Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/x-_LM0Lnb3MODay4MDpzHT0Y-ZU.roa
File: x-_LM0Lnb3MODay4MDpzHT0Y-ZU.roa (raw, json)
Hash identifier: cVmUFYugQoGtpEQz55bd8pNzTjwGtJ/0ryOuc3+djnw=
Subject key identifier: C7:EF:CB:33:42:E7:6F:73:0E:0D:AC:B8:30:3A:73:1D:3D:18:F9:95
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: F0BC20
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/x-_LM0Lnb3MODay4MDpzHT0Y-ZU.roa
Signing time: Sat 01 Jan 2022 05:54:47 +0000
ROA not before: Sat 01 Jan 2022 05:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203061
IP address blocks: 188.212.6.0/23 maxlen: 23
185.207.37.0/24 maxlen: 24
185.207.38.0/24 maxlen: 24
79.110.239.0/24 maxlen: 24
79.110.239.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15776800 (0xf0bc20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 05:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7efcb3342e76f730e0dacb8303a731d3d18f995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:8e:a4:9a:25:20:91:39:91:7d:11:d2:be:
8c:f1:53:0a:78:8a:7b:55:1f:36:7d:cb:85:3f:02:
cf:f0:2e:28:1a:ae:ba:0b:23:0f:96:2e:fd:27:56:
79:66:03:9e:e1:03:31:99:22:00:54:4c:a6:6d:b3:
6c:a7:6a:35:30:4f:7d:c9:fa:4f:4f:cb:70:02:12:
0a:c4:ee:af:9e:f8:7a:cb:26:2f:13:73:ec:e1:8b:
c2:17:90:e9:ea:70:79:ea:63:28:d8:3e:54:50:99:
27:ff:1d:ae:47:6b:b8:90:6f:79:b8:24:97:76:8b:
4a:cd:17:e7:5a:61:21:6f:69:75:bd:19:b5:8e:80:
06:36:a8:04:6e:73:2f:65:eb:dd:80:5e:c6:fb:7a:
31:98:89:7e:9c:2d:cc:e7:7d:4b:56:3c:88:92:dd:
09:d5:c4:56:1b:b3:d0:2a:42:32:63:70:6d:d6:28:
29:8b:30:01:12:e7:5d:55:24:50:10:21:ab:21:79:
12:78:c9:20:f1:f0:9a:fa:22:d3:66:03:9b:b7:d5:
e5:8e:3b:3d:15:92:6e:e4:06:ff:b6:da:e9:af:86:
ac:2e:e4:75:ef:ca:10:bb:4e:3d:e6:8e:26:aa:47:
aa:f3:a4:5a:9b:46:b2:5d:1d:9f:28:39:d7:24:e8:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EF:CB:33:42:E7:6F:73:0E:0D:AC:B8:30:3A:73:1D:3D:18:F9:95
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/x-_LM0Lnb3MODay4MDpzHT0Y-ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.239.0/24
185.207.37.0-185.207.38.255
188.212.6.0/23
Signature Algorithm: sha256WithRSAEncryption
30:22:4f:95:e7:9c:9c:f5:42:95:e3:35:90:16:62:fd:e1:a7:
5b:13:dd:77:9b:33:d8:2b:eb:37:7c:51:c8:45:d3:4f:0b:04:
e2:ec:aa:b5:06:7d:16:d2:7a:b4:91:bb:36:3c:9d:69:10:8c:
74:13:1d:04:46:f4:3d:20:4d:fd:d2:8a:e2:f8:97:cc:1c:06:
83:0d:02:24:42:60:47:a3:f6:0b:a8:54:e2:cf:9f:f3:07:96:
7f:fc:ec:5b:4b:44:c7:0a:cf:15:cb:46:8f:5e:c2:48:05:d2:
f1:76:fe:d7:50:5c:80:47:ba:fd:f4:e1:e8:a8:f4:67:c5:19:
e1:91:9e:d3:7d:ab:24:14:10:b2:33:b1:0b:c9:b8:50:aa:c1:
ee:80:d1:de:6a:0f:80:bd:00:fa:d3:f1:0e:09:be:1b:0f:32:
d2:a9:c4:91:1d:81:12:72:2b:73:11:ae:17:b6:2a:75:57:09:
66:ca:21:4a:75:7a:c2:b8:5b:6e:b9:0a:a8:61:f2:d1:b8:34:
a3:05:26:e7:b1:bd:45:a3:99:4d:97:73:27:85:8d:3a:3b:4e:
e2:d8:1a:6b:cf:b5:2c:82:8c:d8:05:6b:bb:31:04:26:13:02:
5c:7a:a4:3f:d8:a4:9e:57:d1:04:63:5a:db:ab:ac:1e:37:25:
06:b3:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:39 2023 by rpki-client on console-fra.rpki-client.org