Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FmZQsJFFMqc2ELC-vwhauMWhWyg.roa
File: FmZQsJFFMqc2ELC-vwhauMWhWyg.roa (raw, json)
Hash identifier: 7lMSFtX2855qqwfC46y7follicmDcEgdZN2BCwnYBEo=
Subject key identifier: 16:66:50:B0:91:45:32:A7:36:10:B0:BE:BF:08:5A:B8:C5:A1:5B:28
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01825A6B6632A8AC916B2B977DE85C29FE25
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FmZQsJFFMqc2ELC-vwhauMWhWyg.roa
Signing time: Mon 01 Aug 2022 17:19:24 +0000
ROA not before: Mon 01 Aug 2022 17:19:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 79.175.117.0/24 maxlen: 24
93.186.68.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.34.0/24 maxlen: 24
109.121.35.0/24 maxlen: 24
109.121.32.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.44.0/24 maxlen: 24
109.121.46.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
77.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5a:6b:66:32:a8:ac:91:6b:2b:97:7d:e8:5c:29:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 1 17:19:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=166650b0914532a73610b0bebf085ab8c5a15b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:eb:f5:2c:fe:27:d9:83:8c:19:31:0d:ff:2f:
0e:38:46:3d:d8:45:06:c4:8b:30:97:a6:c0:ba:e0:
0f:dd:10:d9:70:03:8b:67:ff:d6:51:f3:ee:e1:91:
e9:c0:ab:5a:b8:0c:10:75:99:51:87:50:06:38:f1:
b3:3e:54:bf:4c:c9:d6:c7:25:e6:cc:db:75:d8:ab:
8c:5a:69:1b:56:cf:ff:9c:58:6c:88:71:42:73:c3:
ac:e9:96:e5:8e:ca:03:65:64:81:30:5c:b8:8c:06:
5e:e7:2b:34:55:8e:9e:f3:44:97:21:30:cf:18:9c:
c7:ca:e3:ec:59:23:ef:b6:5e:2b:4e:7a:fb:bb:6d:
e4:c1:28:76:80:fb:1a:af:aa:a2:30:4a:83:25:35:
36:c1:67:bf:71:e9:f8:61:6b:2a:2b:47:eb:88:9e:
09:92:dc:06:b2:d3:9f:d8:57:bd:77:f3:4b:8b:36:
e5:df:e9:34:cf:50:df:0c:43:d3:28:39:46:60:f0:
77:e5:5a:95:a7:e4:9b:98:b7:40:be:be:28:33:cb:
4e:b5:12:02:25:24:84:2b:0f:93:ab:00:de:3a:07:
f1:b9:66:53:f9:ad:30:bc:fa:e6:1f:a4:35:61:3f:
6a:36:1c:f0:80:38:c4:39:96:36:ea:d6:94:23:3e:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:50:B0:91:45:32:A7:36:10:B0:BE:BF:08:5A:B8:C5:A1:5B:28
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FmZQsJFFMqc2ELC-vwhauMWhWyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.4.0/24
79.175.117.0/24
93.186.68.0/24
109.121.32.0/24
109.121.34.0/23
109.121.38.0/24
109.121.40.0/23
109.121.43.0-109.121.44.255
109.121.46.0/24
109.233.184.0/24
Signature Algorithm: sha256WithRSAEncryption
97:00:ba:8b:e2:c8:88:8f:ff:16:a5:bc:a8:09:6f:fe:50:4d:
9b:5e:ab:46:f6:8e:0c:18:32:91:b2:c1:14:d9:4b:11:2c:2e:
b1:b1:cf:30:b3:34:f8:59:14:c8:63:1c:42:85:1c:6a:8d:cb:
01:5d:fa:a1:e9:d8:e4:13:1c:8e:fa:80:98:ac:ee:f3:fe:eb:
4c:d2:28:0f:c8:24:c8:a9:56:95:64:ca:ac:78:a6:1d:9d:f2:
5b:41:72:ba:e6:a7:b3:19:5e:16:d5:67:af:f7:32:73:74:e7:
78:ad:3d:89:dd:dc:f0:78:81:f0:54:92:b3:38:af:33:37:75:
fc:6f:dc:19:53:01:09:7e:19:0f:3e:02:47:81:72:55:e2:73:
90:4c:fa:35:cc:32:61:54:32:91:0e:c9:e9:d0:b9:c7:a1:45:
0a:13:0e:f5:77:bb:a1:88:74:fd:dd:76:81:a0:b2:39:b4:7f:
4f:3d:42:f1:ef:41:2a:37:57:4c:31:91:6e:69:cd:5d:3d:12:
de:37:e0:b9:c4:91:6b:05:ba:25:d5:c3:7f:a7:08:e1:7e:9a:
6c:ab:d6:35:48:c4:2c:bd:c6:94:8a:2c:9c:d0:07:b4:66:eb:
e6:82:db:ab:7c:8d:14:05:68:aa:50:e4:c1:6b:bb:00:a4:7e:
a1:93:67:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org