Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/L_FuztHsnxC6bOIK5FkMZE7Dhkk.roa
File: L_FuztHsnxC6bOIK5FkMZE7Dhkk.roa (raw, json)
Hash identifier: wlU43BpL42lpNYUgoBsG9PubhYxIeiR2YX2AGVp8hLw=
Subject key identifier: 2F:F1:6E:CE:D1:EC:9F:10:BA:6C:E2:0A:E4:59:0C:64:4E:C3:86:49
Certificate issuer: /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial: 09795F6B
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/L_FuztHsnxC6bOIK5FkMZE7Dhkk.roa
Signing time: Fri 28 Jan 2022 14:20:09 +0000
ROA not before: Fri 28 Jan 2022 14:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42611
IP address blocks: 84.18.224.0/19 maxlen: 24
85.208.12.0/22 maxlen: 24
91.193.8.0/22 maxlen: 24
2a09:8040::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158949227 (0x9795f6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
Validity
Not Before: Jan 28 14:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ff16eced1ec9f10ba6ce20ae4590c644ec38649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:70:39:75:5b:f6:42:7e:63:fe:3d:fb:6a:
13:70:ce:fb:a8:82:99:e5:81:39:ab:64:02:6e:b1:
56:b4:6f:39:c9:16:5a:74:b7:b6:8b:d0:ae:bc:29:
71:2d:ff:de:b9:72:68:6a:29:aa:a8:4d:33:4b:ca:
c7:7a:93:37:16:11:3a:0c:5a:1a:63:c5:1e:a2:39:
e5:37:e6:81:0f:28:d3:4f:69:f2:3f:be:18:88:5d:
dd:c6:0d:6d:4a:8b:c8:ba:e7:8b:c3:4c:29:fa:bf:
03:f9:4b:b2:f3:7a:33:a3:76:5a:29:d2:d2:a6:53:
8a:86:9a:2d:aa:01:80:2d:8d:e1:cc:56:c9:3e:c0:
1f:a4:c8:46:37:cd:3e:39:ec:3c:9b:39:e7:e8:cc:
31:58:ec:ee:46:43:5d:27:aa:93:20:2f:b0:f6:2b:
a3:3e:e3:b4:b4:71:50:30:36:66:27:38:d6:e4:2b:
be:74:dc:ef:c0:b4:7e:a3:9c:fc:5a:ca:5a:64:f1:
8b:23:b7:65:21:a9:1a:6b:89:1b:97:5d:4f:ec:fd:
75:72:5b:18:b9:16:b0:1f:d5:1c:3d:31:c0:15:fa:
d2:f8:de:61:65:32:78:de:f2:ed:36:b8:0c:50:7d:
be:2c:2e:2a:df:cf:00:06:7d:0d:a9:4e:8f:92:42:
88:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:6E:CE:D1:EC:9F:10:BA:6C:E2:0A:E4:59:0C:64:4E:C3:86:49
X509v3 Authority Key Identifier:
keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/L_FuztHsnxC6bOIK5FkMZE7Dhkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.18.224.0/19
85.208.12.0/22
91.193.8.0/22
IPv6:
2a09:8040::/29
Signature Algorithm: sha256WithRSAEncryption
b5:1d:36:02:fb:4b:da:ea:62:1b:cf:09:cc:da:d6:06:27:bb:
fe:20:dc:ad:81:8a:d7:b4:16:3e:a0:3e:c8:68:b7:12:2d:96:
9d:1c:5d:bd:fe:1b:a2:bb:35:09:9c:9d:ff:3f:74:57:69:d6:
e1:81:dc:70:5b:9a:24:19:65:bd:db:3f:4f:1e:49:a7:13:fe:
5b:b4:9e:9a:95:2d:2e:18:7c:fb:de:cd:f2:66:58:8a:1f:f2:
55:2c:ad:82:c3:00:f5:ad:ad:90:ea:90:4f:6d:8b:b3:b4:90:
61:0c:ab:f7:7b:cf:eb:7b:a4:d0:4b:23:3b:48:89:34:d6:6b:
3a:06:8d:48:04:3a:7c:d6:30:7d:7a:09:39:2c:1d:eb:a0:6f:
56:92:a4:84:b0:b8:cc:a3:3c:c5:68:63:21:0d:49:d1:51:98:
f0:76:8d:67:e8:98:7d:ea:5c:d5:be:bd:66:32:14:95:76:05:
4a:63:7e:0b:97:59:f9:18:c6:a0:ae:8e:dc:04:7d:1b:43:94:
ed:b4:92:ed:f4:cf:7f:99:68:87:7b:51:08:47:fa:fe:79:ef:
5f:4d:4e:55:78:17:05:16:c7:7b:03:1e:5e:0b:bf:70:69:a3:
4e:41:28:59:f1:e8:3d:b8:81:61:cf:61:64:db:49:01:33:3c:
18:f6:9a:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:29 2024 by rpki-client on console-ams.rpki-client.org