Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FOOfnHvRN9VzDwsG6mTz8fdhs8Y.roa
File: FOOfnHvRN9VzDwsG6mTz8fdhs8Y.roa (raw, json)
Hash identifier: ZeZ/pOMZb8rr+hAujALTUicPCAAyKkc93CJG5bp7WtQ=
Subject key identifier: 14:E3:9F:9C:7B:D1:37:D5:73:0F:0B:06:EA:64:F3:F1:F7:61:B3:C6
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0182AB2F48E32A6BA4DEA2B8C6A07A7885AA
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FOOfnHvRN9VzDwsG6mTz8fdhs8Y.roa
Signing time: Wed 17 Aug 2022 09:42:58 +0000
ROA not before: Wed 17 Aug 2022 09:42:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
94.241.176.0/21 maxlen: 24
83.147.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:2f:48:e3:2a:6b:a4:de:a2:b8:c6:a0:7a:78:85:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 17 09:42:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14e39f9c7bd137d5730f0b06ea64f3f1f761b3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:a0:7e:34:5f:bd:61:40:15:24:f0:e7:cf:
df:ad:9b:b8:e6:44:e1:47:09:a7:58:52:af:b5:0b:
6b:b2:4c:0e:2f:55:ec:14:a5:ed:cb:1c:65:94:21:
35:e8:16:72:11:62:bc:3c:0e:00:9c:d5:13:2b:4f:
5c:17:a6:30:e1:18:5b:c1:ed:07:d0:4a:c6:35:95:
61:59:5b:52:03:a8:f5:08:9a:b8:79:29:e2:da:04:
8f:2d:e3:c2:36:4d:c0:59:46:f1:31:8b:e1:25:3d:
50:2f:d5:3a:3f:21:50:38:05:0f:29:26:00:26:74:
35:df:dc:e7:2b:a1:7a:2a:d8:33:b5:63:01:01:90:
d2:30:b5:2d:9c:17:6a:2b:18:ae:1b:68:7c:c3:40:
85:ca:f1:f6:2e:e0:17:2c:c6:b0:ce:f8:59:af:86:
13:6e:91:fc:fd:24:d5:af:2b:eb:ed:73:a3:0d:67:
6c:e3:53:8e:81:8c:da:d7:13:99:66:22:d7:f8:93:
cd:63:eb:c6:47:c8:8b:8f:90:46:ec:bd:37:b1:f0:
81:88:a7:18:14:65:01:83:e0:43:88:8d:2d:8f:a1:
ba:d8:0f:df:5f:24:46:d6:d4:9e:f6:a3:1b:b1:22:
3c:bf:1d:68:c5:da:83:d7:b7:44:af:82:29:c3:ff:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:9F:9C:7B:D1:37:D5:73:0F:0B:06:EA:64:F3:F1:F7:61:B3:C6
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FOOfnHvRN9VzDwsG6mTz8fdhs8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
91.186.216.0/22
94.241.168.0-94.241.183.255
Signature Algorithm: sha256WithRSAEncryption
01:c9:ee:99:32:6d:de:48:8e:49:7b:1c:a9:2f:1d:c4:79:64:
1c:a4:d4:02:a5:0c:ba:6a:65:0f:23:a0:3f:16:83:b4:e9:e0:
7b:90:7f:9a:71:d9:b5:a0:f1:87:8e:c2:24:b6:62:da:f2:e9:
2f:96:92:ed:45:f9:d6:e8:98:61:27:2c:a2:6b:89:a1:25:ec:
97:f2:fa:6a:fa:b4:44:21:45:ca:d5:36:f5:f4:bf:12:61:28:
41:22:8b:56:cc:ca:71:19:7c:a0:09:6c:0a:b0:4e:09:83:21:
5e:1b:f4:53:5e:9d:b7:0c:e7:26:00:cb:be:7e:7f:f5:72:7c:
1a:24:65:aa:80:ea:83:d5:b7:be:04:2d:b3:24:5f:0d:53:61:
46:55:46:16:08:36:71:3b:05:bf:eb:c6:57:20:ad:66:6b:0c:
0c:59:f7:57:fd:b8:21:72:89:79:7f:b8:21:e7:58:cf:0e:56:
79:a6:49:5f:12:51:e1:33:b5:1a:3f:33:da:79:71:09:53:9c:
3f:0e:5d:5e:c9:83:de:04:44:7e:04:a7:4e:78:78:e9:f8:92:
85:38:97:18:ce:94:ea:96:11:59:71:97:62:f4:12:4a:5a:83:
3f:76:2a:ae:ea:24:c2:7b:b1:91:85:bd:8c:d5:66:cb:dd:80:
0b:d3:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org