Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-5Sq918ajLTTws-_x3STyuaIMrc.roa
File: 1-5Sq918ajLTTws-_x3STyuaIMrc.roa (raw, json)
Hash identifier: 9u2NhufmG/RK+sA8Zlg6tDluyi5cych7aNQjFlXEweU=
Subject key identifier: FB:94:AA:F7:5F:1A:8C:B4:D3:C2:CF:BF:C7:74:93:CA:E6:88:32:B7
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 018510D54F746435A1875660196645F248FE
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-5Sq918ajLTTws-_x3STyuaIMrc.roa
Signing time: Wed 14 Dec 2022 13:31:33 +0000
ROA not before: Wed 14 Dec 2022 13:31:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8798
IP address blocks: 212.69.76.0/24 maxlen: 24
212.69.72.0/22 maxlen: 22
212.69.78.0/23 maxlen: 23
212.69.80.0/23 maxlen: 23
212.69.64.0/21 maxlen: 21
2001:4028::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:d5:4f:74:64:35:a1:87:56:60:19:66:45:f2:48:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Dec 14 13:31:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb94aaf75f1a8cb4d3c2cfbfc77493cae68832b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:63:35:34:dc:3b:4d:75:a6:e7:23:62:cc:
36:7a:af:f3:20:93:64:e2:d2:15:2d:76:20:9a:ed:
78:dd:94:5d:a1:12:7c:f1:d6:20:1f:a6:09:19:05:
65:6d:6b:eb:b5:aa:a6:73:a0:df:d5:59:b4:ad:ec:
8c:c8:69:31:6c:35:0a:ab:ed:74:06:ba:44:43:25:
de:b2:e6:7b:11:23:92:40:3f:cb:71:21:eb:5f:4c:
4f:c2:fa:9b:d7:dc:b0:d5:dc:c9:ba:28:57:25:b3:
24:dc:e8:8f:78:9a:9b:c3:b6:ca:8f:b7:15:06:45:
6f:ed:f8:b8:2f:aa:cc:1a:22:52:77:36:a8:12:be:
75:04:23:1a:a5:b0:c1:04:47:bd:be:61:0b:e3:d8:
ad:97:75:bb:d8:f7:97:fb:c3:7b:98:70:09:fb:73:
05:9f:4c:11:89:8c:36:8a:73:31:f5:8b:ce:45:07:
d6:e5:89:19:3d:67:40:e7:b6:c4:02:96:66:fb:c2:
59:4a:09:09:5d:22:e0:6d:f5:40:b5:46:91:5e:e1:
23:6b:d6:f4:6b:66:a6:45:4f:ec:ae:fd:99:5e:3d:
76:5a:5d:ad:ce:29:1e:d2:f3:4d:a9:e2:3e:d1:bc:
22:c3:1a:77:4d:71:0a:cc:9e:22:4f:b8:11:76:6b:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:94:AA:F7:5F:1A:8C:B4:D3:C2:CF:BF:C7:74:93:CA:E6:88:32:B7
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-5Sq918ajLTTws-_x3STyuaIMrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.64.0-212.69.76.255
212.69.78.0-212.69.81.255
IPv6:
2001:4028::/29
Signature Algorithm: sha256WithRSAEncryption
be:3e:a0:fa:f0:1b:95:25:95:44:ac:e2:9a:5b:36:f9:69:b3:
66:d0:24:f3:df:0a:2e:41:78:e3:fb:db:2b:cc:8b:fe:3a:e8:
0c:98:29:8f:59:ee:36:a7:7c:fe:4d:6d:83:5e:ff:df:b4:c2:
ec:80:e3:1f:f7:dd:95:3f:b8:b1:cc:76:d6:de:cc:f1:ef:85:
fe:37:71:44:e9:62:28:11:48:49:5c:86:07:de:9e:be:91:13:
0d:f0:cf:da:18:a4:63:0d:23:af:08:14:7b:a6:46:ee:16:74:
99:73:25:22:dd:8f:49:1d:06:71:a1:62:25:26:a4:8d:28:23:
99:b7:1e:ee:1a:12:55:f3:ef:81:56:76:75:8f:f6:a9:be:02:
38:ef:31:7f:8d:04:a1:42:e5:f9:b0:47:95:d5:76:ca:e0:ba:
9d:c7:32:f6:c6:b6:e2:29:a5:5b:57:3d:30:60:e5:86:95:8a:
7d:e6:1e:fe:88:3e:70:58:f3:c2:a7:92:93:a2:ce:72:28:10:
4e:36:58:1a:96:33:4f:71:14:5a:03:d0:87:9e:aa:19:b8:d7:
c1:a3:36:49:18:8f:d2:0b:f1:32:e7:77:c6:fc:28:91:51:e4:
b6:a2:d6:84:f7:6a:85:86:4a:0f:13:13:21:8e:72:30:5d:2d:
15:4a:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:27 2023 by rpki-client on console-ams.rpki-client.org