Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/1-k7wkRrTtHT9RPGwQNZNuFERjo4.roa
File: 1-k7wkRrTtHT9RPGwQNZNuFERjo4.roa (raw, json)
Hash identifier: +d1BkeLP5lHWMxHW/7ilx52lHwqNbWTNIV0gepXDElo=
Subject key identifier: FA:4E:F0:91:1A:D3:B4:74:FD:44:F1:B0:40:D6:4D:B8:51:11:8E:8E
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0185533EC8EAF63971333E06D6E6489047D0
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/1-k7wkRrTtHT9RPGwQNZNuFERjo4.roa
Signing time: Tue 27 Dec 2022 11:01:41 +0000
ROA not before: Tue 27 Dec 2022 11:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44788
IP address blocks: 178.250.0.0/21 maxlen: 24
91.199.242.0/24 maxlen: 24
185.235.84.0/24 maxlen: 24
185.235.86.0/24 maxlen: 24
185.235.87.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
2a02:2638::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:3e:c8:ea:f6:39:71:33:3e:06:d6:e6:48:90:47:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Dec 27 11:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa4ef0911ad3b474fd44f1b040d64db851118e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:0a:a6:d3:8f:20:c4:3c:13:7c:61:55:0f:
4e:98:f3:66:c4:da:74:3a:3d:ff:30:b1:bc:2e:63:
db:06:fb:9e:a0:3d:50:ef:27:86:a8:65:e9:d9:b2:
24:76:73:ce:76:bd:de:4e:06:55:af:f2:1d:82:1a:
60:41:a3:94:62:61:e7:3f:43:af:2b:34:64:50:14:
38:7a:e9:49:6a:fe:2a:47:be:32:fc:ac:61:17:02:
b6:b3:10:8f:7d:e9:5d:c2:cb:e9:a7:6e:51:39:f2:
cd:22:d7:2e:38:aa:26:4a:d4:c8:49:a1:da:82:0d:
fc:ed:3c:4a:1a:60:37:c4:21:0b:15:15:af:57:73:
85:43:e6:89:05:f2:76:0c:ab:0f:0b:84:ad:c5:36:
3b:a7:27:20:5d:4e:e6:ab:31:d6:49:1b:7d:c7:7f:
be:7b:4f:10:b7:85:d4:4f:88:35:df:33:c0:fa:91:
db:d5:60:ad:84:7c:7f:36:69:c8:3f:70:36:b4:af:
e4:62:e7:a5:20:ae:c4:a9:cf:f5:b4:23:12:57:c8:
ce:33:72:3e:65:9c:38:72:4f:6b:56:55:be:63:af:
0f:3d:1c:22:89:35:04:4c:17:e2:3c:d4:c8:15:83:
93:42:aa:8e:0f:58:9e:f7:68:ea:0a:a5:b0:f2:62:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4E:F0:91:1A:D3:B4:74:FD:44:F1:B0:40:D6:4D:B8:51:11:8E:8E
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/1-k7wkRrTtHT9RPGwQNZNuFERjo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/24
185.235.86.0/23
IPv6:
2a02:2638::/32
Signature Algorithm: sha256WithRSAEncryption
2a:c3:69:cf:45:5a:67:3d:98:62:97:45:c0:a5:9a:aa:27:d0:
69:e6:7c:c7:49:8a:64:25:9a:66:20:a5:49:45:0a:83:53:68:
a8:97:ad:1c:57:19:c0:8b:36:59:2c:0f:fe:b3:c8:f5:e5:8a:
0b:9f:dc:d4:8e:72:12:29:29:49:62:a7:49:6c:c9:fc:02:02:
0a:9e:08:e0:31:95:2d:ff:e7:45:d4:c5:ca:3d:5f:7b:f0:50:
25:eb:39:23:84:9f:ca:07:4c:9a:83:59:e3:a8:2d:bc:68:73:
6b:61:a4:74:f4:f3:9a:2f:70:bd:c1:0a:65:76:5e:c7:d3:98:
46:fa:03:06:d3:e7:1c:5f:ab:e5:44:d6:bc:ee:46:4b:23:93:
07:1d:f1:66:fb:9a:79:73:2b:b8:bc:96:4b:35:da:33:95:6b:
c3:19:0f:75:ae:96:15:1b:59:9e:aa:20:95:2e:b2:52:1f:2d:
56:50:62:21:36:20:78:94:73:df:6d:34:68:e5:e1:00:79:3f:
49:39:4a:95:cb:91:3b:88:c0:50:fd:11:20:46:8f:b3:b9:86:
8f:8f:36:4a:fa:4c:77:0b:73:7c:6d:e8:dd:9e:0b:ff:40:42:
c6:54:8b:8e:9c:b2:fb:37:7c:3e:07:08:73:f1:04:34:81:20:
15:1c:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org