Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/_Hft9JBQs0cTmraPnY4pcaOLfjI.roa
File: _Hft9JBQs0cTmraPnY4pcaOLfjI.roa (raw, json)
Hash identifier: lBqUsOj2F+6nSDqkS5kyMuWvRziYFaW7FIl1bSXAJOM=
Subject key identifier: FC:77:ED:F4:90:50:B3:47:13:9A:B6:8F:9D:8E:29:71:A3:8B:7E:32
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 1C3380CD
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/_Hft9JBQs0cTmraPnY4pcaOLfjI.roa
Signing time: Sat 01 Jan 2022 01:51:53 +0000
ROA not before: Sat 01 Jan 2022 01:51:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2611
IP address blocks: 91.241.30.0/24 maxlen: 24
193.191.240.0/20 maxlen: 20
185.122.248.0/22 maxlen: 22
193.191.192.0/19 maxlen: 19
193.190.0.0/15 maxlen: 24
2001:6a8:a001::/48 maxlen: 48
2001:6a8::/32 maxlen: 32
2001:6a8:be00::/48 maxlen: 48
2001:6a8:8a00::/48 maxlen: 48
2001:6a8:9200::/48 maxlen: 48
2001:67c:2a58::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473137357 (0x1c3380cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jan 1 01:51:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc77edf49050b347139ab68f9d8e2971a38b7e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:90:79:22:71:ee:d4:41:bb:e1:1a:b4:8c:
fb:c6:11:6d:40:61:34:ec:e6:d5:c6:d8:33:af:39:
02:79:f6:ed:6d:49:eb:67:5f:e7:7c:27:f3:db:2e:
ee:72:b2:be:cb:47:c2:cd:31:c2:c5:0f:44:86:d5:
43:bc:6d:1b:4e:42:fe:7f:65:2d:00:30:1c:d1:c4:
c3:44:22:82:ae:99:9f:4f:f7:80:62:94:5e:03:d7:
04:f7:34:54:22:44:9b:ad:11:ca:b0:9a:94:81:f1:
30:29:4d:53:b6:c4:92:bb:bb:a7:52:02:45:54:54:
a9:67:2d:0a:66:5a:bf:af:56:4e:57:c0:04:4f:4f:
37:e5:46:4a:bb:37:a3:d4:8a:a3:c2:da:97:a8:c5:
a3:0e:01:d2:cd:da:84:59:6b:22:64:a2:a2:ba:0c:
e1:c6:4e:61:9b:88:c1:ee:1d:83:1e:84:5b:50:02:
7b:8e:94:7a:3b:af:89:58:e3:1b:5a:8b:d1:33:58:
fd:a2:6e:42:8c:c9:36:33:20:24:fe:cf:b5:e4:28:
a7:bf:98:26:b7:d5:8b:d7:a4:76:b9:5d:e0:73:01:
37:24:86:11:c4:c2:f3:1c:4c:d1:1d:4a:d1:40:42:
79:a8:eb:c7:bc:68:32:c2:ee:2c:2b:42:13:7c:dc:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:77:ED:F4:90:50:B3:47:13:9A:B6:8F:9D:8E:29:71:A3:8B:7E:32
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/_Hft9JBQs0cTmraPnY4pcaOLfjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.30.0/24
185.122.248.0/22
193.190.0.0/15
IPv6:
2001:67c:2a58::/48
2001:6a8::/32
Signature Algorithm: sha256WithRSAEncryption
5e:76:c8:8d:2a:d1:d8:d7:d1:89:88:5e:ab:61:b5:21:b9:bb:
c1:56:4e:4c:79:8c:96:99:ba:b3:55:99:f0:76:80:4e:c6:28:
2f:89:58:8f:21:ba:da:e6:49:f1:a8:6a:c7:b4:23:75:c6:5c:
90:e4:54:88:a3:a2:fc:f7:2e:86:48:35:84:7f:b2:2a:a9:d0:
db:5e:ca:b1:e9:a4:b1:61:6a:c5:6a:6d:03:92:74:a1:b2:ff:
36:4b:dc:13:84:15:2e:64:dc:9e:fd:8f:87:c5:27:62:da:c9:
ba:55:8d:48:ce:b0:ef:30:da:89:76:bf:7e:2a:02:da:20:e0:
6c:e6:08:ce:5c:1e:32:7b:e4:c1:fa:ad:52:34:36:c5:4b:c9:
cb:d3:58:b1:53:a8:a1:65:2b:ed:37:8c:49:ff:84:8d:b1:26:
4e:9f:10:04:c0:86:f9:80:dd:62:66:5f:6a:cb:15:1b:7f:95:
87:49:b1:68:73:0d:02:5d:60:6b:99:a5:2f:00:40:59:04:2d:
4f:da:b1:26:11:65:21:c3:6b:94:ef:7a:7f:06:b5:56:f7:d9:
87:b1:2d:6c:4a:65:61:6c:70:67:75:6a:20:a1:57:3b:37:0f:
8c:8e:35:04:57:48:05:86:03:93:f8:6c:c4:5b:74:c9:34:37:
85:6f:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:08 2023 by rpki-client on console-fra.rpki-client.org