Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/rFa6s4goGVXb4sXK5F97XBoBJZ8.roa
File: rFa6s4goGVXb4sXK5F97XBoBJZ8.roa (raw, json)
Hash identifier: TXyS+wLl2ooTbFx+hn4mqAOxT46AOtrSJMnbkAaf2Gw=
Subject key identifier: AC:56:BA:B3:88:28:19:55:DB:E2:C5:CA:E4:5F:7B:5C:1A:01:25:9F
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 393583B0
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/rFa6s4goGVXb4sXK5F97XBoBJZ8.roa
Signing time: Mon 07 Feb 2022 12:53:24 +0000
ROA not before: Mon 07 Feb 2022 12:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1104
IP address blocks: 145.116.48.0/20 maxlen: 20
145.107.4.0/22 maxlen: 22
145.110.0.0/16 maxlen: 16
145.102.132.0/22 maxlen: 22
145.116.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959808432 (0x393583b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Feb 7 12:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac56bab388281955dbe2c5cae45f7b5c1a01259f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:74:0e:b7:d1:bc:9c:b0:0f:dd:55:5f:2f:
15:f9:49:5d:0d:9a:40:36:bf:3d:83:f0:cc:58:1c:
7c:7d:50:23:b3:1d:f7:c4:1b:ad:90:4e:f3:ed:22:
ef:d1:d5:f5:75:9e:59:0a:13:ae:97:5c:b9:cb:29:
41:34:3e:48:12:c9:7e:02:54:75:fe:e8:2b:80:43:
48:4d:e2:e4:b1:4a:18:fd:3e:5b:12:12:e2:63:03:
8a:3f:ce:97:6e:1b:bd:fb:ed:44:4e:63:a6:e2:0f:
59:40:3c:75:83:c0:92:96:de:33:97:fe:67:40:03:
1f:f8:91:86:9f:b7:0e:be:c1:1f:21:4a:66:8d:65:
1d:0c:cb:67:7a:40:c7:e1:a7:6b:a5:28:1b:06:a4:
a1:8d:53:24:3b:59:d7:46:04:7e:be:75:5e:df:06:
60:fe:2b:a9:44:df:0a:bd:59:e3:77:e8:8f:a2:c0:
71:c8:9d:d4:cf:b7:eb:26:db:a8:f0:c0:8f:7b:f3:
8f:75:05:4e:52:4e:02:3c:f1:66:af:70:09:ac:56:
8e:8f:82:09:39:54:c2:a6:42:48:25:3a:ba:8b:61:
ee:01:8d:7e:de:9b:be:de:46:69:b8:64:97:27:82:
4c:48:cf:c0:89:e9:2a:d4:59:9e:de:5c:89:a7:45:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:56:BA:B3:88:28:19:55:DB:E2:C5:CA:E4:5F:7B:5C:1A:01:25:9F
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/rFa6s4goGVXb4sXK5F97XBoBJZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.132.0/22
145.107.4.0/22
145.110.0.0/16
145.116.48.0/20
145.116.208.0/21
Signature Algorithm: sha256WithRSAEncryption
94:1d:5d:a4:bb:8a:ab:cd:48:11:00:05:c1:6d:62:09:0d:5b:
74:cf:90:44:45:3a:e8:65:46:9a:98:a3:f7:1c:ac:d4:b9:a4:
18:8e:1d:1e:71:6a:d9:65:b9:d6:87:14:8d:f0:40:02:78:32:
89:ba:74:b8:c5:51:53:5c:de:77:a0:8e:28:88:71:4a:58:b9:
fc:8b:6f:bf:a2:3d:e0:4a:53:ac:77:aa:db:5a:8c:47:18:9a:
23:b0:d0:dd:9a:b0:61:89:39:1b:79:c3:fa:c5:d4:7c:e9:7b:
ed:a7:04:15:11:8a:ac:18:f5:9a:c2:c6:45:6e:36:32:cf:da:
86:6b:46:e6:f1:47:65:54:35:6d:0c:1d:f4:4b:11:30:e9:9e:
a5:8b:3d:75:31:bf:33:3d:fc:c4:dc:2e:f2:9d:df:19:e3:62:
b2:1a:0b:95:e0:9e:f6:ed:e6:50:f1:b6:4a:1c:04:53:22:89:
84:3c:f0:18:40:4e:28:40:6e:01:9c:06:d6:b8:bf:02:47:00:
78:69:d2:37:d0:b3:b3:ba:b7:8a:e2:cf:21:c8:3f:17:51:a7:
4e:15:4a:81:bd:b0:82:c8:92:05:7a:8d:89:b8:e6:91:65:c0:
42:c9:58:ff:ad:dd:7c:99:81:62:dd:72:aa:8f:d8:12:0a:cc:
53:c3:c2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:35 2023 by rpki-client on console-fra.rpki-client.org