Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/afgk8bNlbgNe_jrZDpc4_rkiap8.roa
File: afgk8bNlbgNe_jrZDpc4_rkiap8.roa (raw, json)
Hash identifier: ueiZObyvV/vFg2McMWuDrbijgBAP8ozOwiJxjkFuk7U=
Subject key identifier: 69:F8:24:F1:B3:65:6E:03:5E:FE:3A:D9:0E:97:38:FE:B9:22:6A:9F
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10B9EE6B
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/afgk8bNlbgNe_jrZDpc4_rkiap8.roa
Signing time: Sat 01 Jan 2022 13:02:17 +0000
ROA not before: Sat 01 Jan 2022 13:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60713
IP address blocks: 213.199.246.0/23 maxlen: 23
82.160.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280620651 (0x10b9ee6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69f824f1b3656e035efe3ad90e9738feb9226a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:da:04:61:66:e7:09:5a:81:52:ed:da:64:
f8:cf:5d:22:58:29:f1:9c:26:9f:ab:5e:8c:ed:89:
c3:ba:f2:53:e5:a3:92:99:e4:b8:ad:ec:3f:84:00:
8e:19:12:ee:5d:a8:3c:12:bb:35:18:34:f4:71:c8:
cd:ca:71:8f:18:e2:e3:48:51:ff:7c:59:a0:d0:3d:
4f:ad:2c:79:cc:9a:9f:15:37:36:72:31:32:aa:d7:
93:03:39:f6:98:10:c5:0a:e7:88:4a:43:dc:7d:86:
f7:06:c2:b4:01:1a:76:e2:84:aa:a3:2c:b7:f7:46:
ae:33:50:e9:e6:e2:8a:83:cd:25:cf:28:61:24:b6:
46:c1:46:19:b8:ef:12:b4:12:ab:e4:81:6f:12:98:
16:f8:17:4e:82:2e:2c:87:78:78:39:1d:52:46:f3:
2c:36:06:97:3d:45:ee:3f:46:78:ed:e9:3d:9c:80:
9f:1f:28:c4:13:5d:ed:17:8a:53:09:34:f8:b0:8c:
a5:e5:78:d5:97:20:8a:99:13:72:b3:71:07:d6:0d:
75:f8:25:fb:69:1f:56:56:a0:fe:cb:f4:75:b9:67:
4c:ea:dc:34:b0:98:a4:0f:c2:ad:1b:f4:17:32:93:
d5:6b:c7:52:6f:fb:26:67:1b:1a:28:a5:ae:1e:1d:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F8:24:F1:B3:65:6E:03:5E:FE:3A:D9:0E:97:38:FE:B9:22:6A:9F
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/afgk8bNlbgNe_jrZDpc4_rkiap8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.50.0/24
213.199.246.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:5e:dd:26:24:83:f4:77:e2:ef:7e:d5:31:1f:35:44:a9:4a:
ca:82:f0:70:3d:d6:87:70:68:1a:fc:3d:ae:0b:85:b8:36:84:
42:b4:a0:6a:1e:95:b4:4a:b2:0b:53:93:2a:6f:00:f3:92:24:
96:87:87:3c:07:d0:f8:91:50:78:66:42:f3:28:67:a4:64:8e:
48:67:3b:b5:fd:82:3f:5c:fb:0a:77:37:d9:f3:96:29:74:8f:
58:1a:fe:af:b1:02:66:5f:59:53:2c:d3:a8:b0:9e:60:c9:2c:
ab:17:c3:7c:5f:37:4a:ec:41:ec:94:93:91:c1:96:8f:a4:9f:
20:57:67:cc:54:1e:b1:8e:3e:7a:7a:1d:d8:9c:8e:c8:ce:ed:
99:13:4b:16:3c:e0:90:21:ab:5b:c4:b3:3e:b7:a3:d0:5d:81:
17:d2:63:45:ef:78:40:43:56:1d:6e:79:9b:9b:61:4b:a1:1b:
e5:1a:3c:08:00:58:3f:a3:a4:c1:b3:f7:9c:f1:33:9a:e4:9b:
cd:2c:67:e8:3f:4d:ae:b4:bf:e0:a2:dd:84:67:83:2e:72:67:
9e:9d:2e:be:98:f1:c3:9f:1f:22:54:7e:40:04:65:06:5d:a7:
a4:d1:b9:0f:df:00:96:c2:aa:5f:0b:c2:11:a1:0a:c3:3d:de:
79:d5:a7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:15 2023 by rpki-client on console-fra.rpki-client.org