Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/Fg7etBhBIMzLqLG4x5eQMqLIlZM.roa
File: Fg7etBhBIMzLqLG4x5eQMqLIlZM.roa (raw, json)
Hash identifier: M8Gzij8oPqJe7E++tv5eMFRuow4SbJ2xQA5ZX3Jy8QY=
Subject key identifier: 16:0E:DE:B4:18:41:20:CC:CB:A8:B1:B8:C7:97:90:32:A2:C8:95:93
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 0250B4C9
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/Fg7etBhBIMzLqLG4x5eQMqLIlZM.roa
Signing time: Sat 01 Jan 2022 00:57:05 +0000
ROA not before: Sat 01 Jan 2022 00:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 193.134.216.0/21 maxlen: 21
185.144.36.0/22 maxlen: 22
2a07:3e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38843593 (0x250b4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jan 1 00:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=160edeb4184120cccba8b1b8c7979032a2c89593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:fc:00:27:57:8c:60:91:8e:d0:84:90:2d:
b8:c7:13:5f:6e:86:32:1d:7e:80:06:87:3f:74:40:
e7:9d:05:42:15:0a:2e:ad:09:08:a5:cc:ef:e2:ff:
69:ed:95:c3:80:90:f8:56:93:ea:f4:3f:96:c3:d6:
e7:ea:af:bf:d0:fa:66:1c:3c:d7:f1:4f:0e:37:5a:
68:14:d0:e4:ed:e7:65:22:21:60:d9:7d:1a:92:68:
80:96:2a:8c:dd:e3:7f:8e:e4:91:00:81:8c:bf:87:
d6:32:63:b1:7a:c5:3b:74:f7:8e:f5:a9:03:d1:87:
61:4c:6d:bd:8d:de:31:55:cc:2e:31:7e:03:c4:a0:
95:df:43:45:5f:bf:17:0a:08:85:37:9a:80:82:89:
fb:d8:fa:4e:79:52:b4:2d:59:15:df:07:ce:fa:24:
29:8e:c7:c4:52:ab:23:04:a7:3d:fa:12:81:bb:21:
00:ab:d0:56:0a:5a:32:7a:27:08:cc:d6:7f:10:ce:
fc:84:6b:33:b2:70:41:64:63:4b:63:8b:cf:7e:29:
55:43:58:fa:b8:f1:b9:5e:ef:a4:a9:f9:67:a2:84:
27:06:ff:06:a7:29:bf:49:d6:1b:2f:df:8f:cf:2b:
63:a1:c7:e0:ad:dc:4f:29:10:ea:f6:08:49:43:b8:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:DE:B4:18:41:20:CC:CB:A8:B1:B8:C7:97:90:32:A2:C8:95:93
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/Fg7etBhBIMzLqLG4x5eQMqLIlZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.36.0/22
193.134.216.0/21
IPv6:
2a07:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
48:48:65:a9:41:88:8d:de:a1:7e:7f:98:21:d4:ef:1e:86:9d:
25:20:5b:77:01:8b:59:8b:89:14:a5:0c:6d:dc:f3:fe:43:13:
fc:37:c0:e0:c1:05:7a:13:e5:50:8b:21:f5:17:c0:ec:c7:26:
03:ac:19:65:79:c5:df:6a:68:8b:2f:66:7c:b8:7c:68:81:1f:
ee:97:e9:55:83:13:b2:c3:c8:64:d3:2d:4f:13:67:1e:71:4d:
e7:b5:40:d0:33:ed:7b:b5:af:75:1c:f5:5d:7f:73:45:fe:c9:
9f:e8:f3:9f:f4:d6:dc:e5:b7:f1:4e:cf:50:e3:0a:82:a0:08:
f4:43:ff:2a:15:cc:5c:ed:e3:b6:a5:8d:10:06:f4:45:b0:fe:
0f:5c:67:43:be:e6:51:a7:13:9a:88:88:4b:40:02:4d:b4:33:
cd:e0:1a:0d:7f:1f:c8:a8:33:8d:30:9c:fc:ef:8e:e6:67:01:
45:40:ec:84:12:a0:1d:be:ac:ad:ec:44:87:44:6c:5a:7f:6a:
c6:3a:f9:18:93:c2:08:c6:08:ac:3a:c4:d3:66:a2:87:5c:02:
64:e9:fb:0d:5f:5d:bc:dd:f2:b5:c1:c8:cb:2e:cf:30:e2:b0:
a8:06:1c:f9:0d:03:36:36:65:96:17:ef:c4:7b:f3:2b:b3:91:
cb:40:5d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:03 2023 by rpki-client on console-fra.rpki-client.org