Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/FeNHdiwYLDh2TwcAw7NbdJKu--M.roa
File: FeNHdiwYLDh2TwcAw7NbdJKu--M.roa (raw, json)
Hash identifier: tYHaqaYDYZ/Gkh/rQr7Hvs3zMu/0wE/wG+kt5B9f3xE=
Subject key identifier: 15:E3:47:76:2C:18:2C:38:76:4F:07:00:C3:B3:5B:74:92:AE:FB:E3
Certificate issuer: /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial: 018486059670B8085A3487E6039248941D78
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/FeNHdiwYLDh2TwcAw7NbdJKu--M.roa
Signing time: Thu 17 Nov 2022 14:37:03 +0000
ROA not before: Thu 17 Nov 2022 14:37:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200735
IP address blocks: 185.55.72.0/24 maxlen: 24
185.55.75.0/24 maxlen: 24
185.55.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:05:96:70:b8:08:5a:34:87:e6:03:92:48:94:1d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
Validity
Not Before: Nov 17 14:37:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15e347762c182c38764f0700c3b35b7492aefbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:e8:78:7c:43:66:b5:9f:c5:c7:fe:e3:1a:
12:61:3f:0d:77:45:74:e2:53:e8:31:55:ea:fd:5a:
53:8b:37:c2:14:0b:79:a3:d6:a0:66:4c:5a:59:47:
6b:a0:d2:6a:97:d3:81:b3:4f:3b:83:16:68:06:61:
20:08:ba:c0:9a:1e:5d:da:93:f1:41:65:b0:f3:ae:
39:c1:01:23:f0:1d:e2:61:eb:9a:8d:8c:c5:9c:7a:
9d:0a:e2:fe:fb:e7:8d:8e:bf:0e:60:75:3c:43:3a:
4d:92:dd:6d:b1:90:1b:fd:b8:f4:13:43:b7:64:54:
6f:79:a6:1c:15:1b:17:31:a1:f7:4d:cf:48:6f:83:
48:9e:55:70:5e:ab:4d:a6:88:bb:7f:ce:b6:44:c8:
6a:d8:fb:1a:de:5d:29:cf:94:15:be:47:51:25:55:
8b:94:5a:d0:0e:48:b9:c8:c4:a8:b0:35:99:59:8a:
a4:c8:15:93:a1:0d:3d:69:71:6f:a4:a2:6e:cd:3c:
72:bf:6b:57:3a:d7:36:5a:f1:d6:dd:d1:9f:80:79:
55:e4:58:ef:29:3a:16:06:d6:b6:9f:6a:ac:04:29:
2c:3d:c3:3b:9b:e7:27:e8:29:12:e9:db:90:9d:d5:
9b:1d:5b:9a:fd:ea:ef:9e:1a:7e:81:8c:ea:c2:2d:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E3:47:76:2C:18:2C:38:76:4F:07:00:C3:B3:5B:74:92:AE:FB:E3
X509v3 Authority Key Identifier:
keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/FeNHdiwYLDh2TwcAw7NbdJKu--M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.72.0/24
185.55.74.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:c3:50:95:86:0f:a7:d5:55:50:f4:43:88:8c:74:52:3f:2d:
02:7a:e1:c8:2f:48:d9:b9:d7:ea:21:b8:0e:65:28:89:d7:8a:
1f:3c:5e:b1:51:a6:74:3a:7b:e9:31:fd:9d:2b:d1:bc:99:3c:
45:4c:31:e2:db:63:fc:50:01:07:84:5c:48:36:5a:e7:0e:9d:
e9:90:bd:c1:66:1e:3c:e7:17:fd:85:01:3f:db:e9:99:64:71:
5e:3d:c9:7c:85:d7:1c:5d:f1:8e:7f:ac:d7:2e:bf:6e:c0:bd:
36:2e:d5:79:3a:3b:64:1d:b3:f6:b1:2b:87:a2:4f:8e:c6:8b:
9a:66:c6:4e:c2:8c:6b:71:2a:82:0c:db:ea:e3:01:54:c5:ef:
fb:e1:ee:99:51:e7:74:4f:06:95:20:b6:ac:05:32:4d:54:7c:
61:53:4e:d9:c6:f0:8f:ee:56:8d:59:17:76:0a:ec:1d:36:86:
d7:ba:c4:a8:aa:8f:2a:33:a8:6f:ba:da:96:76:e3:8b:7c:8b:
a0:ad:31:96:13:b6:d7:d6:bd:36:57:60:c6:5b:eb:e5:06:cf:
ae:e2:be:9e:21:d5:12:cb:c3:56:eb:86:3a:9a:a9:6f:cb:bc:
ee:e6:64:e5:18:7c:e5:2a:1d:90:37:2d:41:6f:a0:69:c2:8e:
05:65:19:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:55 2023 by rpki-client on console-fra.rpki-client.org