Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/f2LSLZmC2hwF9euezr0bRWpC6dY.roa
File: f2LSLZmC2hwF9euezr0bRWpC6dY.roa (raw, json)
Hash identifier: SeY0YSXJEOZ1J7h606AiR/TRYKMfCmAYlAsoKaYGEU8=
Subject key identifier: 7F:62:D2:2D:99:82:DA:1C:05:F5:EB:9E:CE:BD:1B:45:6A:42:E9:D6
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 0319BC33
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/f2LSLZmC2hwF9euezr0bRWpC6dY.roa
Signing time: Sat 01 Jan 2022 09:03:39 +0000
ROA not before: Sat 01 Jan 2022 09:03:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51809
IP address blocks: 67.208.52.0/22 maxlen: 22
45.82.140.0/22 maxlen: 22
185.232.119.0/24 maxlen: 24
63.135.72.0/21 maxlen: 21
2a10:d580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52018227 (0x319bc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Jan 1 09:03:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f62d22d9982da1c05f5eb9ecebd1b456a42e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:9a:dc:2d:07:5a:76:ea:76:4c:80:24:4e:
b9:34:f0:9b:d8:6c:3c:49:66:3b:8f:17:21:dd:00:
c5:2b:09:1d:70:cb:c6:14:80:c7:09:d6:1a:a2:c7:
f5:dd:d0:74:7e:02:39:c4:d3:d8:9a:c7:20:88:50:
bc:3c:11:90:bb:a9:e3:f0:c4:18:d1:5b:19:ff:f2:
de:d9:76:bb:02:35:15:94:99:be:19:90:32:58:c8:
86:92:17:d9:8b:36:77:81:0f:6d:89:a7:07:a1:0e:
1a:2b:88:02:f3:b9:01:e2:b4:51:df:a2:1d:b1:d6:
ae:97:47:b4:82:de:e5:bb:3a:5e:f0:5d:ad:7f:21:
69:b1:68:5f:ea:4d:ad:9e:f5:05:17:d3:62:f8:a8:
48:5f:51:a4:1d:63:79:5d:43:8c:bd:b6:16:07:1d:
3c:91:50:47:1a:cd:ad:39:89:35:67:87:0a:c5:47:
51:4e:a7:35:0b:94:b5:85:05:49:4f:09:5c:30:e2:
09:30:01:f2:c4:a4:84:fa:5f:fa:d5:e2:2a:42:38:
a0:98:61:a6:15:75:37:59:25:15:71:c4:85:e1:ff:
76:72:d5:d8:0f:ac:0e:12:3a:b7:7e:b8:85:65:4a:
35:d9:8b:0d:ab:3e:d2:25:67:60:b6:02:96:a0:bb:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:62:D2:2D:99:82:DA:1C:05:F5:EB:9E:CE:BD:1B:45:6A:42:E9:D6
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/f2LSLZmC2hwF9euezr0bRWpC6dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.140.0/22
63.135.72.0/21
67.208.52.0/22
185.232.119.0/24
IPv6:
2a10:d580::/29
Signature Algorithm: sha256WithRSAEncryption
18:31:a6:e4:b2:77:26:6f:c8:43:7c:01:82:d8:58:36:5a:19:
c1:fe:24:79:b2:5c:12:25:2a:ef:e9:0c:51:5c:87:18:13:ce:
67:7e:ff:4c:59:63:81:c7:30:01:81:c1:77:9c:12:45:a1:1a:
d8:4a:f5:a7:df:49:77:8c:53:2a:7a:96:a6:c5:94:a8:79:69:
87:58:fe:2c:d8:1b:3c:d9:99:94:a1:ed:d8:ad:8d:d3:4f:4b:
a4:f1:80:91:3f:27:fb:5f:97:02:bc:99:d1:e3:46:bb:71:ef:
4b:66:b1:26:2e:0f:b0:5d:0c:87:d2:6d:cb:a6:f2:92:69:22:
71:af:5b:7d:ed:60:8a:a1:b6:37:c2:f2:fe:18:21:e9:00:79:
79:c8:78:f9:3e:38:89:07:24:da:e4:09:a9:dd:ed:94:92:f2:
2a:a6:2f:55:2d:01:3b:3c:ef:23:30:0b:f3:89:35:d7:0b:3a:
d6:63:2c:ab:87:40:3f:14:75:8e:7e:2d:33:9a:c1:58:bc:37:
85:bc:9d:d2:8e:20:28:29:28:66:83:a6:eb:7c:94:13:ed:98:
8c:ea:7f:5e:31:e2:6a:4e:9c:b0:3c:b2:7c:27:da:fd:e3:42:
dc:12:d2:47:83:5a:7a:5a:bb:c0:87:19:c9:17:8b:c2:f0:3a:
8c:dd:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:25 2023 by rpki-client on console-ams.rpki-client.org