Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/FZeIC7oBnjA2Kvm7NBf0rxHROSI.roa
File: FZeIC7oBnjA2Kvm7NBf0rxHROSI.roa (raw, json)
Hash identifier: pito5yl+vBCYaFlP8dIt7zBkcpprUGh2KBtj3SMQAKo=
Subject key identifier: 15:97:88:0B:BA:01:9E:30:36:2A:F9:BB:34:17:F4:AF:11:D1:39:22
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 0183BA082E431506644EE92D5BE3D0D232B5
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/FZeIC7oBnjA2Kvm7NBf0rxHROSI.roa
Signing time: Sat 08 Oct 2022 23:57:21 +0000
ROA not before: Sat 08 Oct 2022 23:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30902
IP address blocks: 78.111.4.0/24 maxlen: 24
87.247.174.0/24 maxlen: 24
87.247.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ba:08:2e:43:15:06:64:4e:e9:2d:5b:e3:d0:d2:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Oct 8 23:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1597880bba019e30362af9bb3417f4af11d13922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:3f:f5:3d:06:e1:7f:45:e8:cf:ba:e9:40:
f9:24:c2:d3:87:da:98:08:7b:88:80:a3:fa:c1:c6:
c3:8f:18:20:dd:57:14:a6:a2:b8:9c:22:da:a9:44:
40:91:c9:7a:ca:f6:fb:cd:2a:f2:67:6c:6b:f9:82:
4e:47:c7:36:ed:66:d2:cf:ef:e9:00:64:81:75:bb:
dc:73:3e:ba:d7:75:79:2f:a7:6f:4c:df:fe:18:70:
20:6f:ae:b8:28:d7:87:47:3f:0c:64:ef:72:aa:92:
7c:bb:8e:91:c1:97:28:cd:09:ee:7b:a1:f4:f0:de:
41:2e:e2:3c:a5:95:62:53:cb:46:43:3c:07:85:21:
3f:56:95:b0:fc:6c:e1:9d:2a:5c:fa:2e:52:e7:26:
fd:10:05:63:f2:b7:c8:e4:20:26:0c:5d:f1:90:ec:
db:f8:24:20:8d:5b:2a:0c:c0:d9:86:29:ee:56:cd:
32:76:b4:db:b5:70:a5:0d:66:c6:9e:5d:4e:a2:52:
a1:15:29:9f:33:51:c8:8c:80:64:bf:25:7d:84:b3:
2b:c2:f0:c3:0d:7e:68:cd:c7:00:a7:bc:b3:0a:55:
9d:d6:c3:fb:70:39:c8:b8:0e:9e:55:ba:68:a1:e1:
8f:07:42:c4:8a:1c:62:5f:96:40:5c:76:7d:df:5a:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:97:88:0B:BA:01:9E:30:36:2A:F9:BB:34:17:F4:AF:11:D1:39:22
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/FZeIC7oBnjA2Kvm7NBf0rxHROSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.4.0/24
87.247.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:ca:b8:f5:22:3e:78:bb:43:ca:c0:07:5d:a4:1d:b5:cc:cd:
42:b5:7f:b0:47:25:83:9c:25:b2:21:b8:ce:80:76:7f:7d:a6:
bc:95:db:c2:a5:a0:4e:8c:7e:0e:86:83:da:99:ce:96:db:32:
26:ae:06:b1:0d:ce:22:56:c1:3c:f9:16:58:92:ee:75:a8:7d:
cc:db:99:2e:7c:36:73:d0:34:7e:ae:89:ac:7e:9b:74:8a:70:
61:a3:50:18:f4:a4:5a:3a:ea:ed:33:ae:57:a8:eb:27:ad:ae:
1b:a0:9f:cd:c2:7d:e9:9b:1d:fb:0a:36:22:bc:28:00:2c:20:
ac:85:dd:1b:91:b3:1f:22:60:87:75:48:a1:b6:ac:df:15:e4:
e8:5a:a0:7b:f7:ca:71:ef:0c:e3:1b:2c:88:48:12:7c:38:c6:
d4:a3:d2:3b:c4:b2:17:bf:67:e5:31:29:c0:4c:54:03:7f:18:
ac:8f:04:16:f5:2b:18:0a:a6:7d:ad:3e:9a:10:32:8c:32:92:
01:77:77:f8:67:f8:60:d6:b5:6c:f6:f9:bb:ec:7b:28:5d:27:
70:0f:99:0d:e7:97:2b:30:f3:d0:f7:f0:1e:b0:04:9a:e0:0f:
ad:1c:54:ac:ad:c6:7f:61:60:2a:2f:36:f9:42:87:cc:b1:ef:
8a:ac:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-ams.rpki-client.org