Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/f7KvAJssthKfVs_DYEckofjGjoM.roa
File: f7KvAJssthKfVs_DYEckofjGjoM.roa (raw, json)
Hash identifier: F8TIzQTkZXat8BHEm6QRWXtg4LEG9KpEUpLnhb9TnIA=
Subject key identifier: 7F:B2:AF:00:9B:2C:B6:12:9F:56:CF:C3:60:47:24:A1:F8:C6:8E:83
Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Certificate serial: 01831DEBE9BEA1B477A74BF68E169D82856A
Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/f7KvAJssthKfVs_DYEckofjGjoM.roa
Signing time: Thu 08 Sep 2022 16:25:43 +0000
ROA not before: Thu 08 Sep 2022 16:25:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29611
IP address blocks: 185.119.54.0/24 maxlen: 24
185.119.52.0/24 maxlen: 24
185.119.55.0/24 maxlen: 24
185.119.52.0/22 maxlen: 22
185.119.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:eb:e9:be:a1:b4:77:a7:4b:f6:8e:16:9d:82:85:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Validity
Not Before: Sep 8 16:25:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7fb2af009b2cb6129f56cfc3604724a1f8c68e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:20:5d:ec:c3:50:2d:12:df:bf:58:3b:bc:
79:e6:77:73:38:f1:10:29:7c:41:73:c2:4b:49:64:
d3:75:c6:8d:51:1b:51:d0:1c:81:89:2a:21:26:07:
c0:08:a3:09:48:5d:b3:86:fe:de:9c:7b:c4:75:6c:
f4:4f:13:09:d1:21:62:c4:c8:c6:58:5d:29:fc:44:
0a:b4:50:3f:31:d3:45:1e:73:b5:4c:12:26:ad:26:
fb:79:14:c4:d1:c4:b8:72:08:68:23:72:17:80:d1:
eb:70:01:03:df:bb:b5:af:80:6f:ba:52:24:bf:c3:
57:6b:43:42:71:73:2a:90:71:4a:a7:1a:83:cc:f6:
a4:fb:71:c8:79:c1:34:e7:43:11:06:da:47:c9:bf:
91:cc:9c:23:61:4d:ff:3d:fe:ff:b4:42:51:16:ce:
ec:a6:e3:85:d5:40:2e:bb:4f:3e:60:58:f8:0b:a9:
b2:da:98:5c:7b:ec:60:00:23:f2:1a:89:7a:5a:9b:
cd:af:a0:fe:7b:7b:bc:4a:82:87:9c:ab:6d:72:95:
ab:94:7e:96:95:51:a4:ba:08:48:26:53:5e:5d:3f:
ee:5e:31:28:35:1f:7b:1e:c3:b4:0e:e5:a1:57:3b:
af:a4:7a:36:71:15:39:b9:63:7a:c7:19:8d:4e:ed:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B2:AF:00:9B:2C:B6:12:9F:56:CF:C3:60:47:24:A1:F8:C6:8E:83
X509v3 Authority Key Identifier:
keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/f7KvAJssthKfVs_DYEckofjGjoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.52.0/22
Signature Algorithm: sha256WithRSAEncryption
17:4b:a6:7a:c4:14:78:3e:e1:20:45:45:25:a5:9d:4e:02:69:
74:58:19:64:6d:a2:53:9a:a5:e9:de:46:dc:42:17:31:fc:29:
59:0f:1e:d4:8c:e5:a4:98:35:ba:88:48:c8:d9:7d:00:c5:57:
2f:0a:7f:47:f9:2d:5a:43:32:29:09:62:3d:b1:4d:69:14:fd:
8e:d8:88:20:dc:dd:a9:c7:7c:bf:67:0d:d9:fb:12:35:38:ed:
11:17:39:c8:d3:09:34:02:4a:08:6e:c9:ec:38:86:3c:21:9a:
b7:d1:65:49:26:a1:9b:b8:71:55:10:71:ff:9e:67:9c:3a:dc:
46:fd:63:75:80:f1:9f:36:96:93:e8:1d:22:54:42:d2:3a:8f:
8b:23:96:05:0c:92:50:ce:bf:fa:38:04:76:c7:c2:18:0c:bc:
71:c8:fd:7b:ec:3c:c2:fb:8b:ee:74:cc:d2:ea:aa:76:39:62:
ec:15:74:fa:a3:2d:17:46:46:ad:7e:b3:98:73:99:1f:2a:47:
d5:58:b0:9e:3f:50:79:4e:40:f4:5c:d0:dc:68:13:be:8a:33:
f3:cf:8b:5d:68:1f:a2:bd:74:29:d8:dc:61:99:75:c1:6a:ca:
a1:4c:eb:ee:f0:cc:c5:6e:20:76:0e:a3:55:24:df:40:28:06:
c5:0e:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:58 2023 by rpki-client on console-ams.rpki-client.org