Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/flpk7bzXxAM4GMfMaQ5Wnx67wLE.roa
File: flpk7bzXxAM4GMfMaQ5Wnx67wLE.roa (raw, json)
Hash identifier: IMflb5lKGRd1nE2MrwNFJww5himXZpqjViExWbqh/U8=
Subject key identifier: 7E:5A:64:ED:BC:D7:C4:03:38:18:C7:CC:69:0E:56:9F:1E:BB:C0:B1
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 0183D66582550FD11E06CA6DA49D9209068B
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/flpk7bzXxAM4GMfMaQ5Wnx67wLE.roa
Signing time: Fri 14 Oct 2022 12:08:40 +0000
ROA not before: Fri 14 Oct 2022 12:08:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49332
IP address blocks: 188.190.32.0/19 maxlen: 20
5.57.64.0/21 maxlen: 22
176.32.0.0/21 maxlen: 22
86.111.64.0/20 maxlen: 21
91.212.203.0/24 maxlen: 24
86.111.84.0/23 maxlen: 24
80.243.144.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:65:82:55:0f:d1:1e:06:ca:6d:a4:9d:92:09:06:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Oct 14 12:08:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e5a64edbcd7c4033818c7cc690e569f1ebbc0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:30:5e:28:85:ef:31:88:53:08:3c:1d:ad:
a6:e8:37:f7:c5:4f:ae:88:7b:a0:9a:a7:f1:64:7d:
5d:a6:0d:b7:b2:55:73:01:d2:1e:28:3d:8d:a4:a0:
96:a6:0a:e6:23:fc:4d:af:02:0f:54:38:fd:78:16:
2f:18:9e:e2:a3:d5:5b:d9:c1:da:95:af:ae:c3:84:
74:26:36:8c:02:fc:1b:8f:11:dc:2f:97:e1:8e:4c:
b1:6d:45:97:2a:34:bb:e7:8e:cc:e3:47:9d:2f:21:
4f:8f:d2:3a:ce:8c:96:f0:d6:f3:72:46:e0:82:67:
5d:0b:d4:6e:28:69:cb:b3:6d:af:11:a9:ad:b6:21:
98:ba:09:8e:79:e2:0b:9e:8f:d6:ed:65:95:68:a7:
0d:d5:3c:ea:1d:a0:e0:5e:aa:b8:70:f4:6f:75:29:
46:8d:4d:56:b4:1f:3a:ac:d2:8c:92:db:be:52:66:
2f:d6:0b:5f:a4:e3:be:36:18:a1:0b:5a:ef:f2:9b:
d5:9f:f8:33:df:f5:01:35:d5:d5:16:b5:3e:50:c8:
e0:93:bb:3b:d9:45:0f:e4:8e:e9:09:2b:1f:88:51:
db:17:49:5c:39:fc:c0:48:24:38:eb:de:26:51:ba:
f6:3d:4a:19:a6:9d:e5:1f:b1:3a:a1:9d:ab:9c:e6:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:64:ED:BC:D7:C4:03:38:18:C7:CC:69:0E:56:9F:1E:BB:C0:B1
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/flpk7bzXxAM4GMfMaQ5Wnx67wLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.64.0/21
80.243.144.0/20
86.111.64.0/20
86.111.84.0/23
91.212.203.0/24
176.32.0.0/21
188.190.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:2b:0c:1e:f1:b8:7f:cb:e3:cc:d2:1d:b3:82:f9:7c:c6:b4:
f3:ff:e0:72:2e:c2:c2:c3:05:c4:bc:6f:4b:63:61:b4:69:f9:
9c:19:88:b3:91:5a:c6:d1:ff:d7:2a:ce:9a:1c:40:fd:2b:48:
46:87:08:f5:8f:ca:3e:0c:f0:a9:e9:7b:c8:7d:45:3e:d0:43:
30:ba:81:45:a2:dc:ce:f5:3d:7b:2d:5c:5d:42:cc:5a:5c:65:
a8:e3:65:13:ae:e7:4c:5b:96:dc:a5:e4:7c:a6:4f:e3:b4:e5:
5d:ea:32:52:81:f0:f1:bd:ee:6e:19:7b:ad:01:b8:d8:a3:b6:
79:a7:b7:ed:6a:32:a0:c6:a2:24:a3:4f:89:91:8a:d9:5d:08:
0a:61:57:a5:16:ab:3b:0d:ca:7b:2b:86:d9:c1:55:7b:d7:3f:
28:f3:e9:ba:50:c9:b1:ae:5b:20:db:a1:dc:58:40:99:4f:48:
91:47:63:06:84:1f:5c:3d:c7:a3:81:76:d7:f9:81:33:b2:83:
67:56:48:d6:79:04:5d:9b:6b:9e:4f:b3:99:46:26:27:da:8b:
e9:b6:53:b7:e3:69:eb:58:9a:88:11:f7:12:ec:cc:b2:57:f4:
69:76:09:9f:da:89:60:ce:e1:ef:be:4c:bc:d2:85:f6:1a:47:
6d:32:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org