Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/F7QA6Bcu4v_o_qeL4ib7RxbBhis.roa
File: F7QA6Bcu4v_o_qeL4ib7RxbBhis.roa (raw, json)
Hash identifier: q4aOLRAlOKb0B1ZfP+800VEBEZhwQJy5eW7UzyniBiQ=
Subject key identifier: 17:B4:00:E8:17:2E:E2:FF:E8:FE:A7:8B:E2:26:FB:47:16:C1:86:2B
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 0422FD98
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/F7QA6Bcu4v_o_qeL4ib7RxbBhis.roa
Signing time: Sat 01 Jan 2022 07:53:47 +0000
ROA not before: Sat 01 Jan 2022 07:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8788
IP address blocks: 193.138.87.0/24 maxlen: 24
212.26.128.0/19 maxlen: 19
194.32.109.0/24 maxlen: 24
194.32.110.0/24 maxlen: 24
178.211.96.0/19 maxlen: 20
194.32.108.0/24 maxlen: 24
212.26.140.0/24 maxlen: 24
212.80.32.0/19 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69402008 (0x422fd98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Jan 1 07:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17b400e8172ee2ffe8fea78be226fb4716c1862b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:08:83:43:ec:d3:88:d6:b2:3b:a7:43:5e:
62:8c:97:78:25:95:d0:9c:c0:84:a1:6b:9b:70:69:
9c:54:a8:be:c4:13:e0:92:c4:21:9e:2f:b6:d9:d0:
f8:6d:67:6d:ae:2d:83:3b:64:36:59:15:99:0f:b7:
73:d8:94:3a:d6:83:64:6a:bd:b7:17:89:9f:8c:b9:
5b:67:a5:fb:e8:c8:b7:cd:ad:df:76:a1:c2:d1:64:
7f:74:59:82:1f:44:42:bf:cf:c6:61:ff:b7:83:b5:
c0:ac:53:cf:d8:d9:08:86:fe:3a:7e:81:1a:63:5c:
ad:be:b5:df:26:64:53:37:77:28:4a:c9:df:6d:ab:
4b:26:42:0d:22:95:78:88:42:6a:8c:e6:c6:59:c4:
70:58:e7:d8:15:a0:72:d8:22:7c:0e:87:6d:73:14:
b3:b4:38:21:c9:9f:dd:16:c4:79:4d:53:bc:b2:f1:
40:3c:ff:1d:fd:5a:fb:20:81:fb:15:3c:1c:e3:27:
cf:0e:a9:8e:5b:ed:9d:02:cb:00:6d:fd:3d:76:69:
30:40:e4:9b:b9:fb:15:df:4e:ae:3a:ef:d6:04:e8:
e7:5e:2e:fd:b3:30:ac:e8:5c:dc:20:7d:65:9d:fd:
dd:fe:36:ba:6c:90:44:2f:bd:66:a5:02:0a:b9:82:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B4:00:E8:17:2E:E2:FF:E8:FE:A7:8B:E2:26:FB:47:16:C1:86:2B
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/F7QA6Bcu4v_o_qeL4ib7RxbBhis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.96.0/19
193.138.87.0/24
194.32.108.0-194.32.110.255
212.26.128.0/19
212.80.32.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:3c:47:4f:aa:c4:83:e9:29:01:dc:c9:64:61:6d:ec:ef:1c:
b4:5f:8a:8b:78:f7:50:68:9a:a8:8d:9c:f7:95:1e:8a:05:16:
53:79:36:53:77:47:2e:b9:8c:87:87:aa:5c:26:f4:97:f2:19:
1b:6f:e5:83:02:8c:2e:a4:85:d7:e1:69:f7:99:e5:27:e1:a0:
78:4e:81:dc:b2:29:d5:e6:8c:0e:6c:04:5e:ec:50:8e:b4:61:
89:21:32:a2:73:fa:5f:46:77:b4:c6:9e:9d:aa:56:23:0d:9e:
cc:3b:8f:d1:61:6b:b2:c5:f1:7c:dd:78:1a:20:16:aa:1c:7c:
0b:1f:05:e2:5b:51:83:bf:21:38:02:20:8f:93:22:83:b3:68:
90:d1:9f:9f:c1:8e:f4:37:17:9f:77:8a:48:a8:ff:01:49:60:
ed:55:f1:4c:63:17:fd:43:44:6c:49:ea:8f:c5:ac:69:86:a0:
32:29:05:96:b3:cf:18:aa:9f:b5:4b:ed:15:f0:7d:07:10:c3:
8a:4e:91:61:cc:07:03:99:84:77:e0:e6:aa:4a:37:c2:58:0a:
c4:14:55:fa:68:cb:79:0d:08:b0:f9:8a:97:23:15:67:2d:34:
6e:ff:e0:37:41:9c:c7:71:b3:c5:dd:2d:c7:97:ee:b6:c4:e4:
11:64:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:05 2023 by rpki-client on console-ams.rpki-client.org