Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/VFm6QRGdQoiGePCr7Lqkml6X3UY.roa
File: VFm6QRGdQoiGePCr7Lqkml6X3UY.roa (raw, json)
Hash identifier: gBaHT/E93U8+ZW/1TvTzNmoy8kIqKXKc75qIburPzcU=
Subject key identifier: 54:59:BA:41:11:9D:42:88:86:78:F0:AB:EC:BA:A4:9A:5E:97:DD:46
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: F297CA
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/VFm6QRGdQoiGePCr7Lqkml6X3UY.roa
Signing time: Sat 01 Jan 2022 05:54:48 +0000
ROA not before: Sat 01 Jan 2022 05:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210906
IP address blocks: 207.244.216.0/22 maxlen: 22
45.113.238.0/24 maxlen: 24
147.185.250.0/24 maxlen: 24
43.245.116.0/23 maxlen: 23
43.245.119.0/24 maxlen: 24
209.35.99.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
209.35.4.0/23 maxlen: 23
193.36.76.0/24 maxlen: 24
209.35.113.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15898570 (0xf297ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 05:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5459ba41119d42888678f0abecbaa49a5e97dd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:d5:eb:34:6e:c4:04:b3:a5:06:c6:8f:23:
2c:98:bb:84:b3:47:be:06:c1:36:a2:94:ea:c9:e4:
9a:1e:bf:88:33:ea:13:e0:11:5a:a6:75:9c:e8:ab:
0d:bc:00:26:34:0a:cb:52:e7:9b:08:63:ac:77:a4:
05:96:c0:cb:6a:7c:7e:b6:17:a9:b3:ba:75:38:85:
89:2e:39:34:50:79:02:77:11:74:b6:d1:4a:49:8d:
96:b0:66:03:eb:7f:b2:03:b4:78:bf:47:d3:e7:ed:
57:af:90:36:99:19:35:a8:2e:18:a1:dc:f4:9b:4d:
62:9c:ce:5f:de:61:c5:0c:0e:17:9e:e7:55:ab:1e:
a7:a4:f6:09:7e:85:66:55:55:cd:45:81:55:23:ee:
71:f9:da:47:30:ff:f3:e7:e7:93:fe:67:0c:cb:90:
99:80:19:0c:0e:98:e9:b8:ec:96:ee:e1:92:54:e8:
e7:72:0f:9c:1c:d1:97:2a:86:b9:a9:40:3e:96:b8:
75:98:48:55:07:f0:e9:41:34:01:b0:1f:47:61:39:
23:a8:aa:d6:22:90:3e:56:d2:4a:b6:af:de:94:2d:
84:f9:3b:91:a4:42:b8:a4:2e:a5:59:3d:43:1d:cd:
a7:5c:e1:cd:72:2c:71:ec:eb:f0:03:e1:44:27:16:
8d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:59:BA:41:11:9D:42:88:86:78:F0:AB:EC:BA:A4:9A:5E:97:DD:46
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/VFm6QRGdQoiGePCr7Lqkml6X3UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.116.0/23
43.245.119.0/24
45.113.238.0/24
147.185.217.0/24
147.185.250.0/24
193.36.76.0/24
193.36.86.0/24
193.36.172.0/24
207.244.216.0/22
209.35.4.0/23
209.35.99.0/24
209.35.113.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:4a:06:f1:7d:40:3b:60:5b:dc:5a:85:9e:06:f1:34:00:65:
b2:78:48:fd:55:8b:c3:07:46:bc:ee:8d:a2:0b:18:ea:0a:23:
ea:db:5e:53:78:3d:78:4f:73:39:2c:6f:f6:5a:be:34:b5:19:
34:c7:31:36:b3:a4:93:1a:50:b6:59:a2:71:ba:24:68:01:f7:
5a:74:76:8f:04:6d:f4:c3:bd:10:c9:ab:c1:65:3f:5d:16:a8:
59:9b:86:ba:2f:2e:af:0d:21:57:13:51:58:b3:27:43:f5:90:
d6:13:5c:4e:09:7b:5a:3a:87:3a:d6:d9:85:94:93:a7:e5:ac:
a8:2d:f9:09:31:23:56:3d:d2:15:2a:cb:14:2d:16:20:60:95:
17:d7:d4:d3:44:75:1a:3d:18:fe:c4:2c:23:ed:ba:de:5d:38:
53:50:18:8c:3a:26:7a:da:f7:1e:05:6d:40:fb:8e:ab:34:68:
63:4f:ef:99:a4:f8:2f:47:04:7e:02:50:6a:8a:12:f7:ac:2d:
00:31:94:d9:de:59:07:26:bb:07:eb:19:01:c8:f5:cb:90:2f:
b0:fc:ce:58:dc:01:38:d2:a8:5d:8d:3f:9a:9b:2b:10:37:7c:
2c:d7:3c:b3:d8:65:48:4c:44:b8:4d:dc:7f:45:e5:ef:73:15:
11:34:6d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org