Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/FNvfWAWSTIOllz2WTn7tXxrUzR8.roa
File: FNvfWAWSTIOllz2WTn7tXxrUzR8.roa (raw, json)
Hash identifier: UQnKW7m3vyZwqm3BPzaeK3RzzKIYBxIekiWiUyXx+Xo=
Subject key identifier: 14:DB:DF:58:05:92:4C:83:A5:97:3D:96:4E:7E:ED:5F:1A:D4:CD:1F
Certificate issuer: /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial: 0399F960
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/FNvfWAWSTIOllz2WTn7tXxrUzR8.roa
Signing time: Sat 01 Jan 2022 15:03:28 +0000
ROA not before: Sat 01 Jan 2022 15:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43420
IP address blocks: 109.196.224.0/20 maxlen: 20
77.87.216.0/21 maxlen: 21
193.46.68.0/24 maxlen: 24
85.202.32.0/20 maxlen: 20
185.129.76.0/22 maxlen: 22
109.95.168.0/21 maxlen: 21
2a03:9c60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60422496 (0x399f960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Validity
Not Before: Jan 1 15:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14dbdf5805924c83a5973d964e7eed5f1ad4cd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:d4:46:a5:3c:d0:12:95:fd:07:aa:9a:18:
ec:e9:e5:1a:69:99:0e:3c:81:12:30:88:86:ab:76:
bb:45:3f:a6:78:91:cb:5e:39:f4:5f:dc:a7:9e:97:
6c:68:cf:58:7a:60:e9:d3:72:58:7e:91:7a:7b:76:
e7:e8:bf:f7:d4:db:53:cd:22:5c:3c:88:f4:4e:87:
70:d4:8f:f1:45:6f:77:c8:41:be:19:c1:3e:bf:10:
d8:9b:cb:05:f0:ed:8f:ad:eb:58:68:61:d3:af:08:
72:1f:29:00:d9:f2:24:9f:6b:71:82:fc:79:d1:6a:
39:3f:bb:2c:81:9e:87:34:d6:15:09:34:61:46:3e:
cc:1a:81:44:e9:1f:38:26:c1:cd:fe:93:8c:33:1f:
aa:b4:10:10:72:43:4a:73:a8:52:b0:96:49:e4:46:
25:a9:e8:d2:51:29:4e:3e:b8:08:92:ff:ea:13:9c:
6a:64:03:da:4d:b0:08:60:0d:68:1b:82:94:12:27:
30:3b:f5:7d:8e:4b:39:e1:3c:e9:cd:ef:2f:b7:f8:
9e:ff:49:10:3c:10:28:cd:a9:a5:d0:a1:3b:da:1b:
f6:ef:14:e2:49:f2:66:68:cc:56:fc:02:6c:de:f6:
1e:de:4a:b6:cb:ff:fc:f8:6b:83:b1:62:ba:fb:b9:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:DF:58:05:92:4C:83:A5:97:3D:96:4E:7E:ED:5F:1A:D4:CD:1F
X509v3 Authority Key Identifier:
keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/FNvfWAWSTIOllz2WTn7tXxrUzR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.216.0/21
85.202.32.0/20
109.95.168.0/21
109.196.224.0/20
185.129.76.0/22
193.46.68.0/24
IPv6:
2a03:9c60::/32
Signature Algorithm: sha256WithRSAEncryption
9f:a4:01:12:6f:a2:ec:39:90:ad:e7:82:80:a0:c7:c6:24:52:
55:66:f3:e6:38:fe:82:14:e7:eb:b0:74:de:b8:58:25:f6:34:
b6:04:ec:fb:38:df:c2:02:54:37:81:49:e3:31:2a:a2:4b:0c:
5a:29:70:d9:25:fb:2a:ed:a5:85:c6:5e:aa:f8:55:5e:e7:d6:
76:8d:35:99:36:76:cd:fe:47:78:67:19:ec:52:7a:8e:a9:cc:
2e:87:39:67:b1:42:62:34:38:3f:fb:07:ef:09:6a:28:55:e7:
90:14:d7:ac:58:24:78:9e:9c:b4:80:25:23:9b:73:f3:33:69:
35:3b:9a:e1:3f:33:40:25:ea:04:2f:a4:33:f1:d6:64:ee:de:
64:3a:f1:ea:77:3a:d8:5f:0b:6f:ac:b6:ca:28:6e:15:f6:ed:
e7:8e:1b:f1:e7:06:a1:f4:1a:36:a1:ee:82:70:70:a7:e2:94:
95:3d:56:e1:5c:2f:41:00:fb:e8:40:bd:7f:37:c4:b0:f7:1d:
b2:4b:fc:03:ed:77:cb:cd:ea:c3:d2:9f:3f:37:14:7f:6b:65:
f0:57:cd:8e:2f:d0:27:93:1a:34:0e:06:8d:6e:ba:17:bf:05:
3e:4c:2b:ab:37:58:18:40:1b:10:f2:b4:87:67:65:59:c5:d3:
9e:7a:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:23 2023 by rpki-client on console-fra.rpki-client.org