Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/1-6QHfbyV3fDTUoYF0jPzXhEWHNg.roa
File: 1-6QHfbyV3fDTUoYF0jPzXhEWHNg.roa (raw, json)
Hash identifier: wHhOs9uSMS0mZl+azGipvxXjO3IsHhxLcaRlfmhXlfQ=
Subject key identifier: FB:A4:07:7D:BC:95:DD:F0:D3:52:86:05:D2:33:F3:5E:11:16:1C:D8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 01845489399E664383737920EE05D0ADD4BB
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/1-6QHfbyV3fDTUoYF0jPzXhEWHNg.roa
Signing time: Mon 07 Nov 2022 23:59:50 +0000
ROA not before: Mon 07 Nov 2022 23:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 185.115.205.0/24 maxlen: 24
176.118.193.0/24 maxlen: 24
2a0c:a300::/29 maxlen: 29
2a12:ea80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:54:89:39:9e:66:43:83:73:79:20:ee:05:d0:ad:d4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Nov 7 23:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fba4077dbc95ddf0d3528605d233f35e11161cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:de:4e:45:59:fa:cc:9c:77:f3:3f:03:34:
de:96:27:8c:64:6b:de:24:1a:01:9f:1c:79:f0:3e:
4a:ef:77:cd:c8:e5:8c:a4:d5:ab:90:e4:b6:c5:08:
7e:b0:50:3b:f1:84:0a:7b:22:ee:05:b4:e8:98:ed:
a0:53:89:28:c0:64:ac:9e:d6:d2:9e:c7:90:80:f5:
85:ed:71:7c:cb:55:ef:03:4d:db:d3:88:4e:d1:10:
46:28:37:66:20:fa:be:f9:ff:bc:7d:55:8d:c0:5f:
af:ba:ce:f6:7f:af:58:99:23:a0:81:09:c2:5b:fa:
72:92:19:55:e9:96:89:4d:50:7d:58:fd:71:61:69:
a1:2e:aa:82:7f:5d:96:bf:8a:7f:d6:42:e1:85:a4:
db:b2:46:81:81:98:5e:b8:b0:58:ee:21:54:98:a7:
db:3e:88:ce:ac:44:25:bb:31:d4:0a:e8:9d:54:00:
dd:7f:56:4b:f2:2b:22:33:0d:f9:41:e9:ab:5f:86:
b5:67:17:26:ff:b6:fb:72:1f:25:92:bd:47:d1:2a:
7d:d2:24:b6:c4:aa:4e:71:1e:84:0c:52:18:bd:3e:
75:05:b2:95:4e:ad:fe:ee:e0:14:e5:36:e1:e9:58:
a4:0f:29:a5:67:e1:dd:9c:49:00:61:8b:69:e1:ca:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A4:07:7D:BC:95:DD:F0:D3:52:86:05:D2:33:F3:5E:11:16:1C:D8
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/1-6QHfbyV3fDTUoYF0jPzXhEWHNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.193.0/24
185.115.205.0/24
IPv6:
2a0c:a300::/29
2a12:ea80::/29
Signature Algorithm: sha256WithRSAEncryption
82:06:7e:30:0d:51:06:f8:84:a6:08:52:c5:68:93:06:5f:90:
c1:1c:6d:66:76:c7:00:6d:f2:c5:0c:d8:b6:3a:80:a2:ee:a8:
09:91:9e:f2:1c:5d:93:e9:7b:12:2b:a6:f2:75:5a:c4:04:5d:
73:46:69:d7:00:4b:cc:49:68:5e:71:40:8f:2e:e1:26:82:c7:
3e:eb:80:f7:0f:54:96:f7:f6:a7:a0:56:88:54:5e:5e:71:b5:
38:09:8c:2a:91:5f:cc:2f:ec:ae:20:be:49:da:2c:17:2b:5c:
bd:31:3b:9b:49:41:0e:16:6a:64:bf:63:bc:21:c8:43:08:8e:
ce:22:29:ea:17:e4:8e:50:9b:b7:3e:5c:7b:1a:7a:b3:27:f5:
cd:9a:47:92:6b:61:ed:7d:61:c1:d9:ed:ae:04:d9:db:57:4f:
2e:03:b7:4c:56:fa:c1:fc:46:1b:69:6f:65:11:ee:66:5f:eb:
1b:4b:69:9f:3a:9a:84:12:91:67:30:5f:72:28:e7:b0:6f:a7:
75:e3:0d:bf:bb:8e:35:24:f0:82:25:02:c8:05:db:2d:54:f8:
ce:a8:28:34:7c:7b:d4:48:45:cc:aa:c5:f3:d9:2b:b7:eb:9e:
4b:3e:7b:45:e7:1c:42:2e:20:c2:34:b5:16:49:b9:f7:ab:f9:
4e:fe:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:03 2023 by rpki-client on console-ams.rpki-client.org