Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/1-1VQJzkpBsZ9S4jmoi_wFs3yVU4.roa
File: 1-1VQJzkpBsZ9S4jmoi_wFs3yVU4.roa (raw, json)
Hash identifier: +ZeITibO+Mlgrry+G84TKszdl9Hofvq4P6AfZsaYQb4=
Subject key identifier: FB:55:50:27:39:29:06:C6:7D:4B:88:E6:A2:2F:F0:16:CD:F2:55:4E
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 0561D838
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/1-1VQJzkpBsZ9S4jmoi_wFs3yVU4.roa
Signing time: Sat 01 Jan 2022 10:57:31 +0000
ROA not before: Sat 01 Jan 2022 10:57:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39699
IP address blocks: 62.121.32.0/19 maxlen: 19
86.60.128.0/17 maxlen: 17
83.148.192.0/18 maxlen: 18
185.132.104.0/22 maxlen: 22
2a03:50a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90298424 (0x561d838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: Jan 1 10:57:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb555027392906c67d4b88e6a22ff016cdf2554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:0a:ec:bf:ce:e3:09:58:ca:8e:f1:61:09:
77:52:0a:76:a4:36:eb:0d:03:b9:32:56:74:d5:ea:
9c:2e:31:ff:25:cf:d8:60:92:57:2c:10:ec:d7:c6:
b7:53:29:73:62:01:ab:54:af:01:ee:4a:ff:9d:19:
20:fc:fe:01:61:34:57:ff:a8:73:cf:fb:4b:e7:2e:
a5:80:df:bb:b1:0d:f8:31:2c:67:04:f4:fe:a9:e1:
de:5c:5d:c2:04:d2:79:8e:bc:e0:3c:96:85:c4:58:
6e:01:cf:a4:77:d0:f9:75:51:ba:b8:a9:18:f0:97:
09:28:05:e9:be:9e:34:3f:35:9e:72:49:f9:cf:7e:
1c:04:50:24:ad:bd:b6:fc:02:20:cd:1d:1a:85:30:
9a:94:67:4d:06:1f:df:d5:29:86:c1:2e:3a:d5:28:
75:1a:77:cd:79:c9:ab:d8:ed:d5:60:aa:63:d8:2a:
98:68:1d:2d:15:3e:1e:77:b9:fe:8a:30:59:a9:0d:
c0:cd:00:9f:65:5c:89:a0:6e:8f:63:c3:6e:cb:b4:
36:46:95:7d:65:e4:96:f5:be:8f:4a:22:cb:a7:eb:
c4:a6:78:11:a6:08:1f:11:ed:42:8f:29:1e:ef:30:
49:2f:e7:55:60:39:15:2a:d0:48:50:f3:52:28:41:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:55:50:27:39:29:06:C6:7D:4B:88:E6:A2:2F:F0:16:CD:F2:55:4E
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/1-1VQJzkpBsZ9S4jmoi_wFs3yVU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.121.32.0/19
83.148.192.0/18
86.60.128.0/17
185.132.104.0/22
IPv6:
2a03:50a0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:a8:14:fa:0f:e7:25:74:c7:ad:8b:9c:39:e6:ee:d9:ff:79:
ac:d0:ba:95:b2:1e:62:6e:ac:19:c0:59:06:60:e3:f1:91:14:
e0:5d:cb:0f:ba:0e:68:a9:a7:e0:53:df:1f:1f:1b:2f:29:ba:
69:06:f5:52:49:a8:c4:48:df:24:b6:0d:44:58:e5:4f:48:1d:
34:01:92:cf:5f:f1:b4:6f:52:36:7a:f0:6d:af:c3:2f:c3:71:
2f:7e:d9:9e:99:2d:41:b3:43:a7:ee:5b:ca:92:5e:72:d7:f5:
b8:30:e4:78:83:63:49:21:4b:dc:94:4a:d8:96:c4:c9:4e:28:
05:17:c7:f3:b6:45:94:e9:c8:de:90:f0:f8:65:f2:d5:6b:f2:
55:56:aa:97:ed:29:eb:b8:c6:91:37:5f:ee:da:55:f1:59:4f:
6a:29:8a:2c:ba:47:d9:5b:de:a2:8a:65:36:25:11:cb:8b:2d:
1f:d6:e0:c7:b1:e1:1d:1e:88:98:98:40:a0:1f:5d:49:0c:5f:
8b:7d:13:3d:84:e8:52:f7:dd:83:37:0b:ae:73:fa:3c:e3:ca:
5e:67:c0:59:3e:7c:eb:96:59:51:1c:6d:67:b4:d7:23:e4:df:
ee:09:2c:21:72:08:47:ca:38:f2:70:64:c7:6c:22:81:72:d8:
67:00:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:50 2023 by rpki-client on console-ams.rpki-client.org