Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/FQ1hOLy4z_rY2hjkLFAsX3uqF1Q.roa
File: FQ1hOLy4z_rY2hjkLFAsX3uqF1Q.roa (raw, json)
Hash identifier: io8Q2dwh0mheTTS3cRHjFNV8dzprZlQGvpsv7W6DysM=
Subject key identifier: 15:0D:61:38:BC:B8:CF:FA:D8:DA:18:E4:2C:50:2C:5F:7B:AA:17:54
Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial: 0444158E
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/FQ1hOLy4z_rY2hjkLFAsX3uqF1Q.roa
Signing time: Sat 01 Jan 2022 05:55:41 +0000
ROA not before: Sat 01 Jan 2022 05:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209565
IP address blocks: 131.117.225.0/24 maxlen: 24
131.117.224.0/24 maxlen: 24
131.117.228.0/24 maxlen: 24
131.117.233.0/24 maxlen: 24
185.21.138.0/24 maxlen: 24
185.21.137.0/24 maxlen: 24
185.21.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71570830 (0x444158e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Validity
Not Before: Jan 1 05:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=150d6138bcb8cffad8da18e42c502c5f7baa1754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:fc:de:d9:ff:ef:4e:73:50:ca:4d:3c:20:
e3:a3:fe:f7:f2:a1:b1:51:d8:06:fc:8f:1a:e3:62:
ee:3a:8f:c3:0f:a1:66:f0:13:31:94:6b:66:3b:48:
24:0b:0c:7a:0c:ef:a4:80:b3:c9:ee:25:cd:e3:6b:
c4:41:f3:df:aa:58:e9:61:ed:fd:f1:14:32:1f:0d:
24:3b:81:b6:de:db:d0:2f:62:ab:c4:0d:c3:63:e0:
71:86:80:f6:75:33:82:e2:0a:9a:c2:01:28:41:64:
6a:6d:0a:e1:bb:58:3d:f2:f2:b2:e8:d1:61:2a:fa:
86:25:9f:94:64:4b:f0:f4:d2:d5:06:7a:39:c4:d2:
0e:71:5c:c1:48:f8:2a:b4:8f:4f:cb:bc:7b:98:c6:
91:88:d7:df:9b:d0:96:da:43:08:cc:5c:d8:42:8a:
73:19:65:9c:50:85:82:60:57:66:59:dc:46:0f:f9:
05:ac:34:03:67:58:84:b6:43:98:d4:5e:81:13:4a:
88:55:10:8e:6e:4c:62:3d:4c:a7:6a:9d:5a:93:0f:
09:a7:9b:db:45:8a:13:7a:e7:f7:3c:84:0c:58:17:
4c:d7:fb:5c:72:55:48:8b:16:cd:45:11:b0:8b:39:
cd:c7:87:6d:bc:a5:e4:cc:40:25:a1:5d:9e:01:1c:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0D:61:38:BC:B8:CF:FA:D8:DA:18:E4:2C:50:2C:5F:7B:AA:17:54
X509v3 Authority Key Identifier:
keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/FQ1hOLy4z_rY2hjkLFAsX3uqF1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.117.224.0/23
131.117.228.0/24
131.117.233.0/24
185.21.136.0-185.21.138.255
Signature Algorithm: sha256WithRSAEncryption
1c:55:d0:c0:0a:aa:28:20:63:a3:cd:2f:e8:e5:5f:88:27:e0:
23:67:e8:51:b4:9d:3e:56:eb:23:2b:10:bd:d1:85:67:3a:11:
fd:e8:71:62:88:fc:a2:09:7d:6a:7d:cf:0d:37:71:50:c9:d0:
bf:56:57:28:9b:86:c4:ad:78:80:dd:f7:cd:d0:65:4b:60:60:
c3:75:a9:50:a4:04:b2:7a:4f:ea:f9:79:10:d1:8e:5c:af:63:
16:38:58:d9:b3:7f:0b:34:51:6f:85:3e:0e:c3:b7:0d:8d:d1:
94:ff:2b:f4:93:c9:ca:8f:ec:78:0d:2d:ea:25:af:84:69:c1:
7f:d6:78:86:fb:53:08:c9:8b:0b:07:21:77:ab:9f:65:7b:61:
45:96:65:28:be:f5:08:61:ed:fe:8c:32:33:68:18:3e:f3:c6:
ae:c2:e6:d0:9c:f9:38:89:08:6e:41:8b:d8:1d:61:30:1b:13:
a0:87:da:2b:64:6d:62:c7:a6:a5:17:a7:b8:47:d9:b4:8b:4f:
2d:f7:a8:c0:74:93:9d:38:0d:3d:bc:ba:ae:fe:74:81:50:ec:
db:8b:90:8a:3c:0f:64:82:95:f0:56:aa:13:58:3e:79:4d:d4:
57:50:79:af:b3:cd:94:da:37:ae:08:2d:71:41:b1:d4:4b:e2:
ed:cb:df:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org