Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1-hjmo79hr1W0qRfZbwV08I6YH_w.roa
File: 1-hjmo79hr1W0qRfZbwV08I6YH_w.roa (raw, json)
Hash identifier: uXsAs3E1R+fQa7GAc4aaHBpjytZBmuT3tpO6pGUkqSI=
Subject key identifier: FA:18:E6:A3:BF:61:AF:55:B4:A9:17:D9:6F:05:74:F0:8E:98:1F:FC
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 018311B5DED360DF4D302013A933B142660F
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1-hjmo79hr1W0qRfZbwV08I6YH_w.roa
Signing time: Tue 06 Sep 2022 07:31:15 +0000
ROA not before: Tue 06 Sep 2022 07:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61976
IP address blocks: 79.141.65.0/24 maxlen: 24
79.141.66.0/24 maxlen: 24
185.193.90.0/23 maxlen: 23
92.255.62.0/23 maxlen: 23
79.141.64.0/20 maxlen: 20
79.141.64.0/24 maxlen: 24
2a00:ab00:6000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:11:b5:de:d3:60:df:4d:30:20:13:a9:33:b1:42:66:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Sep 6 07:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa18e6a3bf61af55b4a917d96f0574f08e981ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:98:ac:2c:bd:a6:44:41:07:90:dd:a3:52:
38:b2:16:19:04:0d:7e:0a:c6:74:ab:06:ce:62:73:
68:75:e2:21:a2:0b:83:58:57:41:a6:b5:24:92:c7:
f5:64:ec:89:c4:76:2c:b3:af:25:03:2d:07:10:4f:
84:2e:ea:4b:82:ed:d8:07:fe:a8:8f:d5:71:d7:4f:
24:bb:af:78:5f:e5:8f:70:e0:5c:f6:a7:6e:8a:0a:
a6:09:c3:b2:ea:78:c7:b3:d8:cc:8a:c8:22:d2:16:
1d:c2:56:65:e6:2b:a4:da:bf:12:9f:e2:08:14:ea:
9a:bf:23:e2:f1:1c:6a:ec:d8:66:c6:c5:74:00:2b:
4d:f5:bb:fe:04:b2:4c:ca:2c:85:0e:29:79:9f:4d:
9e:c8:ef:91:c3:76:df:0e:fd:9c:86:23:9a:e5:c0:
6b:c3:64:b4:e1:5e:6d:4c:16:de:56:5b:cc:53:be:
07:7d:ae:75:f8:80:2f:51:26:c9:ad:a6:c5:1a:12:
33:d3:a3:4e:63:7e:05:e2:76:be:b2:8d:c7:34:c8:
48:b7:07:56:3c:7a:ed:e9:25:99:b8:61:35:68:ef:
86:58:41:73:3a:9b:67:ac:13:7c:5b:ff:27:1c:68:
a9:f6:cd:94:b8:8f:1c:96:77:c1:1c:24:61:d9:b7:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:E6:A3:BF:61:AF:55:B4:A9:17:D9:6F:05:74:F0:8E:98:1F:FC
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/1-hjmo79hr1W0qRfZbwV08I6YH_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.64.0/20
92.255.62.0/23
185.193.90.0/23
IPv6:
2a00:ab00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
2e:c9:6b:8b:fb:ec:76:75:f5:d2:58:16:29:bb:41:69:6b:34:
7c:8b:20:dd:03:7d:cc:c9:84:1b:0b:d7:a9:01:d5:71:0f:c5:
af:eb:95:f1:bb:78:69:98:e8:a0:7d:73:6a:b1:aa:49:c8:ff:
7a:e5:6b:fc:e6:da:ec:8e:c7:ba:ba:aa:6b:82:0f:ca:f7:55:
9b:15:44:ad:40:f2:4f:2b:e8:79:19:a2:77:bc:e8:3c:e6:f9:
ee:1e:c0:7d:da:9e:3e:3a:5a:76:f3:52:b6:31:6c:92:2a:52:
71:e0:05:d7:20:71:8c:46:11:e6:60:ef:85:46:45:f7:43:97:
01:44:be:be:f6:4a:5c:34:5e:28:1a:e9:d5:e2:52:31:58:1c:
7c:c8:88:14:6c:a3:21:ab:ec:11:7b:a4:90:fb:ac:a9:a2:46:
7a:67:05:88:70:b2:51:01:2b:eb:be:bb:12:1d:94:55:b7:34:
99:2e:ad:30:4b:a9:f8:45:bb:a0:82:d7:b5:cc:1b:7d:00:13:
40:6e:98:ab:1d:24:43:27:5b:54:12:27:8e:b0:48:bb:73:1e:
55:6a:8e:0f:99:e8:0a:e2:fa:ca:b0:89:64:fe:1e:28:48:32:
b9:a0:79:20:a0:23:de:34:35:06:ca:08:a9:a3:55:51:5b:de:
61:a4:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:18 2024 by rpki-client on console-ams.rpki-client.org