Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F5FoLT9PyYtf_j0ZWB3_lg44FiA.roa
File: F5FoLT9PyYtf_j0ZWB3_lg44FiA.roa (raw, json)
Hash identifier: Uou0zu1N54RIDXAIq/df8OsBIpEIH3AK8sOIPWu6o5U=
Subject key identifier: 17:91:68:2D:3F:4F:C9:8B:5F:FE:3D:19:58:1D:FF:96:0E:38:16:20
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01848EB0F1AA0FF0A1177170781C195C1B83
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F5FoLT9PyYtf_j0ZWB3_lg44FiA.roa
Signing time: Sat 19 Nov 2022 07:01:11 +0000
ROA not before: Sat 19 Nov 2022 07:01:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48944
IP address blocks: 81.12.112.0/22 maxlen: 22
87.107.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8e:b0:f1:aa:0f:f0:a1:17:71:70:78:1c:19:5c:1b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Nov 19 07:01:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1791682d3f4fc98b5ffe3d19581dff960e381620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:2e:21:94:d1:78:e2:84:ae:c1:d8:50:08:
f1:d1:1c:79:ea:1f:e2:74:1f:1a:7c:b0:af:81:47:
2f:29:f2:c0:f1:bb:4e:52:02:00:c7:15:55:2e:25:
00:e8:f1:cc:97:ce:74:fa:e6:e1:51:ae:ca:0a:b2:
ea:34:b0:9f:cc:8c:9e:7e:f0:0e:62:64:21:b5:cf:
a5:71:14:ea:57:0f:e2:cf:92:a9:88:4a:98:72:87:
b0:6e:c3:8c:fc:aa:be:8f:7c:f2:13:6a:76:1c:fa:
85:5c:f3:86:7a:dc:5e:fe:f1:10:f1:a3:4c:01:6b:
d1:f5:51:15:17:46:a4:3d:5e:f6:9f:a7:aa:98:f8:
c0:37:e5:87:ca:8e:4e:4a:5c:f3:f9:37:e1:3e:36:
54:5b:c6:a7:78:6e:43:37:3c:a9:89:8b:78:7c:e0:
c2:f4:a2:c6:4c:04:d3:e2:a7:cb:05:26:f2:6b:74:
53:66:e3:fa:c6:27:ef:ab:76:03:c0:16:ad:e7:8a:
bf:dd:25:ec:a5:22:3d:0f:31:cd:64:d1:02:50:ea:
cb:c8:53:46:cd:de:c4:2d:ab:82:1b:87:75:ee:f2:
97:2d:c8:91:f7:fb:7d:c2:c1:a6:fb:c7:bb:c1:b9:
2e:09:72:6a:21:ef:cd:4e:75:75:3c:1c:25:6a:aa:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:91:68:2D:3F:4F:C9:8B:5F:FE:3D:19:58:1D:FF:96:0E:38:16:20
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/F5FoLT9PyYtf_j0ZWB3_lg44FiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.112.0/22
87.107.176.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:74:39:c5:27:33:6f:02:00:bc:24:fa:ae:97:7b:03:2f:8f:
77:81:2d:e8:53:4b:bf:a3:27:62:71:70:6b:a0:c4:22:7c:c6:
43:52:eb:9d:1a:1f:b2:e9:be:34:59:c0:3f:d9:41:cf:11:37:
5f:38:ac:f6:e5:85:cd:6f:35:ed:96:a0:9c:f5:39:ab:64:7a:
e5:25:32:d2:b7:ce:d8:f3:b4:3f:33:d2:7b:ca:ba:21:fe:68:
73:98:6d:f3:98:e3:df:85:ee:f4:da:11:6a:6c:1e:1d:c9:ed:
9d:ed:09:a8:e6:ca:24:15:38:58:aa:19:20:c7:2a:26:62:a4:
13:94:61:ec:d9:1a:69:9d:f3:ca:02:d8:7e:f9:82:02:b2:29:
25:8f:cc:de:e7:b8:94:43:ad:81:4f:3b:a9:d2:c4:e8:aa:46:
13:b6:c3:81:c2:ec:d4:18:42:64:9b:f4:a2:18:6a:2b:67:99:
0f:14:38:b2:5d:98:d2:6a:d5:60:6d:44:e0:13:fa:35:48:96:
15:84:5b:2a:0e:17:fa:5d:9b:aa:1c:b0:11:dc:32:ad:60:e6:
33:f7:21:50:9a:bf:c2:d3:72:75:8c:5d:d2:3a:c1:0c:a7:8d:
40:9b:07:b6:5a:d1:fe:12:bf:2b:5a:82:e0:c6:d1:1e:ad:fa:
8a:35:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org