Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/tZMcpewXw3_nQr9G9gS3lrpHtgk.roa
File: tZMcpewXw3_nQr9G9gS3lrpHtgk.roa (raw, json)
Hash identifier: eu1/0fIGGVZCPAupWbQbul2UZvGsfsf2BzTAuGwVpLs=
Subject key identifier: B5:93:1C:A5:EC:17:C3:7F:E7:42:BF:46:F6:04:B7:96:BA:47:B6:09
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01856B8A28A2697B6DF35BC59E06A0FA2440
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/tZMcpewXw3_nQr9G9gS3lrpHtgk.roa
Signing time: Sun 01 Jan 2023 04:14:54 +0000
ROA not before: Sun 01 Jan 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43120
IP address blocks: 95.215.216.0/22 maxlen: 23
176.39.32.0/23 maxlen: 24
86.111.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:28:a2:69:7b:6d:f3:5b:c5:9e:06:a0:fa:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5931ca5ec17c37fe742bf46f604b796ba47b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:9f:0c:0a:dc:09:69:f9:b7:0b:4f:27:c5:
c0:c0:4c:b2:a3:ba:99:78:4f:f3:46:15:3a:ea:b2:
72:8b:f6:f9:90:8f:50:d7:9d:20:ff:72:a0:32:93:
9c:46:5a:03:ee:99:b7:7b:6e:da:04:e9:b2:7b:94:
a7:0a:bf:96:1c:3a:90:a0:f8:8c:88:fe:b1:ef:73:
16:a1:4c:9c:bf:87:32:92:5f:ff:2d:39:1f:50:97:
ba:2a:71:64:8d:c9:41:5c:a8:5c:41:48:d1:ce:7d:
91:86:4a:4a:17:77:6d:a4:df:73:88:59:cf:f5:4d:
a1:8e:38:d9:9d:06:76:04:1b:16:be:8a:41:04:40:
1f:1b:26:d9:8b:fe:80:8e:52:53:71:ef:54:89:a1:
a9:58:68:88:39:28:21:47:af:0c:7f:af:be:8f:a7:
bf:35:15:fd:78:9a:36:e3:a9:7a:ee:b1:77:12:60:
24:85:99:c0:88:3f:7b:d4:57:a8:5f:f8:3e:34:f2:
8d:c1:bd:22:3d:8d:3e:f1:27:b1:42:ba:5f:dd:e8:
40:b3:39:ca:a9:26:19:4f:8c:fd:27:4c:0c:89:f4:
94:67:79:e5:23:5e:6e:57:02:0c:2f:f0:81:6d:58:
d5:15:4d:63:76:66:ba:c8:56:f0:c4:b2:59:78:0b:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:93:1C:A5:EC:17:C3:7F:E7:42:BF:46:F6:04:B7:96:BA:47:B6:09
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/tZMcpewXw3_nQr9G9gS3lrpHtgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.87.0/24
95.215.216.0/22
176.39.32.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:66:ce:66:e8:09:64:46:94:db:ac:63:3c:06:71:96:37:39:
1d:67:30:04:94:6b:b1:7a:4e:61:bd:cd:55:30:da:5b:a5:44:
b7:fb:1f:94:b7:ed:c8:6e:22:83:d6:2f:9f:e9:9e:f8:54:07:
ac:c8:2e:71:98:e5:b6:8f:00:c4:35:9b:66:fc:2d:07:e5:50:
c5:40:51:5f:3c:35:15:b1:c7:08:d9:40:45:9c:ed:c2:2f:a2:
6e:a7:d0:48:c5:cf:30:46:1b:66:6a:8d:f7:2a:4b:a1:3e:b0:
a7:24:08:a7:c1:56:d8:64:a4:db:54:dd:58:49:c8:26:97:f5:
59:ca:eb:8d:f6:26:5b:50:0f:51:ca:42:01:0c:c2:e1:6b:7e:
fb:0d:a0:11:2e:13:92:01:73:38:48:a8:47:25:c5:91:31:4e:
0d:ae:ba:91:5e:1f:77:9b:d4:44:7f:52:7a:be:26:9a:a2:f8:
6b:8a:56:6a:ae:23:51:30:0b:4d:13:52:fb:f7:e9:45:3c:73:
78:27:fd:d5:db:b8:06:d1:13:21:98:9e:e2:2a:a7:b9:1d:a7:
55:7e:b0:b3:5a:85:43:1e:44:26:4e:b6:df:5c:55:43:62:c1:
a7:5b:2f:4b:5f:cd:cc:12:93:19:7d:76:09:a0:8f:9d:90:c7:
94:9f:9f:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:32 2025 by rpki-client