Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fLlcUZnoWsotoCWbVyew9NqhdOc.roa
File: fLlcUZnoWsotoCWbVyew9NqhdOc.roa (raw, json)
Hash identifier: 4TD+QuTszQpDhopETV0V6+7oxucQFQXqtcyoN94zfI4=
Subject key identifier: 7C:B9:5C:51:99:E8:5A:CA:2D:A0:25:9B:57:27:B0:F4:DA:A1:74:E7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0182B0633B796157823C294CD47ECBBDD3E3
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fLlcUZnoWsotoCWbVyew9NqhdOc.roa
Signing time: Thu 18 Aug 2022 09:57:49 +0000
ROA not before: Thu 18 Aug 2022 09:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 45.8.191.0/24 maxlen: 24
5.180.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:63:3b:79:61:57:82:3c:29:4c:d4:7e:cb:bd:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 18 09:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cb95c5199e85aca2da0259b5727b0f4daa174e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:5b:19:93:5d:70:b2:a7:c2:53:fb:08:eb:
68:1e:84:a8:3c:df:32:90:16:b0:74:cf:91:cd:82:
8f:17:d4:00:28:4d:f9:fb:31:bc:25:d7:2a:d9:3a:
22:a3:88:06:98:ef:96:b9:22:19:a4:45:a0:d2:ba:
7a:83:1a:52:49:ae:79:ee:ff:8c:bd:7e:ff:44:8a:
f3:de:fc:57:ba:db:a1:fa:c6:01:8f:44:21:1a:a0:
a7:40:03:32:51:3e:5f:e2:9f:90:ee:f9:3e:4c:46:
05:70:f7:47:54:5a:4f:b8:ea:b7:86:cc:df:1f:02:
c4:7a:44:9c:c1:02:35:87:ec:70:83:76:53:7b:80:
94:dc:7e:38:3a:80:4d:c9:01:03:db:89:0f:59:41:
ee:35:72:18:36:8d:1f:ca:a1:29:3f:a1:b8:e3:72:
48:d5:52:d7:40:7d:94:4a:95:73:a2:c3:c9:65:e7:
f7:30:d5:3f:16:bd:b8:56:80:58:46:24:d9:a1:8f:
b3:f0:aa:d4:ab:e1:d3:7d:22:48:a9:30:f8:4c:85:
95:f8:7a:8e:93:65:57:7a:80:7d:41:46:64:2e:93:
ab:fc:5e:80:9d:00:b3:fc:47:17:c6:d4:1a:60:e0:
28:80:6e:6f:55:fa:54:76:79:38:cd:69:25:2d:67:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B9:5C:51:99:E8:5A:CA:2D:A0:25:9B:57:27:B0:F4:DA:A1:74:E7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fLlcUZnoWsotoCWbVyew9NqhdOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.83.0/24
45.8.191.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a4:35:92:fb:4a:2c:07:65:42:b9:64:14:af:26:c8:80:5b:
55:04:08:b5:5e:31:0c:98:6d:96:38:d6:b0:e4:ad:ac:67:97:
fa:88:00:88:26:7f:b2:a7:72:02:24:a7:23:61:4c:28:ef:e7:
23:5f:45:a7:ea:34:de:a4:ec:b7:d7:50:ad:f2:3e:43:e6:40:
30:54:ee:ef:d7:08:34:d7:9c:44:bd:14:64:63:48:ed:3f:ed:
f9:a2:64:64:10:b8:b7:34:80:9b:de:75:08:43:dd:ab:06:09:
24:73:6a:09:45:d5:10:ab:be:fb:3a:43:aa:a6:d4:73:ba:ea:
fa:d0:e8:18:91:26:ee:06:01:89:ec:df:68:62:c0:b8:f8:cd:
0c:fa:1d:79:77:21:4d:1c:f9:32:f2:ce:10:26:75:7d:0d:83:
a9:a5:88:bb:44:c7:db:34:4e:70:4c:25:c9:8c:50:90:51:76:
4f:df:5f:69:ba:ae:5d:94:9f:dd:7a:69:71:8b:2f:d3:23:04:
fe:a1:d5:ea:c8:09:5b:50:7a:2e:bc:35:d6:c3:73:5b:4d:82:
45:de:73:10:24:13:55:c1:08:44:f2:e8:9c:24:c6:7a:99:06:
93:7e:95:e5:7b:18:d5:db:c4:d6:0a:80:ea:88:d3:72:98:28:
65:2a:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org