Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/fc8V-g8ttTntQXQ5R5Q-BtSDsTM.roa
File: fc8V-g8ttTntQXQ5R5Q-BtSDsTM.roa (raw, json)
Hash identifier: aPr/VZdDgpxdFE6qQqzwFT5EHpmKZZEsjgQXOPcxctI=
Subject key identifier: 7D:CF:15:FA:0F:2D:B5:39:ED:41:74:39:47:94:3E:06:D4:83:B1:33
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 0183EA471A5FBC82BFA8A6C4BDF0C94E097C
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/fc8V-g8ttTntQXQ5R5Q-BtSDsTM.roa
Signing time: Tue 18 Oct 2022 08:47:51 +0000
ROA not before: Tue 18 Oct 2022 08:47:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39538
IP address blocks: 195.244.0.0/23 maxlen: 23
194.31.221.0/24 maxlen: 24
194.15.191.0/24 maxlen: 24
2001:67c:2308::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:47:1a:5f:bc:82:bf:a8:a6:c4:bd:f0:c9:4e:09:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Oct 18 08:47:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dcf15fa0f2db539ed41743947943e06d483b133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:72:08:8c:ed:56:3a:ee:90:16:87:fd:2b:
94:7f:a3:09:0b:fc:92:0d:23:bf:fb:cf:29:0a:fb:
82:3f:6a:b8:69:67:3e:ea:a3:d9:d7:25:23:5e:15:
83:1f:17:45:ed:86:2c:c6:3b:90:b4:1b:d4:7a:bd:
1a:7a:79:83:11:42:85:c5:bc:50:3c:d3:31:73:bf:
2a:52:37:f6:f3:c6:ed:2b:8a:95:66:b2:15:a4:50:
c2:75:ef:04:c9:64:ff:3f:2b:1f:6c:75:3a:5b:de:
65:04:11:49:31:9f:d5:40:f1:81:24:07:87:9e:95:
07:3b:ac:4f:0c:0c:98:c3:09:44:c5:30:82:02:52:
4d:67:e5:1a:5b:8c:64:fa:03:26:53:e3:e2:17:e6:
27:5a:73:26:8d:85:ee:ff:56:d3:f5:c6:17:6b:09:
23:db:2d:49:f4:25:97:a9:a0:81:0a:93:73:a9:2e:
c5:6a:2e:ef:e4:68:51:fb:6c:18:3a:0b:82:75:8f:
2d:fd:a7:f0:e5:d8:87:a8:3f:2e:5b:78:48:32:58:
c6:da:5e:15:69:47:41:d1:f2:8e:ad:03:da:ab:d0:
d5:cd:28:89:6f:83:41:63:79:2e:c6:9b:2d:46:76:
c1:da:d9:c0:1a:f4:d7:a3:c8:2c:12:e0:6c:05:fe:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CF:15:FA:0F:2D:B5:39:ED:41:74:39:47:94:3E:06:D4:83:B1:33
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/fc8V-g8ttTntQXQ5R5Q-BtSDsTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.191.0/24
194.31.221.0/24
195.244.0.0/23
IPv6:
2001:67c:2308::/48
Signature Algorithm: sha256WithRSAEncryption
9b:a2:8d:65:2d:bf:30:08:09:27:09:21:d9:f4:29:ff:e6:39:
92:da:8e:97:76:7c:23:50:76:6c:24:a2:18:ea:46:ae:c4:63:
31:44:c4:0f:bc:76:a0:83:06:96:84:9e:59:86:33:24:4d:d4:
df:b4:78:eb:2c:6b:27:7f:68:8e:39:89:24:f2:d3:4b:93:10:
b9:30:59:de:50:c7:c9:7a:ac:65:f4:85:1a:89:d6:b1:ab:88:
66:8f:09:f7:03:ee:98:7f:01:d7:b8:cc:be:a3:b3:9d:3e:46:
e9:28:1a:7b:3d:a5:55:78:e2:dd:8e:0c:a4:09:e7:7c:a9:d0:
12:21:a3:73:f2:08:8b:75:e5:1f:bf:0d:d5:d1:00:2f:a7:42:
f5:ff:8a:81:39:85:bc:1a:97:8a:cd:f5:9e:40:f6:8f:14:33:
1b:ed:ed:12:36:2d:17:2e:55:c9:1e:c0:74:81:c1:6f:ca:65:
a7:75:06:6b:79:c6:18:c7:a8:0f:27:3a:de:11:cc:7f:78:c3:
d5:e7:8c:0b:e6:33:cf:ac:6d:fc:8b:d2:ff:5a:84:84:41:24:
93:09:02:0f:21:1d:6f:cd:51:cb:d7:26:0c:78:05:3b:b0:df:
f4:68:08:90:78:68:65:30:f3:20:e5:2d:47:cd:80:bd:e9:e7:
7e:f5:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:02 2023 by rpki-client on console-fra.rpki-client.org