Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/AoF-FfMMPffph3F3l3qgvpDK9mA.roa
File: AoF-FfMMPffph3F3l3qgvpDK9mA.roa (raw, json)
Hash identifier: SHU958nl70ejVhXx3UclMhr9D4EN4ht2ieoSoXSAxkY=
Subject key identifier: 02:81:7E:15:F3:0C:3D:F7:E9:87:71:77:97:7A:A0:BE:90:CA:F6:60
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 0183D6331D2425673DACD43C991BBC014330
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/AoF-FfMMPffph3F3l3qgvpDK9mA.roa
Signing time: Fri 14 Oct 2022 11:13:37 +0000
ROA not before: Fri 14 Oct 2022 11:13:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12861
IP address blocks: 212.29.67.0/24 maxlen: 24
212.29.66.0/24 maxlen: 24
212.29.69.0/24 maxlen: 24
212.29.68.0/24 maxlen: 24
212.29.90.0/24 maxlen: 24
91.237.216.0/23 maxlen: 24
212.29.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:33:1d:24:25:67:3d:ac:d4:3c:99:1b:bc:01:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Oct 14 11:13:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02817e15f30c3df7e9877177977aa0be90caf660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:4b:2d:97:ed:88:74:0e:1a:f6:bc:75:df:
af:01:db:ae:8d:ed:8f:cb:cb:91:e1:b9:e9:2f:59:
c0:13:2a:8f:3a:87:f7:02:1c:f2:2d:8d:84:9f:69:
f3:0a:33:e6:ca:bd:60:ad:35:65:cc:13:d8:ec:b7:
d4:5a:1c:59:f9:c3:6b:11:a8:83:7c:41:34:8f:e2:
d9:aa:17:16:4c:39:1f:a4:b4:91:d2:36:9e:bb:9b:
24:cd:79:c3:31:4d:bd:18:0f:7a:78:88:de:8d:fa:
ec:0f:c0:c6:5e:ef:b1:3d:15:bc:32:0b:0d:c2:d4:
f1:04:a0:a2:75:ac:f9:fe:1e:8f:3e:94:95:b2:d8:
10:ee:a6:5d:2b:d3:cb:d3:11:c3:a5:7d:ae:b1:86:
77:37:34:04:00:9a:c5:3c:bf:ba:50:f6:af:e9:53:
4f:69:71:8f:b3:e7:8f:e5:95:e0:10:8c:50:1f:a3:
7f:82:58:11:d4:0c:9d:2e:d1:bd:2a:4e:91:20:91:
a5:ba:87:5d:6f:3d:c3:9b:fb:c1:e0:5e:47:bc:cd:
99:da:c5:02:15:8b:0c:52:b6:ed:75:89:de:a3:be:
81:ad:7c:97:d7:0d:1d:22:97:d6:29:68:19:09:7f:
51:63:74:a0:89:6a:38:42:3c:89:74:c8:1a:a7:70:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:81:7E:15:F3:0C:3D:F7:E9:87:71:77:97:7A:A0:BE:90:CA:F6:60
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/AoF-FfMMPffph3F3l3qgvpDK9mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.216.0/23
212.29.64.0/24
212.29.66.0-212.29.69.255
212.29.90.0/24
Signature Algorithm: sha256WithRSAEncryption
29:47:7c:6a:7b:f1:79:28:69:ed:d1:e8:6d:6c:72:b5:87:12:
1e:1e:b2:b2:47:03:fa:c5:60:db:5b:c7:2c:ec:19:aa:99:e1:
2b:cd:32:89:2e:30:25:c8:a0:43:18:e0:2d:54:f1:96:0f:e1:
f6:3d:25:6e:76:90:d6:62:fe:b9:de:98:d7:cb:a6:13:0e:36:
a9:f4:59:29:ef:94:ae:ae:f9:87:97:4a:f4:f0:e1:2c:82:85:
de:d2:d5:9e:1b:19:af:e7:c0:ab:b9:20:7f:bb:a3:6f:d6:06:
c9:6c:3b:df:51:46:79:e2:bc:20:57:50:c6:d1:76:c6:b6:9b:
81:0d:7b:3f:aa:b6:ea:7e:cd:44:17:3f:ec:69:6d:ad:51:61:
c7:44:6a:38:09:6e:5d:e5:2f:bd:94:d4:2a:86:b6:1b:4b:b5:
a7:5b:32:16:9e:8a:d7:60:9e:3c:cc:9a:b4:e2:ee:94:d5:fc:
d9:50:8f:09:6b:65:f2:e7:07:95:0f:38:1b:39:a3:73:d6:ac:
3e:ac:44:2d:8d:4f:63:95:51:7e:8c:a0:6a:54:a0:ae:87:c8:
af:92:80:d4:ab:98:47:48:77:cd:4e:31:fc:56:a8:95:ec:63:
c4:69:08:04:17:bb:b1:fb:9d:7c:90:19:0d:6d:ed:4f:30:72:
ca:94:5e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:39 2024 by rpki-client on console-fra.rpki-client.org