Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/f-L5ExRS9xKCFgsZ4VFDQgc12TI.roa
File: f-L5ExRS9xKCFgsZ4VFDQgc12TI.roa (raw, json)
Hash identifier: xwfEXfH13SeBkn59F1lQy7JN4uuaLO2wAJnOnI/vAGM=
Subject key identifier: 7F:E2:F9:13:14:52:F7:12:82:16:0B:19:E1:51:43:42:07:35:D9:32
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018400DBBF2BE67E7A4653AA7D57E450CF85
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/f-L5ExRS9xKCFgsZ4VFDQgc12TI.roa
Signing time: Sat 22 Oct 2022 18:01:52 +0000
ROA not before: Sat 22 Oct 2022 18:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15974
IP address blocks: 93.157.208.0/21 maxlen: 32
213.80.128.0/17 maxlen: 32
217.23.64.0/19 maxlen: 32
193.22.6.0/24 maxlen: 32
2a02:e842::/32 maxlen: 128
2a02:e840::/32 maxlen: 128
2a02:e841::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:00:db:bf:2b:e6:7e:7a:46:53:aa:7d:57:e4:50:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Oct 22 18:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fe2f9131452f71282160b19e15143420735d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:ad:28:af:67:46:cb:1f:57:ac:1d:78:70:
ca:ed:e9:d9:d5:db:0c:5c:5a:0f:66:c0:bf:fc:47:
f2:f4:85:0e:da:0e:2a:62:2a:09:6f:50:f4:33:9d:
7d:e8:73:c9:90:ee:9b:83:a8:1d:c0:2e:d5:2b:b9:
51:35:ad:e8:ba:4d:53:20:93:79:4d:4b:94:8e:8f:
ba:d0:7e:66:cf:f0:c3:3b:4b:a9:15:aa:95:ec:59:
7e:5e:91:ab:d5:2a:ff:d5:16:f6:39:3e:f8:38:48:
83:d5:10:ea:07:17:0d:06:27:93:33:de:96:f9:9c:
df:90:b1:92:e6:f9:5f:ea:a3:da:a0:80:59:e9:63:
4e:d0:f4:1e:bc:e7:5a:bb:dc:aa:66:17:d8:6e:3e:
15:07:e1:da:ec:54:a8:bc:13:1d:32:3a:4f:09:24:
75:99:53:2a:67:69:6d:6f:71:1a:b7:bd:55:1a:71:
49:81:84:59:90:a1:00:f1:88:ea:e7:3d:04:9f:21:
7d:a1:3a:69:c1:b1:e6:38:e4:7b:c8:ae:46:11:70:
44:46:c3:1d:a0:1c:18:e9:8a:67:b8:f8:4e:29:0f:
1c:2d:04:40:3e:c4:31:d4:68:7f:eb:74:59:4d:10:
f1:cf:75:76:ec:b6:47:56:04:4a:13:45:80:3f:c1:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E2:F9:13:14:52:F7:12:82:16:0B:19:E1:51:43:42:07:35:D9:32
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/f-L5ExRS9xKCFgsZ4VFDQgc12TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.208.0/21
193.22.6.0/24
213.80.128.0/17
217.23.64.0/19
IPv6:
2a02:e840::-2a02:e842:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:a7:4e:72:28:3c:49:77:0e:46:cc:16:5c:0a:c8:16:b2:f6:
10:86:0b:06:a5:64:10:d9:cc:04:dc:99:7c:7e:58:a3:60:c9:
e6:c3:cf:c2:ee:b6:84:74:ed:17:55:36:f4:ae:97:98:9a:5f:
f5:2e:00:63:0c:46:21:62:0d:e6:74:19:9a:d2:86:09:12:69:
20:7f:b3:43:98:ef:e8:a9:1d:7e:90:61:bd:6f:de:53:a4:f1:
a1:e5:15:be:7d:ee:66:80:bd:87:86:b3:b6:45:6e:12:f3:56:
90:b6:62:d1:90:96:5e:9a:5b:de:49:eb:3b:42:c2:3f:d7:33:
fa:8c:47:d4:28:3d:ae:42:a3:bd:52:d7:12:8e:a9:8a:fa:d7:
18:c6:97:6e:da:ca:58:24:0c:7a:cb:c0:65:7c:9b:c2:f8:5f:
52:c2:b5:1f:fa:e7:1a:8e:bb:ef:9e:6b:6e:1c:09:44:44:b8:
11:af:ed:f5:f0:90:50:ed:da:c4:73:17:a9:37:db:67:cb:72:
37:18:02:c9:47:47:9e:48:96:ee:52:68:24:cc:dc:3e:fa:79:
49:be:ac:0d:f3:56:30:bb:d3:51:a1:27:fd:e7:95:fc:58:7d:
e6:25:eb:47:a8:c5:ae:31:d6:58:fd:70:78:4c:08:9d:87:93:
ce:9f:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org