Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F9EERALdgEUGkTzP-tpnOwXe0lw.roa
File: F9EERALdgEUGkTzP-tpnOwXe0lw.roa (raw, json)
Hash identifier: JjC+z+KcKDXZRMwSGqMOy3a13WRuMI3CrmfBvsZ2SHY=
Subject key identifier: 17:D1:04:44:02:DD:80:45:06:91:3C:CF:FA:DA:67:3B:05:DE:D2:5C
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0E310540
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F9EERALdgEUGkTzP-tpnOwXe0lw.roa
Signing time: Sat 29 Jan 2022 09:31:39 +0000
ROA not before: Sat 29 Jan 2022 09:31:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 147.136.64.0/19 maxlen: 24
185.226.204.0/22 maxlen: 24
92.50.0.0/18 maxlen: 24
170.246.64.0/22 maxlen: 24
168.199.128.0/17 maxlen: 24
185.101.244.0/22 maxlen: 24
185.101.252.0/22 maxlen: 24
185.102.4.0/22 maxlen: 24
185.170.68.0/22 maxlen: 24
192.95.80.0/20 maxlen: 24
185.171.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238093632 (0xe310540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 29 09:31:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d1044402dd804506913ccffada673b05ded25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:4a:fc:80:d7:da:98:49:87:c9:ee:06:8f:
86:4c:f6:0f:09:ac:a3:dc:df:bc:cc:99:c1:58:0d:
9d:63:a8:92:ed:75:86:d3:5a:5e:7b:29:ab:74:91:
45:80:f5:62:41:52:c8:99:d4:7f:19:34:3e:dd:da:
da:ad:e6:68:97:16:1d:2b:d1:a0:73:96:0f:77:48:
35:bd:a9:b7:bb:3e:4c:3a:ea:8a:ab:c1:4d:96:c7:
14:78:a1:8c:05:a1:e0:ae:db:6b:08:fe:bb:c8:d2:
72:80:f7:c8:0d:2a:3a:66:ca:cf:27:93:23:37:71:
0a:8a:39:06:34:10:86:22:c8:f1:c6:43:48:4b:0d:
bf:2b:c6:b1:b4:8d:e8:85:37:f3:81:55:7f:da:67:
2d:42:35:d6:24:0e:38:1f:e4:93:6a:2d:c2:95:57:
6b:11:ee:39:d0:c4:d8:89:55:11:b2:88:3e:51:49:
ed:8d:d5:13:6e:93:a8:68:b3:5f:4d:a2:4d:ad:72:
9d:8c:68:4b:2d:6c:3b:6c:18:49:9e:22:a4:56:0b:
93:1f:51:16:28:9e:c9:62:6a:71:c7:ae:d0:4a:41:
0a:05:53:fa:0f:42:9c:12:dd:11:a2:c0:a0:66:3a:
3c:ec:08:89:20:e4:e3:8a:72:83:ae:e0:e9:36:d9:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:04:44:02:DD:80:45:06:91:3C:CF:FA:DA:67:3B:05:DE:D2:5C
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/F9EERALdgEUGkTzP-tpnOwXe0lw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.50.0.0/18
147.136.64.0/19
168.199.128.0/17
170.246.64.0/22
185.101.244.0/22
185.101.252.0/22
185.102.4.0/22
185.170.68.0/22
185.171.252.0/22
185.226.204.0/22
192.95.80.0/20
Signature Algorithm: sha256WithRSAEncryption
23:8c:18:56:27:9e:40:f4:74:50:a6:e0:22:fd:e2:27:d5:3a:
d4:6d:55:46:3f:7f:31:a3:a3:2b:40:33:41:33:d0:e7:be:e7:
86:6b:02:5d:f4:b2:d3:9d:2f:7a:43:14:9a:d7:e6:ca:ed:3c:
a8:6d:32:90:ac:d1:fb:2c:15:ed:ac:46:6c:fa:c0:5e:93:dd:
de:e4:58:15:f5:5f:3b:00:0c:a0:de:44:db:f0:1a:4a:fc:4f:
e9:84:47:8b:0a:30:e1:91:bf:f1:3a:19:d1:b3:57:3a:bd:05:
62:33:78:16:21:a6:d4:a7:aa:c4:eb:98:8d:24:d4:90:eb:4c:
d2:2c:fa:41:95:ab:a4:3a:63:e9:96:f1:40:44:d9:2a:88:92:
5a:c7:b1:1e:01:bb:fa:ea:a8:fb:ec:65:ef:1a:ec:73:9a:c3:
05:3f:ad:70:5b:81:5e:ec:5f:17:f2:30:1a:4a:38:c6:d2:b5:
68:34:7b:92:eb:45:a7:18:0e:ab:09:7f:78:a3:d6:ae:49:49:
4a:f5:18:96:1c:8e:57:b6:be:ca:d6:fb:42:13:cc:c6:b0:29:
c7:3a:2e:a6:7f:8e:97:6d:7b:21:c9:48:02:e0:52:0e:96:b9:
e1:66:e5:a3:3d:f1:4c:52:e0:30:37:7f:3d:51:8d:29:c4:a4:
5f:8c:88:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org