Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FFpDRtQkO89h7uRTopbzW77iYX4.roa
File: FFpDRtQkO89h7uRTopbzW77iYX4.roa (raw, json)
Hash identifier: Xc5MeShzk+tu0AahLH2emu+qYlsRgg8PX5hbWKpU6No=
Subject key identifier: 14:5A:43:46:D4:24:3B:CF:61:EE:E4:53:A2:96:F3:5B:BE:E2:61:7E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AD01E8B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FFpDRtQkO89h7uRTopbzW77iYX4.roa
Signing time: Sat 01 Jan 2022 03:02:40 +0000
ROA not before: Sat 01 Jan 2022 03:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212369
IP address blocks: 193.35.154.0/24 maxlen: 24
185.88.174.0/24 maxlen: 24
193.223.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181411467 (0xad01e8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=145a4346d4243bcf61eee453a296f35bbee2617e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:07:83:86:07:99:b6:b1:0b:f4:ad:b6:98:
c2:d1:2e:54:c2:a1:b8:7b:43:24:4a:f0:a2:2a:83:
3f:2b:4d:e8:54:7e:2a:cd:2c:80:ef:3b:57:b3:7b:
86:87:e7:70:b6:f3:e0:ed:db:69:be:98:45:7a:2f:
5d:07:27:27:78:e6:62:dd:88:d5:ae:95:00:e2:60:
72:ec:39:1b:7b:3e:39:10:cd:5c:72:fa:86:74:5b:
eb:5b:1d:44:c2:05:1a:0b:33:46:2b:6e:4a:1e:44:
d3:b7:3e:0f:95:08:c1:ec:06:38:3f:44:c1:a5:ef:
7b:f4:66:e1:7c:a7:b6:c2:f7:53:cb:24:72:ef:51:
b9:7e:9b:8f:db:e0:a0:9d:24:f5:18:54:48:da:99:
20:67:09:c1:d3:e7:cd:0f:81:0c:41:2c:3c:27:20:
89:52:71:ad:17:76:16:70:0b:0b:b7:80:98:6b:e6:
18:8d:ad:a3:58:bb:0d:11:cd:d8:d6:87:e9:dc:db:
fa:5f:ab:aa:f2:31:cc:a2:ba:85:81:20:4b:1f:77:
a6:67:94:a1:31:a5:53:67:29:92:7e:8c:39:e7:0f:
c6:52:0e:15:2a:90:a4:a7:56:8d:d3:77:b9:ac:8d:
b5:d7:9c:20:94:c0:52:c8:b5:9d:2e:79:b0:86:bc:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5A:43:46:D4:24:3B:CF:61:EE:E4:53:A2:96:F3:5B:BE:E2:61:7E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/FFpDRtQkO89h7uRTopbzW77iYX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.174.0/24
193.35.154.0/24
193.223.107.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fb:d2:5a:5c:d9:2d:71:7e:41:69:45:1c:47:4b:49:6c:23:
4e:af:3f:53:a3:e8:ed:ae:47:c1:80:fe:da:7b:71:79:68:a9:
99:35:c8:d7:9b:86:57:11:66:8f:cb:62:8c:56:42:2c:ba:06:
fc:55:49:8f:8e:4d:c1:bf:9e:de:60:47:ed:dd:d0:7b:64:60:
b5:5d:9e:ef:83:62:25:85:2b:00:e3:37:83:7d:d3:51:d4:a1:
f3:a8:5c:90:e9:8e:73:98:0d:20:4e:d5:7f:d9:b9:da:78:0d:
15:8f:7c:13:e1:0c:9c:90:83:9c:85:b9:6c:9f:b3:1f:08:92:
ab:ec:37:ce:2f:42:60:16:4c:f2:ad:33:35:86:06:ad:9a:7e:
47:cf:0d:ce:c3:88:6c:5f:ed:9a:95:12:6c:16:54:47:2c:e0:
8a:89:14:8e:ea:a3:53:cb:3d:19:6e:bd:7a:d9:55:0a:7a:af:
da:df:23:6e:30:a4:99:66:f4:98:34:49:a7:09:7f:f3:d0:3e:
70:75:74:f6:2b:01:3e:84:df:51:96:b0:e9:30:b7:87:47:bb:
e1:e9:48:e4:d3:33:36:a4:9d:4c:f2:1d:82:db:ef:c9:f6:05:
f7:36:5a:26:1c:95:d3:9f:ab:66:be:77:92:60:cc:21:8e:07:
1c:f8:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org