Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/2fL-qpBmr4mjyO5A9ouHnO5GJxg.roa
File: 2fL-qpBmr4mjyO5A9ouHnO5GJxg.roa (raw, json)
Hash identifier: YQtRDKQui8OpEMKBmtjKjVQVyXTMIccunxVVkqCCcpI=
Subject key identifier: D9:F2:FE:AA:90:66:AF:89:A3:C8:EE:40:F6:8B:87:9C:EE:46:27:18
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018383E72A7CEBDA3F28043F347FC7AFAB34
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/2fL-qpBmr4mjyO5A9ouHnO5GJxg.roa
Signing time: Wed 28 Sep 2022 11:41:48 +0000
ROA not before: Wed 28 Sep 2022 11:41:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 188.215.5.0/24 maxlen: 24
89.32.200.0/24 maxlen: 24
103.47.52.0/22 maxlen: 22
2a0a:eb00::/29 maxlen: 29
2a07:4a80::/29 maxlen: 29
2a11:3bc0::/29 maxlen: 29
2a0f:c840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:83:e7:2a:7c:eb:da:3f:28:04:3f:34:7f:c7:af:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Sep 28 11:41:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9f2feaa9066af89a3c8ee40f68b879cee462718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:12:00:ba:4d:ba:8a:ef:80:06:73:48:21:
c4:46:c7:9a:74:15:74:8b:55:e0:bd:5a:26:ab:c9:
82:ab:a5:4c:3d:a4:3a:b8:3e:a5:4f:f0:41:69:77:
fd:9c:f4:14:be:d4:64:34:82:b3:d1:4e:e3:04:0a:
aa:0f:42:b3:14:67:09:b8:59:64:70:6f:d8:81:0e:
aa:a1:08:c1:b8:86:dd:a3:96:99:4c:9f:1f:0e:ea:
46:45:23:2a:d3:d4:bd:c3:dd:a6:6a:cc:f2:35:26:
dd:b2:1e:b4:93:9c:98:b7:e2:fe:98:03:49:fb:37:
14:1d:7c:73:8f:c0:46:8b:dc:80:9d:7d:c9:4e:68:
9d:9e:17:2f:21:55:31:fd:e4:81:1c:72:47:de:dc:
c1:04:34:55:7c:28:4f:97:7f:8d:10:2e:ac:f1:dc:
53:c5:2a:86:5a:54:e5:1c:62:2e:f2:b0:78:4e:a2:
b6:1b:41:f6:cd:e2:08:79:58:c8:16:33:2f:fd:34:
c6:72:a0:be:61:90:cc:6b:25:92:95:1d:5c:e2:81:
5e:0f:a7:34:1a:33:ee:8c:e7:c5:14:94:53:4d:37:
ff:b8:b1:3a:da:25:1b:25:1f:11:30:94:3a:9e:02:
1a:f7:a0:81:9d:ae:29:73:c3:a1:c6:00:d4:a4:a5:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:FE:AA:90:66:AF:89:A3:C8:EE:40:F6:8B:87:9C:EE:46:27:18
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/2fL-qpBmr4mjyO5A9ouHnO5GJxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.200.0/24
103.47.52.0/22
188.215.5.0/24
IPv6:
2a07:4a80::/29
2a0a:eb00::/29
2a0f:c840::/29
2a11:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:55:40:7a:6d:b5:39:af:8a:e8:59:7f:67:57:e7:17:a4:f3:
df:07:71:a4:d4:22:5c:25:97:8c:86:86:36:b1:7c:b3:5e:81:
f8:4e:7f:9b:19:aa:68:fc:20:d6:86:58:0f:48:d6:28:3d:55:
d9:4e:d8:f2:92:ae:45:42:fe:7a:62:55:2a:b5:db:4e:2b:a3:
cc:87:c3:c9:1b:14:38:a0:00:88:75:d4:e8:b9:ff:7e:75:9d:
17:eb:ca:83:dd:44:93:a4:39:fc:ab:da:be:d0:ba:65:c1:a7:
ea:e3:7a:b1:8f:52:20:a5:39:aa:8d:67:63:8d:33:8f:90:8a:
f4:76:fb:91:93:c8:4e:22:c0:12:11:57:80:a8:e0:0e:20:d7:
0b:64:22:cf:8d:5e:65:5e:55:4c:86:4f:c1:b3:86:b5:b5:3f:
a2:43:de:c5:cc:d1:ad:95:36:db:b9:aa:bd:12:1b:c2:46:99:
21:5d:3e:b8:19:53:3d:16:3a:7d:07:ff:ba:e8:2c:00:e4:70:
46:85:72:a8:46:10:73:7d:c8:f8:9c:d6:4e:3c:0d:09:2f:fd:
b1:c2:eb:0b:6d:74:b0:86:44:1a:01:44:57:64:3e:59:47:26:
77:ca:d5:93:a0:f3:45:d9:72:d0:ad:78:17:ea:5c:00:b4:86:
05:eb:53:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org