Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/dG32dQi1tFHXfoP4r0O2pTZInY0.roa
File: dG32dQi1tFHXfoP4r0O2pTZInY0.roa (raw, json)
Hash identifier: PUJOQFJddwaze/hqJNl3L4WED/IQXfTol9PmDLbqo4w=
Subject key identifier: 74:6D:F6:75:08:B5:B4:51:D7:7E:83:F8:AF:43:B6:A5:36:48:9D:8D
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 018312D6B25FAB15F63174E601016AC314A0
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/dG32dQi1tFHXfoP4r0O2pTZInY0.roa
Signing time: Tue 06 Sep 2022 12:46:43 +0000
ROA not before: Tue 06 Sep 2022 12:46:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49332
IP address blocks: 86.111.64.0/20 maxlen: 21
86.111.84.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:12:d6:b2:5f:ab:15:f6:31:74:e6:01:01:6a:c3:14:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 6 12:46:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=746df67508b5b451d77e83f8af43b6a536489d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:4f:4e:f3:65:8f:9f:df:42:3d:b6:59:93:
bc:d7:28:e6:01:55:12:13:31:fa:b3:a9:a5:2e:23:
bf:9c:fe:1f:bd:0c:67:36:51:b9:38:e9:01:1e:ae:
64:50:fe:6e:30:99:d4:e6:04:a1:8e:25:a3:b2:48:
92:48:6b:14:5d:ff:b3:64:87:92:87:59:e3:b7:54:
9c:18:2b:db:9f:17:6d:c6:c6:5c:29:cd:a4:07:d7:
11:8a:cc:d9:d2:b0:48:1a:f3:2e:fe:93:9e:64:ce:
d6:6f:cc:fc:1f:16:6a:2b:25:6b:a6:f9:85:ca:35:
35:ef:5a:05:6d:a2:6b:69:73:15:00:3b:63:f7:6d:
ef:64:3b:de:6d:12:9e:f2:57:5b:ee:b1:90:41:bb:
f1:cc:ee:f8:70:9a:b4:2a:9a:d7:8f:2b:cd:6b:aa:
60:20:de:49:e4:01:0f:25:09:24:85:da:68:2c:1c:
6f:7d:e6:51:1c:8e:2f:2c:4f:28:3a:6b:9d:2d:68:
8f:6d:be:24:7a:c1:e7:0b:19:e4:74:24:0a:30:69:
8b:20:74:18:72:e6:a2:07:f1:26:4c:d4:a6:39:7f:
28:ba:c6:1d:12:fd:c6:6d:16:d8:69:97:e7:7b:3d:
38:56:6a:e6:43:d9:d7:14:80:42:45:cf:da:71:44:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6D:F6:75:08:B5:B4:51:D7:7E:83:F8:AF:43:B6:A5:36:48:9D:8D
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/dG32dQi1tFHXfoP4r0O2pTZInY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.64.0/20
86.111.84.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:9f:7d:fa:3f:a6:3c:0a:71:31:ae:9a:96:d9:8f:e0:96:a7:
e0:5d:fe:62:90:69:a8:d5:c2:1a:96:4e:f2:9c:88:9f:9e:f4:
fc:e7:44:c3:97:53:0e:30:dc:8d:82:e4:64:bb:2a:3d:1f:38:
ab:8b:c6:2c:cc:33:77:bd:f1:7e:c6:54:f6:93:be:a6:cb:69:
39:8a:41:89:30:3a:71:69:b6:4f:95:70:08:2f:e8:3e:a3:ec:
24:6a:5d:fd:b3:fc:e6:a3:7b:96:7b:29:f8:d2:e2:e7:0a:56:
5d:83:1a:69:6d:cf:f6:c0:c1:8a:21:56:41:f7:0a:36:e2:6b:
b3:d9:b6:a9:ff:c8:e4:54:d4:a2:1c:88:4f:4d:c4:e8:0d:75:
76:ac:55:f4:59:98:f5:60:1d:1c:9c:2f:a3:b5:b2:03:51:1c:
1e:ff:bb:74:6d:14:46:ff:5f:0b:49:2a:18:10:16:a6:69:51:
ee:79:d4:11:6d:83:a9:b8:61:45:c9:33:e3:56:2b:12:69:ae:
b8:92:b4:74:3f:f2:76:8d:32:0d:11:d4:ef:40:1a:44:a8:d8:
b4:a0:b0:d2:71:94:35:b1:44:ad:1f:15:81:88:bd:08:8d:33:
e9:38:be:27:b8:ed:c5:e5:b8:81:6f:f4:98:97:73:3a:ad:4c:
bb:b0:2d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org