Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FAim3hjpIn1W6xQuEymoQ9PxRjs.roa
File: FAim3hjpIn1W6xQuEymoQ9PxRjs.roa (raw, json)
Hash identifier: OEDICe0gOdqFTWqOjRHMntm8UWvvmAEPDnF4wv8U9pw=
Subject key identifier: 14:08:A6:DE:18:E9:22:7D:56:EB:14:2E:13:29:A8:43:D3:F1:46:3B
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1BA06732
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FAim3hjpIn1W6xQuEymoQ9PxRjs.roa
Signing time: Sat 01 Jan 2022 05:03:41 +0000
ROA not before: Sat 01 Jan 2022 05:03:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 176.118.200.0/22 maxlen: 22
64.43.124.0/22 maxlen: 24
193.36.204.0/22 maxlen: 22
176.121.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463497010 (0x1ba06732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 1 05:03:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1408a6de18e9227d56eb142e1329a843d3f1463b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:9b:25:54:93:5b:0a:ab:80:1a:db:be:0e:
53:e7:c8:50:5d:47:59:ef:6f:35:c0:1e:64:65:7b:
dd:b9:03:c8:59:4a:f1:44:7d:f7:14:e9:c8:35:fd:
cd:fc:74:da:86:84:18:fa:c1:4f:07:ba:72:44:7b:
1b:ad:53:73:c1:26:ff:68:fd:52:b3:0e:3c:05:26:
76:ee:04:5d:9f:2a:5c:1a:99:8f:43:ce:db:42:b4:
7f:63:f7:3a:12:d9:34:25:c5:fb:e1:45:d4:13:fd:
ac:b3:a6:d1:51:9f:cd:9d:f9:0c:6d:9e:97:bd:06:
56:aa:03:51:7e:96:dc:f0:96:57:6e:0a:c3:11:8e:
51:14:53:eb:81:77:c7:a8:86:1c:d3:f4:6d:28:60:
42:67:47:14:ca:59:55:0f:7a:1a:89:c2:36:2e:b1:
22:6d:f1:8e:62:b7:ed:dc:d1:5d:4f:af:03:2e:3a:
c1:56:25:fa:d0:68:75:d9:d8:10:57:39:d2:39:8a:
bb:6c:08:9f:ac:ca:36:07:bc:9b:24:72:98:40:c8:
48:7e:60:ba:df:30:73:b2:6c:1e:28:44:2f:cd:e1:
20:b4:33:86:c8:ce:bd:1e:f6:f7:ba:5c:a3:eb:06:
aa:b5:82:6f:2d:57:43:57:23:ea:e6:82:ab:fa:39:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:A6:DE:18:E9:22:7D:56:EB:14:2E:13:29:A8:43:D3:F1:46:3B
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FAim3hjpIn1W6xQuEymoQ9PxRjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.43.124.0/22
176.118.200.0/22
176.121.108.0/22
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
42:91:65:61:d2:17:8b:b3:92:51:a0:35:74:3b:f2:31:02:72:
29:26:9a:d7:c3:ba:f1:33:51:64:3d:ac:8c:20:f7:e6:d4:69:
59:35:4f:f7:52:7c:70:ce:62:a8:ef:44:1a:03:13:52:a4:ad:
e3:e6:4b:88:10:d1:48:45:1b:fd:22:cd:9f:3b:f8:54:31:ab:
32:b0:5c:dd:23:cc:d8:49:80:17:94:99:31:40:d2:2e:66:15:
ec:f4:40:9f:34:81:97:1d:32:ff:79:eb:30:2e:e4:f9:10:30:
11:38:53:fb:22:8c:1e:62:c7:08:8a:7f:cd:e5:aa:af:b5:7d:
bd:c4:c5:c9:14:25:b8:5d:77:b6:7d:95:1d:67:3f:d5:40:26:
95:10:f2:a1:06:ee:34:07:57:7b:8c:11:54:f8:8f:02:be:76:
c4:a4:85:8e:fd:23:0d:f6:67:29:78:f8:4b:b3:4f:97:04:b9:
9b:98:21:42:30:d7:38:26:2c:48:b5:42:9d:21:76:f1:c3:14:
a5:97:2b:28:d7:fe:04:0d:9e:31:30:f7:f1:43:ad:ed:61:47:
0b:f0:af:99:4a:70:f2:ac:25:0d:3e:df:e4:bb:82:aa:b2:d7:
a6:5a:28:af:92:b6:ac:5c:27:c7:17:df:7f:70:1e:08:35:d2:
2f:9d:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org