Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/APbY_yBEoCuTiWfNFJ0c2qdtAGo.roa
File: APbY_yBEoCuTiWfNFJ0c2qdtAGo.roa (raw, json)
Hash identifier: DP2A3qMHLbPgfMmMA9qZLJAKlfZ+cseD6cWJG2pjUlM=
Subject key identifier: 00:F6:D8:FF:20:44:A0:2B:93:89:67:CD:14:9D:1C:DA:A7:6D:00:6A
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 03DEC157
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/APbY_yBEoCuTiWfNFJ0c2qdtAGo.roa
Signing time: Sat 01 Jan 2022 11:58:08 +0000
ROA not before: Sat 01 Jan 2022 11:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16223
IP address blocks: 185.53.79.0/24 maxlen: 24
5.58.0.0/16 maxlen: 23
217.196.160.0/20 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64930135 (0x3dec157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 11:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00f6d8ff2044a02b938967cd149d1cdaa76d006a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:d2:7d:3b:c8:74:7f:93:ab:6b:18:5b:26:
db:d0:98:3a:f7:96:61:41:ba:ee:86:66:c5:2d:03:
a0:60:cb:22:5c:45:1d:37:40:57:cf:68:ce:b5:5f:
81:60:75:85:3d:6a:d7:53:41:d7:46:8a:a3:cf:b2:
c8:a7:57:0e:6d:b6:4c:c1:13:8f:a3:15:c5:73:c6:
d8:89:ec:33:82:fa:43:2d:69:c4:4f:90:c4:32:47:
a9:1d:3e:01:fe:2e:28:51:02:21:10:c9:ef:7b:6e:
21:77:6c:57:4e:3d:cd:ff:2b:2b:eb:59:b3:93:39:
a9:6c:75:d3:3e:ce:37:42:1f:6d:84:70:75:34:82:
dc:b2:59:1e:a6:1c:67:e1:04:a5:f6:01:e5:9d:5b:
42:3c:cd:7d:72:c9:7c:a9:3b:f4:b4:47:87:45:e6:
a1:e6:28:19:9a:01:dc:d9:24:a5:ae:24:42:a7:7c:
0b:56:b2:4e:52:43:44:b7:3b:c1:7e:1f:c5:0f:d0:
89:3c:aa:78:39:12:0a:57:8d:a2:1f:d2:ef:e5:85:
03:11:64:31:6a:3a:01:6a:02:69:5f:29:1b:1c:20:
d2:38:2a:87:e3:ef:d7:51:a9:68:bf:23:d4:a5:65:
bb:2a:20:5d:f6:12:1b:7a:79:37:d7:cf:af:54:77:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F6:D8:FF:20:44:A0:2B:93:89:67:CD:14:9D:1C:DA:A7:6D:00:6A
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/APbY_yBEoCuTiWfNFJ0c2qdtAGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.58.0.0/16
185.53.79.0/24
217.196.160.0/20
Signature Algorithm: sha256WithRSAEncryption
40:00:f3:fc:db:0a:97:92:ac:96:e1:ec:33:60:b4:9f:6c:80:
e3:7d:84:16:b0:dd:f4:8e:2e:38:37:b0:bf:18:0d:39:18:83:
da:cd:e5:a3:bf:ff:8a:01:ea:ed:6b:14:03:56:72:70:a5:63:
0a:52:6c:5d:2b:5f:c5:92:72:f7:70:17:7e:03:a0:7a:52:66:
76:a4:1d:74:3f:13:4c:54:4d:6a:98:e6:44:25:2f:be:65:19:
e2:31:0d:8a:7b:71:f7:b8:72:92:ba:ba:f0:67:69:a4:ab:83:
f0:91:39:4d:19:e2:0e:73:27:b2:d7:14:71:9c:b7:11:a1:93:
88:d0:6a:cf:dc:7e:24:87:48:ff:7a:63:25:d1:3c:10:7d:05:
ff:6f:07:dc:f1:6f:15:9e:a9:61:3f:7e:14:be:a9:f6:36:ad:
e1:cd:3e:7d:47:91:dc:32:93:72:c7:36:e8:66:7a:46:a1:3b:
1a:70:70:0f:01:6f:58:69:c9:63:2a:11:c7:78:49:58:dc:fc:
7b:1d:44:28:8a:f9:9d:5d:7f:73:55:3a:96:9f:70:8d:45:84:
95:cf:90:0d:fe:08:08:c2:e1:85:55:3a:b8:6e:8e:0b:5f:f3:
4f:b0:6e:a7:2e:48:c1:47:f9:e0:23:16:1d:24:5b:e0:4a:66:
26:bb:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:03 2023 by rpki-client on console-fra.rpki-client.org