Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/FIp9X7JENDrFcQa9CPQXkAci1Eg.roa
File: FIp9X7JENDrFcQa9CPQXkAci1Eg.roa (raw, json)
Hash identifier: uFWQeSE2DARFfKsdgyoDXX+hpsyi/dQE9+Uex2x1B+A=
Subject key identifier: 14:8A:7D:5F:B2:44:34:3A:C5:71:06:BD:08:F4:17:90:07:22:D4:48
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 01832DC3B2C3CE57254AE1E726458FD69FD5
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/FIp9X7JENDrFcQa9CPQXkAci1Eg.roa
Signing time: Sun 11 Sep 2022 18:15:43 +0000
ROA not before: Sun 11 Sep 2022 18:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213301
IP address blocks: 185.174.70.0/24 maxlen: 24
185.174.69.0/24 maxlen: 24
185.174.68.0/24 maxlen: 24
185.78.85.0/24 maxlen: 24
185.78.84.0/24 maxlen: 24
185.78.87.0/24 maxlen: 24
185.78.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2d:c3:b2:c3:ce:57:25:4a:e1:e7:26:45:8f:d6:9f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Sep 11 18:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=148a7d5fb244343ac57106bd08f417900722d448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:19:f4:c2:cf:88:e0:fb:49:ff:32:82:54:
fd:91:de:52:05:4f:8e:38:e8:8c:c8:b5:08:b9:5b:
2f:d2:8c:a2:16:77:2b:bc:6a:38:0e:27:1e:f9:42:
34:ad:7c:ad:bb:52:e6:29:47:96:c3:16:72:60:e0:
2d:5e:fc:3d:64:4b:bf:4b:8d:13:85:4e:5a:d0:d8:
0b:9d:5e:f3:28:83:2a:61:c5:d9:4b:c4:3e:fc:fc:
1c:b8:cb:3a:12:cc:b7:d5:8b:54:3a:d5:ba:16:72:
5b:9d:63:66:e2:38:13:df:99:74:0e:d5:6b:7e:4a:
76:fd:73:13:ac:a9:a9:59:33:c9:83:ca:ba:33:14:
7a:43:a4:37:80:50:30:e7:8b:04:67:f5:94:b4:b8:
be:3c:8d:c8:03:cb:7a:98:9b:96:a8:80:39:33:24:
5e:54:d5:8e:c3:23:97:d9:12:a1:31:a7:83:fc:88:
a9:f7:3b:9d:d2:c4:27:97:26:6e:2b:9e:2b:55:41:
8b:99:7d:bc:89:e8:b0:6c:38:19:87:e7:85:7b:e0:
35:b3:80:d3:6e:43:64:ae:92:6b:28:81:9f:75:ce:
ef:12:0c:bf:0a:c9:ea:67:9e:9a:cb:4f:b4:db:92:
97:81:58:13:50:2b:fc:bb:fb:b5:ab:e3:01:77:72:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8A:7D:5F:B2:44:34:3A:C5:71:06:BD:08:F4:17:90:07:22:D4:48
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/FIp9X7JENDrFcQa9CPQXkAci1Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.84.0/22
185.174.68.0-185.174.70.255
Signature Algorithm: sha256WithRSAEncryption
24:e4:7a:e1:1d:49:2f:d6:e7:60:71:df:a0:72:f4:ed:95:10:
cd:bc:1d:4a:1f:56:71:64:a0:56:43:92:a4:59:e8:f6:b9:24:
51:1d:81:7a:5a:bc:29:08:d4:b4:23:d1:6f:aa:cb:cf:34:28:
1a:e7:25:3a:ae:8c:c2:97:d3:e1:d3:a6:cc:72:00:1f:4a:ab:
65:4e:71:f3:1c:ec:c6:00:bf:40:19:aa:02:df:3e:ce:04:96:
4e:47:b4:56:30:ca:5f:94:94:82:6f:7f:c4:41:5a:73:17:ad:
7b:60:c4:26:cb:fd:6e:d9:b6:4b:1d:f0:a8:9e:c8:b6:ed:d7:
c5:12:fd:0a:47:2c:fc:69:78:63:53:c3:24:a5:5a:bb:43:99:
02:0b:bb:ee:99:52:c8:ca:fa:df:b7:35:06:cd:63:2d:82:5c:
b2:b6:b4:bc:04:59:36:c0:b0:a4:a9:43:85:19:bc:88:21:85:
2d:21:f2:fe:8f:84:7d:b5:b2:79:18:7c:9d:65:99:e7:8b:fa:
f3:05:41:0f:ef:7d:fb:23:98:ad:fb:5b:7e:db:e4:ee:9c:b7:
eb:3e:a0:31:38:9b:92:1e:35:9b:db:70:98:d3:4a:b6:e3:94:
f8:6e:ae:57:67:73:ad:b5:d2:98:f9:d3:04:b3:6c:14:dd:55:
1e:94:aa:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:46 2023 by rpki-client on console-ams.rpki-client.org