0713e6c41a03b7159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:37:bf:e8:c1:fd:e6:60:e7:75:a8:b8:00:
e7:90:b1:25:fe:d4:1f:ba:ad:57:6f:11:98:b5:3e:
ad:cb:ea:be:1d:7b:b5:9f:5b:12:5f:4d:d8:cc:2b:
6f:62:7e:82:3a:32:e7:82:96:b1:97:8c:fa:67:6f:
00:65:b9:4c:fe:c0:49:ec:0b:e2:57:db:95:37:cd:
81:7a:52:b8:4c:2a:f1:d1:26:2e:a0:03:a6:b0:a3:
d6:06:38:bc:3e:d5:a6:a6:f0:c8:f8:16:4c:57:f1:
7e:5b:bc:9a:a4:fe:ad:79:5d:d9:f7:c0:fe:95:92:
0b:93:fb:c7:9c:97:f0:4b:59:32:63:ac:ca:8e:a5:
99:02:e7:26:d6:4c:89:43:52:30:af:0d:e1:09:9a:
14:4d:c4:80:a8:52:0a:62:0d:d1:d2:ef:0a:67:ce:
df:03:6d:3d:8d:da:ee:62:27:f2:02:fc:ab:a6:da:
9c:8f:61:a9:12:3d:e3:53:33:69:96:c4:43:0b:51:
8a:e4:9d:fe:ab:33:3c:a3:cd:5a:5b:14:dd:22:04:
28:f0:74:26:5c:38:34:12:9b:e3:45:2c:f7:f0:12:
87:f0:97:5d:cf:a1:09:dc:21:9c:1a:7e:e0:f9:b1:
ed:11:30:2e:7c:66:a8:f8:0d:6a:d3:35:9b:84:ee:
43:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2F:D9:17:0C:EF:0C:9F:9C:21:AF:E0:71:3E:6C:41:A0:3B:71:59
X509v3 Authority Key Identifier:
keyid:A8:CF:AC:E1:14:D8:CD:EA:6D:C5:E7:A4:99:43:F3:22:34:6C:B3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qM-s4RTYzeptxeekmUPzIjRss10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/fy_ZFwzvDJ-cIa_gcT5sQaA7cVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/qM-s4RTYzeptxeekmUPzIjRss10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.73.172.0/22
185.247.248.0/22
193.47.139.0/24
IPv6:
2a0d:4240::/29
Signature Algorithm: sha256WithRSAEncryption
56:c2:c9:19:db:7a:ac:73:df:b1:f0:80:37:bb:2e:f9:20:90:
52:3a:1c:1a:b3:3f:ee:07:f5:dd:84:2c:97:3e:ad:ec:24:cb:
b5:40:6e:3a:8b:73:20:00:9a:fa:6e:0a:2f:da:e5:1e:e1:b0:
a8:fa:0e:e5:9d:7c:58:3e:b1:08:05:ec:85:74:d7:26:ca:a8:
3b:74:8f:00:66:6b:b5:a5:85:dc:6a:97:4b:48:14:b0:f1:d9:
4d:8c:c5:9a:87:d5:cd:5d:36:ab:8e:5f:67:ef:07:c3:9c:80:
81:db:09:0a:0c:fe:ff:55:c7:88:3f:87:1d:a5:dc:3b:6e:fa:
2d:aa:a4:85:33:46:75:d0:6d:3d:50:67:cb:95:f6:60:d6:60:
99:4f:b3:5d:27:11:f9:f8:fd:dc:35:21:10:d2:b6:10:54:97:
7a:e0:79:c3:78:b5:7e:c7:df:bf:70:8f:8b:4b:47:7b:8b:97:
1c:d4:24:76:48:eb:80:1a:d3:7a:c5:ec:df:32:89:bd:e4:4d:
28:7b:1e:47:88:7f:57:8d:c1:a7:11:66:e6:86:4d:23:86:56:
ea:8d:70:1c:19:81:5a:3d:cd:bd:a9:c0:2a:b2:96:fe:cb:76:
88:8d:c9:fd:57:5f:ea:b7:8f:7a:f7:6a:3e:bc:0b:f9:0a:61:
af:95:7c:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:10 2024 by rpki-client on console-fra.rpki-client.org