Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FrotIP8mumslTmOAH1PTJte-MeY.roa
File: FrotIP8mumslTmOAH1PTJte-MeY.roa (raw, json)
Hash identifier: AOAKfwbKzjM+B3+B8loAHPnWALKnH4gwSs12UzG7HAI=
Subject key identifier: 16:BA:2D:20:FF:26:BA:6B:25:4E:63:80:1F:53:D3:26:D7:BE:31:E6
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0182C6F49EA34EC94C0FD597A85CCA905435
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FrotIP8mumslTmOAH1PTJte-MeY.roa
Signing time: Mon 22 Aug 2022 19:08:16 +0000
ROA not before: Mon 22 Aug 2022 19:08:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 188.255.206.0/24 maxlen: 24
188.255.134.0/24 maxlen: 24
212.69.10.0/23 maxlen: 23
212.69.14.0/24 maxlen: 24
109.233.184.0/23 maxlen: 24
178.253.237.0/24 maxlen: 24
109.121.0.0/19 maxlen: 19
185.47.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:f4:9e:a3:4e:c9:4c:0f:d5:97:a8:5c:ca:90:54:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 22 19:08:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16ba2d20ff26ba6b254e63801f53d326d7be31e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:6b:f3:69:1b:31:10:8f:47:3c:48:55:cf:
95:04:91:c8:8d:15:4f:1c:68:0f:5c:f3:b2:2a:df:
76:ae:ec:e1:0a:1e:5e:a1:53:24:f7:45:9e:59:9d:
91:b9:ab:15:e7:3b:c1:a5:d2:cd:ec:94:bf:5c:0d:
25:71:15:44:15:82:5e:77:ae:a1:62:3d:ac:5f:5c:
30:06:ac:6f:0e:80:7e:3a:99:77:a8:21:48:0b:d5:
37:7b:13:ef:cd:72:c4:2b:d2:89:9c:e5:6a:0c:1a:
d1:17:d5:12:41:f5:81:94:17:a4:05:d9:39:04:85:
c4:b4:5c:2b:d8:42:6f:37:d9:b0:92:22:51:a6:f0:
98:4c:b0:cd:8f:e1:63:fd:7f:19:30:0c:c5:be:3c:
54:72:e0:15:4a:e1:55:29:5e:23:36:f4:0c:63:1e:
e8:24:24:d9:8e:3e:19:c7:7f:d3:e2:be:6a:ff:c4:
8e:2c:9d:a5:e1:3d:34:39:1e:3c:67:83:a9:6f:a0:
23:2b:79:ff:54:2f:6a:27:30:0c:d7:8a:7c:5c:36:
39:f5:62:c5:f1:ee:a3:9e:18:66:b9:8c:ee:50:a3:
e3:96:86:2f:fb:b7:45:31:cd:01:94:09:2d:4f:a9:
11:1c:1e:a7:f2:9c:04:ba:94:d6:8f:a5:14:b7:4c:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:2D:20:FF:26:BA:6B:25:4E:63:80:1F:53:D3:26:D7:BE:31:E6
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FrotIP8mumslTmOAH1PTJte-MeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.0.0/19
109.233.184.0/23
178.253.237.0/24
185.47.91.0/24
188.255.134.0/24
188.255.206.0/24
212.69.10.0/23
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:84:48:2f:df:39:ba:5d:90:98:1e:5d:95:f3:63:75:b3:e1:
d7:71:10:4d:5e:da:73:bc:25:98:1d:0b:4c:e6:96:83:55:f0:
58:a8:d5:26:24:91:b9:12:b7:5c:f8:d9:11:79:70:c5:bb:91:
79:0e:cd:10:cb:c6:4f:ca:45:83:51:26:64:b4:c1:5e:5c:5c:
2f:78:64:6f:73:a9:b6:93:c9:e2:45:18:bb:ed:8d:d5:22:d4:
3d:4d:b9:80:b7:07:cf:ee:be:19:73:af:fe:ba:be:fb:5c:62:
87:1e:44:d5:28:ef:57:81:ad:9b:11:ed:84:fc:ad:06:cc:93:
c9:d2:bd:5b:ed:6e:45:6f:ea:a0:f9:47:c8:47:cb:4e:62:d1:
6b:b9:a4:51:ac:75:3e:1f:98:c9:33:11:d6:b6:18:e4:5c:88:
ec:dc:31:27:b9:22:e3:7e:0b:85:b9:ff:d2:30:87:7f:cc:89:
61:69:4d:9f:55:63:d2:20:53:4c:a4:96:a8:f8:d1:6e:d2:78:
a0:fb:7e:5d:37:f3:13:b0:13:a2:8b:27:23:08:c3:23:5a:54:
09:00:5a:75:10:a7:f5:fa:5f:3e:dc:c2:a9:aa:a2:28:3b:83:
a9:c2:98:b9:43:df:69:9f:50:e3:64:54:01:1f:20:f0:d4:94:
3d:f8:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org