Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/tnfgBFCWYgdBA9BdlZZhVuz_qww.roa
File: tnfgBFCWYgdBA9BdlZZhVuz_qww.roa (raw, json)
Hash identifier: apcCG+NmJsQIRPTZTL+5AoLrYkQqQ9VaNkEjGOo0VeI=
Subject key identifier: B6:77:E0:04:50:96:62:07:41:03:D0:5D:95:96:61:56:EC:FF:AB:0C
Certificate issuer: /CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Certificate serial: 0AA3B907
Authority key identifier: 48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/tnfgBFCWYgdBA9BdlZZhVuz_qww.roa
Signing time: Sat 01 Jan 2022 01:52:44 +0000
ROA not before: Sat 01 Jan 2022 01:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41103
IP address blocks: 185.91.100.0/22 maxlen: 24
195.95.187.0/24 maxlen: 24
2a03:8920::/32 maxlen: 48
2001:67c:15f4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178501895 (0xaa3b907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f68aa2e755aa0ac69a70fe8efebea4c2335611
Validity
Not Before: Jan 1 01:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b677e004509662074103d05d95966156ecffab0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:01:95:b1:59:10:fe:64:f7:47:2c:eb:c9:
d8:b2:02:1e:1d:a2:f3:78:5c:f6:18:07:c7:de:6a:
8b:40:6e:0a:03:e9:6a:bb:be:8d:16:da:6d:8b:22:
82:80:20:f1:fc:7a:bd:8c:64:cd:05:e7:3c:77:1f:
fd:ea:43:ce:6a:c8:80:8c:81:8d:f9:bb:26:74:8e:
c1:bd:c9:88:8d:55:7c:b5:a1:3f:82:54:cb:0c:3c:
5f:9e:c7:81:2b:ad:0a:9f:98:25:27:0a:78:78:c9:
91:6e:34:6c:ef:20:1c:eb:e3:d2:b7:46:ff:1b:12:
e9:d4:ac:8e:ee:37:14:c3:4f:03:7a:69:a8:b8:1e:
e1:53:3a:75:b4:15:d5:41:ee:23:5f:33:06:9c:f3:
0d:87:bc:cb:a5:97:41:c1:77:7c:d6:6a:fb:de:c9:
df:e6:6d:ef:f9:76:9f:f2:8a:ab:d4:95:5a:57:7b:
89:a9:ff:6f:0b:99:1b:0b:39:30:1f:fc:26:ec:45:
6c:36:6c:fd:71:07:bf:ca:b4:85:ef:e3:7a:ff:e8:
58:41:da:1a:1b:f7:07:8a:b2:43:33:34:a9:20:2d:
7f:a5:00:b1:f7:a0:26:57:33:29:30:ec:6b:1b:f1:
9f:39:59:2c:0c:da:1d:6a:2d:c2:53:a7:01:1b:cb:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:77:E0:04:50:96:62:07:41:03:D0:5D:95:96:61:56:EC:FF:AB:0C
X509v3 Authority Key Identifier:
keyid:48:F6:8A:A2:E7:55:AA:0A:C6:9A:70:FE:8E:FE:BE:A4:C2:33:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPaKoudVqgrGmnD-jv6-pMIzVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/tnfgBFCWYgdBA9BdlZZhVuz_qww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ec287d-efab-4341-be53-f2b544b0fe7b/1/SPaKoudVqgrGmnD-jv6-pMIzVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.100.0/22
195.95.187.0/24
IPv6:
2001:67c:15f4::/48
2a03:8920::/32
Signature Algorithm: sha256WithRSAEncryption
96:51:d2:64:cf:73:be:80:ec:49:4c:cb:51:41:53:8a:f5:43:
a8:cc:d5:59:e6:e8:b8:48:6b:0a:61:4f:20:03:e5:01:ac:80:
09:df:4c:07:6d:38:d6:73:6a:6c:15:2b:bd:1e:ea:14:3d:5a:
27:45:8f:ff:7f:4e:31:a3:a5:83:e2:f9:bc:02:9e:9a:19:60:
d7:f6:54:01:8c:05:cd:96:1a:ca:90:6f:58:0e:c0:f5:69:93:
e2:f6:c7:3c:01:75:49:1b:f4:ee:3e:8d:3c:4e:aa:a3:b1:c6:
99:50:17:eb:d4:67:85:ef:78:97:f6:04:4a:38:be:5c:46:d1:
21:3e:a8:0a:8a:94:48:8e:75:03:2b:47:e5:3d:84:65:14:0d:
66:31:18:a7:42:d7:33:07:70:f1:f3:c7:1a:85:dc:c8:2d:c2:
fc:5b:2d:bc:52:2d:1d:d9:e2:65:cf:89:48:7c:37:4d:8b:f5:
60:17:74:20:30:e6:40:39:27:04:08:c1:e4:b9:f0:93:61:36:
47:78:96:80:96:b6:00:7f:18:64:9a:14:72:9f:0c:e7:7d:63:
d2:1d:6f:f8:54:5e:a6:29:ce:d1:a4:80:1b:26:cd:f4:17:5a:
51:46:b8:5a:93:8b:99:0d:7f:4e:99:b1:e2:0c:8a:94:df:f0:
c8:3a:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:26 2023 by rpki-client on console-fra.rpki-client.org