Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/feo3_9ke5JfNMs2Mt6GP1TWShOU.roa
File: feo3_9ke5JfNMs2Mt6GP1TWShOU.roa (raw, json)
Hash identifier: OfJF6fQKWvsvvC4Zut5mZiypwPuhMzhqPic9STb5Ets=
Subject key identifier: 7D:EA:37:FF:D9:1E:E4:97:CD:32:CD:8C:B7:A1:8F:D5:35:92:84:E5
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01821ABF56958182322B56D96E813B140E4C
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/feo3_9ke5JfNMs2Mt6GP1TWShOU.roa
Signing time: Wed 20 Jul 2022 08:35:23 +0000
ROA not before: Wed 20 Jul 2022 08:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 194.107.160.0/24 maxlen: 24
194.107.162.0/24 maxlen: 24
194.107.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:bf:56:95:81:82:32:2b:56:d9:6e:81:3b:14:0e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jul 20 08:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dea37ffd91ee497cd32cd8cb7a18fd5359284e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:00:22:08:a1:a7:af:3d:89:d2:ff:6d:33:4c:
2c:ee:77:a5:52:eb:4c:58:6e:0e:01:27:0f:e0:0b:
72:0b:e2:d2:52:5d:a9:26:5e:58:eb:68:ad:cd:dd:
43:5b:7c:8f:ca:64:df:ff:ff:13:f5:0e:a1:3b:23:
68:27:09:a4:61:58:60:8f:f5:dd:92:87:8b:cc:47:
eb:24:56:ba:8a:49:83:61:88:11:5a:bf:1e:65:32:
2e:b8:0a:9c:37:10:4b:ea:13:0b:fb:4b:e4:3f:5d:
b7:bb:e7:be:29:f4:ee:ce:f9:a5:ff:6c:74:4d:a1:
03:a6:5b:59:9d:90:0d:95:97:ab:94:19:97:f2:a5:
d3:46:f9:17:44:90:26:a6:9a:f4:aa:c9:23:b9:2e:
83:e4:c5:64:a5:04:97:79:a9:d3:32:08:8f:f8:76:
17:cf:d1:f7:3c:38:8a:f8:36:6e:0f:1b:5b:ce:bf:
42:79:67:62:37:3e:ec:45:5a:8b:8c:15:2a:f2:ef:
aa:9f:67:14:60:1b:80:be:e2:b4:4a:db:9d:1b:d6:
bd:dd:f4:41:29:63:b6:52:b5:52:54:7b:95:df:54:
d0:09:28:81:af:87:b8:46:4c:96:1f:c7:6e:f8:22:
aa:54:09:e4:95:40:94:d1:d8:84:cd:04:11:38:d6:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EA:37:FF:D9:1E:E4:97:CD:32:CD:8C:B7:A1:8F:D5:35:92:84:E5
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/feo3_9ke5JfNMs2Mt6GP1TWShOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.160.0-194.107.162.255
Signature Algorithm: sha256WithRSAEncryption
64:67:0d:69:52:a3:a8:5c:09:9e:3f:dd:9c:86:35:56:d5:29:
3c:b7:a1:1f:bf:ef:f7:1e:40:f2:78:96:57:2d:1e:27:8b:25:
02:8f:af:6d:a1:fc:93:4d:63:72:3b:01:aa:6f:14:87:35:a4:
3c:0d:3d:1b:75:28:48:d9:c9:32:3c:ef:a9:f2:a7:b2:9f:5d:
8a:eb:ee:44:71:38:ec:e5:92:dc:f2:7f:32:38:b0:0a:3e:67:
b4:48:90:ab:c2:cf:7a:84:f2:1a:f2:01:2c:c4:65:6e:e3:83:
45:9c:16:ae:2c:a3:f6:f2:d7:08:35:f2:0e:ad:20:81:d4:a3:
5c:63:31:73:62:fd:32:da:84:96:d5:c2:41:36:9d:17:39:ef:
ac:59:e1:90:36:41:26:49:7d:8b:ab:87:4d:ff:d9:18:0b:df:
99:62:45:b8:6e:2a:b1:bc:5b:16:24:2d:43:c9:16:ee:84:9b:
7d:76:66:48:6c:8d:b9:01:d2:c2:45:00:79:6d:9f:59:60:b4:
9b:a7:30:47:17:7e:c6:00:c1:0a:11:65:ef:cb:e3:68:dc:c3:
a5:41:77:87:33:67:b8:b6:18:03:f2:ec:dc:36:04:79:9a:60:
f9:9f:eb:7e:21:9b:88:f3:9b:9f:1c:2f:eb:fb:5d:40:6e:3f:
79:fa:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:50 2023 by rpki-client on console-ams.rpki-client.org