Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/5vVHADFrMzdth0G8qVsfdSC-UQo.roa
File: 5vVHADFrMzdth0G8qVsfdSC-UQo.roa (raw, json)
Hash identifier: mWUD6X/wWrt3i4t6LqYiQ1b5YWHQ5vtu49XsTTpMcD8=
Subject key identifier: E6:F5:47:00:31:6B:33:37:6D:87:41:BC:A9:5B:1F:75:20:BE:51:0A
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 3FBF3160
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/5vVHADFrMzdth0G8qVsfdSC-UQo.roa
Signing time: Sat 01 Jan 2022 08:55:06 +0000
ROA not before: Sat 01 Jan 2022 08:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8267
IP address blocks: 149.156.0.0/16 maxlen: 16
193.193.64.0/21 maxlen: 21
195.150.224.0/19 maxlen: 19
2001:6d8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069494624 (0x3fbf3160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 1 08:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6f54700316b33376d8741bca95b1f7520be510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b3:9f:c8:c7:a0:1f:6c:2a:60:76:82:be:1c:
c2:93:6e:3f:6e:ff:78:5b:9a:4d:cb:e5:af:c4:cc:
6e:95:3b:aa:db:77:5d:6f:fa:a0:22:06:0d:c7:fb:
cd:27:d7:93:7c:f7:16:34:48:94:7f:34:53:4c:53:
54:55:6f:4a:94:55:5d:3b:eb:70:ea:83:84:e8:0a:
61:cf:2f:53:4b:14:8e:93:a1:a0:d2:b5:2e:c2:78:
fe:fa:7c:c2:f1:43:48:4f:52:e4:0f:c0:c0:30:2a:
93:40:39:ed:7f:6d:ae:81:eb:24:2e:5c:28:cc:9a:
df:18:27:dd:ac:aa:6f:ff:57:eb:6f:3e:85:c0:8f:
4b:7f:5b:d8:80:19:f2:d9:0a:35:41:b8:96:eb:bc:
98:12:ae:3e:b9:67:da:19:51:3a:6a:2b:4b:58:14:
1f:86:43:e0:52:18:0c:c3:00:bc:20:58:23:83:6f:
5f:f3:6e:a1:90:d1:48:67:4b:65:58:1c:84:fd:4a:
d3:4a:01:44:71:46:53:34:6d:9e:8a:3b:be:80:66:
91:a8:d6:de:5d:80:73:8b:3f:e1:59:f5:e8:b6:50:
d8:f9:da:d2:18:59:7b:46:a2:96:49:88:15:fc:a6:
33:92:9b:b6:9c:da:32:e2:14:ab:6b:a6:28:d6:0b:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F5:47:00:31:6B:33:37:6D:87:41:BC:A9:5B:1F:75:20:BE:51:0A
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/5vVHADFrMzdth0G8qVsfdSC-UQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.156.0.0/16
193.193.64.0/21
195.150.224.0/19
IPv6:
2001:6d8::/32
Signature Algorithm: sha256WithRSAEncryption
75:1a:d5:9f:9a:fa:1d:72:4e:0f:68:2b:53:4f:b7:f9:18:ac:
98:88:60:aa:ad:88:48:4f:5f:27:ed:2c:ca:f6:a3:2f:22:8d:
e6:54:12:74:e3:72:c9:e2:65:49:9a:9f:c5:8d:5a:d8:36:2b:
d7:66:6c:21:68:9e:4d:8c:ae:9f:62:14:e8:9d:c1:82:e5:6b:
cd:51:5f:2b:74:2a:28:93:c6:7b:49:1e:f9:90:3a:dc:ff:6e:
90:86:94:2b:6a:cc:62:8d:3d:ee:20:8b:d7:0a:c4:f5:33:df:
df:bb:5f:51:28:78:f2:dd:7f:ce:54:e8:87:31:51:47:8a:40:
7d:25:71:e3:dd:0b:7c:cf:01:22:af:b3:7f:65:ad:87:d6:97:
79:52:e0:82:6e:47:a4:01:d5:cc:1c:05:70:5b:2a:87:8d:13:
e5:c4:1e:97:59:df:48:4b:36:62:62:13:3b:85:e4:8c:bc:7f:
dd:5e:8e:ce:52:1e:f9:b1:29:7c:d0:ea:73:d6:e1:63:49:25:
12:c6:1e:ff:80:fd:e3:bf:7b:2b:14:2c:63:c8:5c:d5:cc:cd:
0a:69:58:5f:9b:5c:de:a9:20:81:33:ed:c1:86:18:6e:3c:fa:
65:53:d9:c7:23:b6:9c:d2:ff:99:5b:81:f4:c8:e1:2a:03:52:
b2:fa:36:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-ams.rpki-client.org