Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_lEWs5r7_vpH5Fe_Rj9VjOhHviM.roa
File: _lEWs5r7_vpH5Fe_Rj9VjOhHviM.roa (raw, json)
Hash identifier: ETcS1udSEPyF5na5xq7lFCO/JoRUHDjnvDh4eTVmcdQ=
Subject key identifier: FE:51:16:B3:9A:FB:FE:FA:47:E4:57:BF:46:3F:55:8C:E8:47:BE:23
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B68C68C
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_lEWs5r7_vpH5Fe_Rj9VjOhHviM.roa
Signing time: Sat 01 Jan 2022 10:02:40 +0000
ROA not before: Sat 01 Jan 2022 10:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44247
IP address blocks: 84.1.247.0/24 maxlen: 24
84.1.45.0/24 maxlen: 24
84.1.46.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459851404 (0x1b68c68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe5116b39afbfefa47e457bf463f558ce847be23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:3d:e9:ad:30:ef:ef:2c:c6:fb:01:80:98:
94:7e:6e:7f:14:00:93:15:d7:91:5f:9b:dd:ff:52:
79:f2:ae:76:a1:13:95:f0:d3:95:a4:34:ff:a0:a4:
19:b6:e6:2c:66:85:aa:f3:9a:c8:1e:fb:99:51:ba:
55:8f:69:e4:85:0a:9b:42:ff:2d:d7:1a:72:70:3c:
f5:fc:08:f1:a2:a9:65:d2:3d:1a:ed:0c:3e:cf:d5:
31:85:d4:1d:cb:55:c0:0b:28:48:94:34:ac:8a:d3:
ba:dc:b1:3f:c0:85:aa:76:57:c4:b0:58:b0:4d:b9:
05:0d:af:6d:c2:5b:33:b6:2c:2a:59:a2:25:db:dd:
9c:d3:2d:87:d8:5c:24:8d:41:84:c9:a5:ef:af:fd:
1e:05:87:dc:87:f7:5a:21:b7:68:1b:3c:7c:a7:79:
5b:a8:26:b3:28:3d:b1:4f:20:11:78:40:b5:cb:a8:
56:e8:69:15:56:bc:2e:22:89:eb:76:6c:48:f8:81:
42:85:19:2f:c4:ba:b0:a7:d0:d2:7b:bb:2c:4b:b4:
ff:ca:55:1b:58:5e:91:52:68:1a:36:e3:98:d5:c5:
30:a3:af:f0:d1:48:03:59:32:49:f6:20:ea:c7:01:
20:11:87:fc:b7:bf:4f:50:a1:88:7e:ab:d8:62:38:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:16:B3:9A:FB:FE:FA:47:E4:57:BF:46:3F:55:8C:E8:47:BE:23
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/_lEWs5r7_vpH5Fe_Rj9VjOhHviM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.45.0-84.1.47.255
84.1.247.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c6:9a:d1:83:4b:17:4f:89:11:af:b0:7d:20:a1:6f:32:2e:
2f:c1:2b:7c:4c:7a:22:50:33:23:95:13:5f:04:c1:c6:39:ea:
35:82:02:64:2a:20:82:6f:3a:5e:5a:84:9d:13:61:33:98:4d:
a7:c3:e5:42:7b:db:8d:80:08:f4:5a:b3:d6:0b:92:e3:74:e5:
f3:49:e0:8a:be:32:61:41:85:53:ec:37:15:d7:2b:6a:af:be:
bb:ce:49:f9:9c:ba:7b:cb:6d:2a:df:78:73:b3:2a:f6:39:8f:
ab:87:c0:db:e5:89:5c:b2:49:8f:1e:94:99:0d:4c:9c:f0:b9:
ca:0a:f4:0f:3a:c7:18:7c:d2:00:3a:49:fb:3d:fe:5b:20:c1:
f4:6c:c1:b3:76:b6:0e:e3:59:ab:4b:8e:dc:46:cd:94:e7:d0:
c0:a3:50:c1:44:01:45:5f:06:84:1a:88:47:9f:82:20:a0:6c:
09:1b:37:68:b4:ac:ea:50:e0:97:d0:c7:9a:10:e8:62:57:b8:
0c:03:fe:d2:ae:32:ae:02:33:40:ff:ea:1a:ee:0d:e5:87:ef:
08:36:26:b3:8b:77:44:bd:ae:33:65:22:77:08:15:3a:22:49:
e7:44:64:8c:aa:9c:db:95:dc:b5:41:c1:bb:0a:88:51:a3:4a:
fe:51:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org