Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/f2nMjUdEsyxW1Dk-LF5UyMDwE5w.roa
File: f2nMjUdEsyxW1Dk-LF5UyMDwE5w.roa (raw, json)
Hash identifier: P0PNiSQmFxbrtbe2KYVtZBCcYIAMOj/aJiRErjy4UMo=
Subject key identifier: 7F:69:CC:8D:47:44:B3:2C:56:D4:39:3E:2C:5E:54:C8:C0:F0:13:9C
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 33911A7E
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/f2nMjUdEsyxW1Dk-LF5UyMDwE5w.roa
Signing time: Sat 01 Jan 2022 04:52:48 +0000
ROA not before: Sat 01 Jan 2022 04:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59776
IP address blocks: 185.72.120.0/22 maxlen: 24
2001:678:82c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865147518 (0x33911a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 1 04:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f69cc8d4744b32c56d4393e2c5e54c8c0f0139c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2b:0a:41:f1:21:9b:40:89:46:65:4f:71:87:
83:a5:89:bc:a8:3a:d3:c7:46:59:e0:b2:e9:19:f4:
d1:17:3b:4c:c7:39:6b:2c:11:bf:60:b9:eb:b7:15:
bc:ae:93:95:3b:20:55:83:0a:cc:23:9a:79:ba:5b:
bd:14:5a:ae:6d:ab:73:fe:45:d0:7f:77:78:bc:e0:
ba:fc:85:10:a1:a8:a8:15:ab:9b:0e:cf:74:4d:68:
92:c5:a3:98:a3:38:5e:dc:25:2e:a4:a1:1f:d0:2d:
68:28:4a:2f:18:a5:ce:cb:c8:3b:58:89:50:6b:b2:
9c:58:57:56:1e:e6:77:df:73:72:29:81:d8:e8:4d:
c6:40:3e:8d:3b:e6:36:5b:14:aa:9e:5a:89:3e:f2:
b7:ca:4a:33:55:53:a2:f3:34:60:69:49:7e:70:92:
27:56:c2:64:55:7f:fc:c4:e4:21:0a:04:c9:13:90:
b2:aa:71:80:6c:3d:a6:8c:cc:b4:68:6d:d2:1c:2b:
58:26:b1:f3:4e:6c:3d:66:6a:3a:02:92:97:e9:bb:
4f:4e:a1:5e:83:4f:18:9a:aa:34:d7:4c:eb:5c:42:
ac:f3:05:b8:d2:42:29:8b:8a:f4:3d:4e:7c:07:36:
4b:af:12:07:ab:be:47:6f:0d:93:dc:4c:d4:2a:f4:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:69:CC:8D:47:44:B3:2C:56:D4:39:3E:2C:5E:54:C8:C0:F0:13:9C
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/f2nMjUdEsyxW1Dk-LF5UyMDwE5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.120.0/22
IPv6:
2001:678:82c::/48
Signature Algorithm: sha256WithRSAEncryption
40:71:43:d5:47:3a:ca:1c:a6:5d:39:38:38:20:d8:2b:9e:a9:
f6:b0:bd:3b:45:42:dd:64:2a:f1:ac:55:1f:25:22:67:77:ec:
99:ea:41:70:a3:5b:6f:2f:f6:b7:f8:a6:ab:26:66:ff:8d:79:
15:a2:d7:39:86:13:08:de:00:1d:41:e0:97:be:c4:8f:bf:04:
31:70:5e:88:13:c8:70:8a:eb:33:a8:d8:2f:06:30:e7:70:54:
15:96:a9:6a:de:8d:ca:7a:45:ee:73:e2:cc:cb:a4:2a:06:ee:
c2:ad:0b:d5:71:f1:2c:7b:5e:ad:09:8b:b3:b9:79:99:f6:99:
f5:20:45:86:03:9a:97:ba:91:82:c9:8c:65:30:80:be:57:2d:
ed:fe:1e:28:5e:20:e4:e0:8f:d6:67:8e:ff:3f:61:ea:63:ad:
2a:5e:06:3f:a1:ab:85:1c:d0:66:c5:9a:aa:04:52:58:87:0e:
5a:cd:cb:2d:a2:f6:03:12:7c:db:a9:24:74:31:10:52:24:26:
7c:53:cd:c6:9b:1e:af:d8:d8:b3:07:ce:f5:ad:e1:30:58:e2:
c5:aa:13:e2:8f:21:fc:8b:d5:8a:50:bc:23:8d:b5:69:30:7b:
a5:12:9b:27:e4:d2:56:02:f0:3f:2e:cb:db:ae:c8:a2:4d:f4:
c3:dc:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org