Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RfC6cGQeeRcuXeIcu4AthcFpFS8.roa
File: RfC6cGQeeRcuXeIcu4AthcFpFS8.roa (raw, json)
Hash identifier: V7zRcDno1S/6ZQrX5NjAcwjkcdU01M7VhWbvi9hJ1Cw=
Subject key identifier: 45:F0:BA:70:64:1E:79:17:2E:5D:E2:1C:BB:80:2D:85:C1:69:15:2F
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A806790
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RfC6cGQeeRcuXeIcu4AthcFpFS8.roa
Signing time: Sat 01 Jan 2022 16:07:10 +0000
ROA not before: Sat 01 Jan 2022 16:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50186
IP address blocks: 151.237.96.0/21 maxlen: 21
151.237.98.0/24 maxlen: 24
151.237.104.0/23 maxlen: 23
151.237.104.0/24 maxlen: 24
151.237.102.0/24 maxlen: 24
151.237.103.0/24 maxlen: 24
151.237.100.0/24 maxlen: 24
151.237.101.0/24 maxlen: 24
151.237.99.0/24 maxlen: 24
151.237.105.0/24 maxlen: 24
151.237.111.0/24 maxlen: 24
151.237.109.0/24 maxlen: 24
151.237.110.0/24 maxlen: 24
151.237.107.0/24 maxlen: 24
151.237.108.0/23 maxlen: 23
151.237.108.0/24 maxlen: 24
151.237.106.0/24 maxlen: 24
151.237.112.0/24 maxlen: 24
151.237.118.0/24 maxlen: 24
151.237.116.0/24 maxlen: 24
151.237.117.0/24 maxlen: 24
151.237.114.0/24 maxlen: 24
151.237.115.0/24 maxlen: 24
151.237.113.0/24 maxlen: 24
151.237.124.0/24 maxlen: 24
151.237.125.0/24 maxlen: 24
151.237.123.0/24 maxlen: 24
151.237.122.0/24 maxlen: 24
151.237.119.0/24 maxlen: 24
151.237.120.0/24 maxlen: 24
151.237.126.0/24 maxlen: 24
151.237.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176187280 (0xa806790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45f0ba70641e79172e5de21cbb802d85c169152f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:f0:c5:59:75:1d:fb:c8:32:2c:d0:b1:d9:
58:67:58:cd:52:76:16:d6:94:39:15:ea:37:31:d5:
0e:89:a2:c5:55:20:12:c9:5c:c6:ad:ee:1f:01:dc:
91:37:e1:12:ba:77:bc:83:b2:a3:6a:2b:98:76:df:
27:53:61:27:f4:58:e8:73:c0:ed:08:c3:28:b9:fd:
35:6b:a6:83:56:97:da:68:bd:db:c7:69:ac:6e:05:
d5:63:26:b3:a5:9a:41:a8:1c:95:a5:dd:e8:75:77:
ed:96:76:19:05:5f:47:aa:87:bc:2a:ed:16:25:a8:
76:68:c5:60:9a:43:23:f8:a2:72:4a:e9:50:cf:32:
83:35:e1:9d:af:9c:ba:92:15:4f:4e:15:b2:a0:9a:
4d:e0:8d:45:38:e2:a9:8b:12:e9:b5:a0:28:04:ed:
87:66:ad:97:6e:7f:88:f1:8d:28:9f:bd:cc:63:fd:
41:0d:7e:06:98:65:07:cf:9c:e1:eb:b9:3b:d2:b4:
41:61:f1:19:b7:10:ae:c0:97:8d:ca:1c:c2:3c:8e:
f3:a8:cb:c3:0a:99:20:c8:38:37:d6:f8:99:24:48:
09:54:b7:57:09:48:9e:0b:fd:03:a8:31:4e:5c:9d:
3a:c2:c4:64:2b:1b:54:86:f2:bc:08:bd:83:99:34:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F0:BA:70:64:1E:79:17:2E:5D:E2:1C:BB:80:2D:85:C1:69:15:2F
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RfC6cGQeeRcuXeIcu4AthcFpFS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.96.0-151.237.120.255
151.237.122.0-151.237.127.255
Signature Algorithm: sha256WithRSAEncryption
16:44:0c:35:a6:c6:de:a8:39:cb:44:58:18:fa:34:00:81:25:
27:de:ae:07:13:67:b0:87:75:7d:af:82:a7:b5:41:63:d8:94:
db:7e:c7:90:bd:32:d7:c1:07:b5:c8:1c:80:21:3e:d7:19:45:
89:b6:2a:f4:12:3c:33:78:6a:20:6b:a0:1f:d1:17:a9:2e:91:
87:8a:08:fe:be:dc:8a:d0:8f:55:47:e4:2b:df:ca:35:bb:37:
ba:1b:fc:c1:66:8a:ec:c7:7a:94:63:bb:fb:c7:d1:8a:d5:19:
bd:16:cc:a2:ee:b6:1e:7d:f7:e9:c7:37:b4:88:b5:fd:91:bd:
f1:ed:05:e2:7d:1e:d9:7d:dd:db:02:d3:8b:5d:4a:5f:a1:f9:
3d:d4:ad:86:d5:dd:f5:51:f2:57:83:60:d0:b2:e3:4a:4e:9e:
56:18:29:d3:9e:a1:0c:a8:b5:61:05:fd:f9:d3:05:ef:88:ab:
8a:69:20:cc:31:a7:73:1c:23:f2:6e:26:36:75:8b:b6:cc:71:
8b:bc:fb:2d:a7:b2:cd:bb:19:d2:04:d3:4c:09:03:fd:b4:70:
22:29:b7:c6:cf:22:6e:65:09:e0:45:e6:5b:bd:e9:e0:f2:d4:
5b:15:93:bf:14:67:7b:30:88:1b:76:d2:6a:29:e6:b3:0d:ee:
2c:ec:e4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org