Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/dgGCoyfZ6gdVkZu8TJC2298k7hM.roa
File: dgGCoyfZ6gdVkZu8TJC2298k7hM.roa (raw, json)
Hash identifier: CZ1QGjoVG1EZaMlmL3KNDpJowsTXiAba/RNBDf2GUYQ=
Subject key identifier: 76:01:82:A3:27:D9:EA:07:55:91:9B:BC:4C:90:B6:DB:DF:24:EE:13
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: F1322C
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/dgGCoyfZ6gdVkZu8TJC2298k7hM.roa
Signing time: Sat 01 Jan 2022 05:54:47 +0000
ROA not before: Sat 01 Jan 2022 05:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203098
IP address blocks: 93.118.38.0/24 maxlen: 24
43.230.56.0/23 maxlen: 23
43.230.58.0/23 maxlen: 23
89.42.8.0/24 maxlen: 24
94.176.106.0/24 maxlen: 24
89.43.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15807020 (0xf1322c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 05:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=760182a327d9ea0755919bbc4c90b6dbdf24ee13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:dc:6b:d8:b3:15:1a:9e:c3:f6:1d:3b:e7:
a1:23:fd:7d:7a:b1:91:05:33:aa:06:63:11:01:0f:
fe:a3:a0:02:ab:3f:bb:bf:fa:02:47:89:f5:50:90:
ac:94:b3:51:22:6f:28:19:d3:ea:18:0e:58:af:14:
e2:a0:f1:b0:11:a3:6c:1f:76:7e:e3:ca:38:0f:f7:
13:ee:e4:fb:25:08:a6:3f:fd:d3:ea:de:a3:f2:95:
73:39:d9:e8:bd:f1:01:a5:78:fe:26:29:3c:8d:a2:
76:2c:69:05:12:41:f8:4b:85:fa:2c:2b:6a:7f:66:
a5:05:29:73:62:7a:e6:1f:10:f3:cb:7f:99:80:0a:
3f:6b:40:2b:ab:d2:f1:ee:55:21:14:12:ba:84:ea:
a3:6b:4d:50:fd:86:cc:2e:38:56:54:dd:df:b2:22:
c2:51:fb:d0:72:64:5c:cb:c0:a9:22:d1:2a:cc:4d:
dc:67:1e:ad:1c:d0:77:7c:9e:8c:35:64:0d:d2:68:
9d:cb:16:a5:cc:4e:7c:bd:9c:e2:49:27:f9:13:d4:
7c:e0:76:42:4e:84:8d:65:68:a3:91:6e:4a:2a:26:
9f:2c:e3:52:8d:b0:eb:c3:80:22:6d:ba:41:cf:92:
2b:87:78:e8:74:f5:17:65:b9:2a:f7:4d:ea:41:dd:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:01:82:A3:27:D9:EA:07:55:91:9B:BC:4C:90:B6:DB:DF:24:EE:13
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/dgGCoyfZ6gdVkZu8TJC2298k7hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.56.0/22
89.42.8.0/24
89.43.32.0/24
93.118.38.0/24
94.176.106.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6a:e7:28:16:f6:67:2c:98:0a:bc:12:c4:e1:ca:78:fe:c2:
df:7f:0e:35:fd:ab:c0:0d:33:57:c6:bd:e9:bc:46:5d:e9:54:
c3:47:9a:7e:be:85:c6:79:21:91:9d:67:f3:ed:b2:4d:d5:76:
5a:98:2a:13:5e:96:07:74:44:78:81:8c:bf:6c:ff:7b:c3:e2:
dc:db:08:52:f4:f7:e8:76:1d:a5:b7:b3:d8:01:f8:31:5b:f3:
71:37:ee:07:12:57:75:82:2e:b3:32:39:e8:09:6e:26:50:37:
83:eb:1d:17:a5:a1:95:57:4e:90:57:43:5e:41:23:00:93:eb:
2b:e0:1c:46:5f:34:cc:a2:0a:1f:b2:a1:e8:be:1f:9e:40:40:
5c:c7:d3:be:45:13:cb:3d:0d:d4:88:50:27:a6:1a:74:11:d1:
61:86:6d:fd:fc:d6:d7:ce:5b:c9:01:46:8f:f8:fc:f5:26:16:
80:48:fb:c2:bc:0c:7d:0b:19:02:93:fa:f8:e0:b7:a3:15:5c:
0d:0c:a9:ca:82:7d:df:53:50:ab:65:83:d8:15:bc:1d:4a:5a:
48:1d:02:47:8b:75:4e:22:a0:bd:99:92:9f:bc:6b:b6:6a:d0:
c8:30:c3:a7:f0:16:aa:2e:d7:91:45:07:38:29:02:f3:da:e6:
74:a2:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:15 2023 by rpki-client on console-ams.rpki-client.org