Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/fc4obl_zLfqwY1WPtuyC42d_vEE.roa
File: fc4obl_zLfqwY1WPtuyC42d_vEE.roa (raw, json)
Hash identifier: iz05KBkJwMc9tem5zvIEMmkIsU4WSr4Vi6YWtFV2qUc=
Subject key identifier: 7D:CE:28:6E:5F:F3:2D:FA:B0:63:55:8F:B6:EC:82:E3:67:7F:BC:41
Certificate issuer: /CN=eacb96413ac8f2c16b94795689174d7a72201ef5
Certificate serial: 384F7DFE
Authority key identifier: EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/fc4obl_zLfqwY1WPtuyC42d_vEE.roa
Signing time: Sat 01 Jan 2022 07:53:26 +0000
ROA not before: Sat 01 Jan 2022 07:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20634
IP address blocks: 80.248.192.0/20 maxlen: 20
80.66.224.0/20 maxlen: 20
80.66.226.0/23 maxlen: 23
80.66.224.0/23 maxlen: 23
80.66.228.0/23 maxlen: 23
80.66.232.0/23 maxlen: 23
80.66.230.0/23 maxlen: 23
80.66.236.0/23 maxlen: 23
80.66.234.0/23 maxlen: 23
217.173.224.0/20 maxlen: 20
217.173.226.0/23 maxlen: 23
217.173.224.0/23 maxlen: 23
80.66.238.0/23 maxlen: 23
89.248.144.0/20 maxlen: 20
185.112.48.0/22 maxlen: 22
217.173.230.0/23 maxlen: 23
217.173.228.0/23 maxlen: 23
217.173.232.0/23 maxlen: 23
217.173.236.0/23 maxlen: 23
217.173.234.0/23 maxlen: 23
217.173.238.0/23 maxlen: 23
80.72.48.0/20 maxlen: 20
2a00:ec0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944733694 (0x384f7dfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eacb96413ac8f2c16b94795689174d7a72201ef5
Validity
Not Before: Jan 1 07:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dce286e5ff32dfab063558fb6ec82e3677fbc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:d4:39:b6:67:f1:19:4c:99:44:48:12:c4:
27:5a:12:ba:66:30:f2:38:92:a6:cf:8d:f8:be:8c:
45:81:70:08:77:82:82:87:37:37:4d:71:d7:5e:cc:
41:2e:fe:d8:98:fc:f9:3a:e0:6d:68:ec:05:2b:0e:
91:a8:6a:21:c7:1f:34:bb:b9:8a:57:6f:e3:76:52:
44:69:0e:94:ba:45:1f:c3:f7:bb:0f:41:0d:a6:07:
f5:15:54:83:14:49:93:16:d2:94:05:0b:33:44:49:
da:c4:7c:2c:66:d9:04:a2:87:69:8e:55:30:67:66:
ca:a9:2b:51:2c:9c:c3:0c:43:7f:ef:d5:2f:f9:73:
8b:36:6f:f5:7f:4c:d7:52:40:14:35:fb:23:ee:c2:
3f:bb:25:71:35:77:7b:a0:06:cb:44:55:82:18:02:
1a:9f:b8:5a:ac:dc:92:8b:b5:1b:d6:87:d7:93:ee:
8c:94:cd:e5:5e:dc:bc:d3:d3:95:27:4c:78:ad:ee:
de:c3:33:66:bb:3d:75:bb:4f:4d:d3:a1:48:c4:f3:
ed:94:55:22:fc:30:de:c9:a6:93:c9:5a:84:20:aa:
91:34:25:0b:2d:6b:08:87:a3:ab:19:14:a3:7b:64:
0b:60:b8:01:a1:4a:48:e9:c9:77:68:85:9a:21:f8:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:28:6E:5F:F3:2D:FA:B0:63:55:8F:B6:EC:82:E3:67:7F:BC:41
X509v3 Authority Key Identifier:
keyid:EA:CB:96:41:3A:C8:F2:C1:6B:94:79:56:89:17:4D:7A:72:20:1E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6suWQTrI8sFrlHlWiRdNenIgHvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/fc4obl_zLfqwY1WPtuyC42d_vEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d41df7-941d-47ae-b15c-37fe6b65f68f/1/6suWQTrI8sFrlHlWiRdNenIgHvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.224.0/20
80.72.48.0/20
80.248.192.0/20
89.248.144.0/20
185.112.48.0/22
217.173.224.0/20
IPv6:
2a00:ec0::/32
Signature Algorithm: sha256WithRSAEncryption
80:14:ad:6f:47:70:69:2b:f8:de:ce:27:48:04:74:d1:2f:aa:
fb:35:11:1f:ac:da:84:af:b0:cf:50:86:28:cd:1c:19:35:c0:
a9:57:5b:af:77:5e:b4:84:70:e2:d6:55:51:fd:10:c2:c8:0f:
34:1f:73:44:4f:a0:6d:6e:f8:87:a3:95:f7:1f:3c:6a:51:f2:
61:3d:ff:fa:de:ef:97:ea:d9:44:54:7c:05:cc:b0:96:3a:9d:
03:1f:bc:51:24:2e:e6:59:dd:4a:aa:0f:3a:18:9e:fc:df:65:
e9:4d:76:d4:34:5e:c2:8e:5c:ac:f3:94:30:45:62:93:d4:1c:
da:fe:87:dd:02:6a:3f:5e:b9:98:64:51:d5:aa:57:2c:d4:8c:
aa:8d:a5:44:7c:d2:04:a1:76:92:45:51:02:79:62:5e:bc:8c:
59:16:33:e2:6f:f6:fa:bb:5b:78:4a:9a:43:4a:8b:c5:36:ce:
b8:6d:90:67:40:c5:66:2b:5e:36:11:59:7d:24:cb:64:d5:79:
4c:1a:44:77:89:0a:57:cf:bf:c8:07:6f:82:4c:1f:cc:03:29:
a8:25:d1:0d:8d:8a:75:4d:e9:0e:08:4d:dc:39:4c:80:17:d7:
a3:67:2f:63:14:10:0f:52:37:87:3f:76:16:f5:38:d6:51:c5:
9e:c7:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-ams.rpki-client.org