Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/D7yty0j0mMhxKZUnTGNLhtTl8Bo.roa
File: D7yty0j0mMhxKZUnTGNLhtTl8Bo.roa (raw, json)
Hash identifier: 0eyN/u5o3rTu0NpjODKJLcvEKutsUOnZ3dXrrzZQoqI=
Subject key identifier: 0F:BC:AD:CB:48:F4:98:C8:71:29:95:27:4C:63:4B:86:D4:E5:F0:1A
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0184F0C099B2E3D73DC9B1D9EAB3AA26275F
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/D7yty0j0mMhxKZUnTGNLhtTl8Bo.roa
Signing time: Thu 08 Dec 2022 08:01:04 +0000
ROA not before: Thu 08 Dec 2022 08:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20616
IP address blocks: 195.246.242.0/23 maxlen: 23
86.105.192.0/24 maxlen: 24
91.208.142.0/24 maxlen: 24
188.214.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:c0:99:b2:e3:d7:3d:c9:b1:d9:ea:b3:aa:26:27:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Dec 8 08:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fbcadcb48f498c8712995274c634b86d4e5f01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:7e:bb:15:1f:30:fb:17:3e:56:15:4a:6d:
a8:ad:54:fe:3c:8f:f2:c2:a3:fc:0f:0b:88:a9:47:
d1:74:27:22:5a:f8:d6:f0:96:c0:a9:b0:fc:a6:a4:
a9:d3:85:64:78:18:cb:2c:24:da:4b:84:ad:17:74:
52:d3:d4:fd:95:d2:73:3d:25:84:a4:35:4d:53:5d:
e1:0e:26:a0:48:3e:58:fc:ea:e2:5b:48:ce:0c:5a:
83:1b:a8:7e:d0:85:d1:b4:eb:2b:1b:66:a8:fc:20:
53:3a:a5:53:5c:70:c9:0f:ff:d2:11:c0:83:eb:c5:
59:39:e1:36:63:fc:ea:bf:7e:fd:3c:9b:bb:88:52:
02:d2:81:d4:6b:e9:43:7f:e9:8d:57:b6:e5:6d:d1:
5a:09:d3:ff:0d:b6:5a:f8:55:e1:b5:ef:7f:1e:07:
55:03:3d:c8:96:9e:94:9e:a9:5a:08:17:2f:60:91:
f3:f9:d8:56:fe:03:86:eb:2b:96:20:73:c8:4f:0b:
3b:fa:97:34:fd:dd:96:8f:f7:8c:1f:d5:75:f9:de:
83:a6:f1:92:00:fd:b0:0e:e1:f0:7a:27:53:25:55:
7a:16:b6:1d:71:9f:b9:41:17:62:78:56:6f:d0:e7:
68:64:d6:ab:3e:de:0f:98:f8:99:4e:14:00:a1:4d:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BC:AD:CB:48:F4:98:C8:71:29:95:27:4C:63:4B:86:D4:E5:F0:1A
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/D7yty0j0mMhxKZUnTGNLhtTl8Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.192.0/24
91.208.142.0/24
188.214.16.0/21
195.246.242.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:57:28:fc:49:df:26:69:14:f4:ec:e5:08:37:d2:30:9d:32:
77:ab:70:4f:5a:23:0e:1e:7a:ed:ef:21:5c:f3:6b:12:7c:72:
9d:81:68:8c:37:0d:64:15:de:15:2a:2f:9d:06:83:11:17:44:
15:08:8d:4d:03:38:53:d0:b2:2a:ec:50:55:ac:f5:aa:e4:38:
46:cf:b9:2b:22:b3:37:8f:7e:eb:d7:99:58:67:84:6a:2a:58:
d1:ec:82:03:3c:4b:1d:13:98:0b:fe:18:12:c3:2d:c0:07:c8:
4f:ca:90:db:de:2c:bf:ef:20:e1:af:bb:7e:bb:5d:3a:29:5f:
d4:f8:e8:fd:60:08:c0:27:31:47:80:84:20:1f:6c:d8:dc:a4:
eb:7b:af:f0:93:8c:3b:77:7d:fc:c9:23:1d:25:6a:e5:e0:42:
29:42:f5:f8:90:e9:5b:1c:57:2e:60:f3:8f:55:25:ba:4b:26:
d7:12:05:27:30:4f:40:53:09:90:eb:dc:58:38:11:8b:cc:7a:
d7:4b:9a:6e:39:83:d5:29:8a:29:36:32:9c:d7:4c:ac:b1:4d:
17:73:90:47:15:a4:47:15:84:01:e5:63:12:b2:f3:31:f3:0e:
99:2e:63:37:32:b0:17:56:77:68:c2:a4:e9:a9:7a:92:30:5c:
be:a5:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org