Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/5-F3vNsljWEPn0dmfvFURFRxXIU.roa
File: 5-F3vNsljWEPn0dmfvFURFRxXIU.roa (raw, json)
Hash identifier: 96XL/RrhvnBS1T5QMb+le+oLa+1SqO7T2wC5EHfOOHM=
Subject key identifier: E7:E1:77:BC:DB:25:8D:61:0F:9F:47:66:7E:F1:54:44:54:71:5C:85
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 08722801
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/5-F3vNsljWEPn0dmfvFURFRxXIU.roa
Signing time: Sat 01 Jan 2022 00:53:29 +0000
ROA not before: Sat 01 Jan 2022 00:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47205
IP address blocks: 31.193.192.0/21 maxlen: 24
92.61.32.0/20 maxlen: 32
195.12.186.0/24 maxlen: 24
185.3.228.0/22 maxlen: 24
2a02:118::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141699073 (0x8722801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 1 00:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7e177bcdb258d610f9f47667ef1544454715c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:ff:4b:48:0d:2b:d1:4c:a8:97:82:5e:1f:
e7:95:06:8a:b9:0f:ea:04:7e:45:fc:e3:e0:2d:84:
22:b0:a0:f9:6f:9c:06:8d:3f:e4:5a:cf:70:c2:27:
f3:06:85:5f:41:47:20:81:4c:71:cf:ca:75:e7:f5:
c4:4d:8c:7a:54:5c:c8:f2:4a:e5:a3:0e:41:df:45:
10:8e:89:b1:56:96:b9:54:30:2c:be:a1:37:06:94:
bd:b4:a1:e7:1e:5a:62:49:c5:e1:ac:b9:86:f1:5c:
c3:3d:cc:8b:d8:ae:73:b3:fe:14:a7:a7:07:56:47:
6a:bd:90:a4:ff:a0:18:92:84:88:e7:af:5c:4f:73:
a3:f3:3c:7c:ca:12:9f:b8:2c:e6:00:c1:c4:f3:67:
b4:47:9d:24:fa:bc:03:6a:a1:55:77:51:d1:85:15:
ee:63:d6:57:5e:c3:d2:01:ac:82:63:4c:9c:09:f5:
bd:4c:06:6a:d8:74:cc:bd:ef:ec:ca:0c:e7:0f:ba:
87:c7:c7:61:35:fd:8c:a9:82:89:f8:0f:19:ca:ff:
e1:0a:3f:9e:92:9c:68:9b:1b:ee:72:06:9e:7f:8f:
e9:1a:cf:4c:55:f1:33:55:1a:b3:41:93:93:87:0e:
87:18:34:a0:3f:38:fb:a5:8b:48:c4:35:3d:1f:bd:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:77:BC:DB:25:8D:61:0F:9F:47:66:7E:F1:54:44:54:71:5C:85
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/5-F3vNsljWEPn0dmfvFURFRxXIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.192.0/21
92.61.32.0/20
185.3.228.0/22
195.12.186.0/24
IPv6:
2a02:118::/32
Signature Algorithm: sha256WithRSAEncryption
0c:93:53:24:4d:72:e5:18:ea:dc:cb:b6:f7:d7:af:85:04:db:
e4:c2:75:f2:67:6c:03:24:36:0f:1f:7b:26:d8:7c:d7:c3:76:
f5:c4:1f:92:05:1b:60:fd:4b:07:e1:27:41:e3:c7:ec:1c:7e:
20:aa:19:77:92:41:fc:10:6a:de:9b:52:99:a0:d2:3c:39:6f:
0e:bc:cd:af:1d:e7:eb:38:e1:aa:34:5e:b9:a5:46:dc:3e:79:
76:74:aa:29:cd:90:b6:e1:ba:69:4a:69:a6:ef:b0:50:66:fc:
d9:3e:35:c3:f8:ad:2f:dc:85:d7:3a:9d:54:6c:6b:4e:f4:1e:
43:b3:d0:cd:6a:30:3e:85:ad:54:2b:d9:85:6b:be:15:dd:5c:
18:0e:96:c8:86:0c:97:57:5d:86:e2:a4:b7:a5:6e:de:45:d0:
c0:29:fd:a3:9e:59:8f:ea:25:66:29:cb:d7:39:51:1a:db:a8:
11:48:15:23:c9:03:95:e2:a6:6a:90:04:c5:d0:0d:6d:34:98:
62:7f:37:f4:c2:ab:f8:34:92:07:2d:34:71:a5:af:4b:37:45:
1f:8f:be:f1:dc:b9:92:99:85:f4:f1:98:ab:2d:20:e3:6b:34:
78:fb:8f:d9:1d:46:ae:4d:61:ea:af:ac:a3:43:e8:22:b9:6d:
59:ae:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:14 2023 by rpki-client on console-fra.rpki-client.org