Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/fMglp19iC2GdV8RRxQFLEyoTpvs.roa
File: fMglp19iC2GdV8RRxQFLEyoTpvs.roa (raw, json)
Hash identifier: L4EWP2NWk97ki1pQlKhBlu/im0N3gy5pae8ug4JCmo0=
Subject key identifier: 7C:C8:25:A7:5F:62:0B:61:9D:57:C4:51:C5:01:4B:13:2A:13:A6:FB
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 026D64EF
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/fMglp19iC2GdV8RRxQFLEyoTpvs.roa
Signing time: Sat 01 Jan 2022 10:55:17 +0000
ROA not before: Sat 01 Jan 2022 10:55:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.127.164.0/23 maxlen: 24
185.127.166.0/23 maxlen: 24
2.58.64.0/23 maxlen: 24
2.58.66.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40723695 (0x26d64ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Jan 1 10:55:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cc825a75f620b619d57c451c5014b132a13a6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ce:fa:16:99:b9:30:fd:ff:ff:d3:71:15:05:
d7:0f:dd:6c:cd:4f:88:bc:06:74:9b:34:f7:05:00:
b5:22:9b:ed:73:b7:39:35:a1:ef:09:72:5a:18:9b:
76:29:5e:ba:92:f7:a8:b6:91:1e:73:01:9d:08:d6:
74:06:a2:cd:9e:70:ba:f7:10:90:26:da:54:83:3b:
d1:b1:80:f1:ad:65:16:a4:16:4b:76:f0:58:52:ac:
ad:3b:d2:0c:fc:bb:ac:88:5b:58:d8:35:8f:e2:f2:
7d:5f:00:5f:ac:76:7c:0b:5e:73:76:54:a9:1b:cd:
a0:63:f3:43:9e:5a:24:00:ff:73:59:84:8e:7d:34:
56:b1:0f:98:e2:aa:17:82:84:d8:14:41:20:58:fa:
d5:09:a2:e5:e2:76:c4:75:aa:9d:20:4b:20:5b:1f:
08:86:9d:40:d5:b1:43:28:1c:78:17:d4:70:ba:cd:
6f:f5:43:8d:55:60:9c:85:25:e0:db:94:0b:12:c9:
28:4b:8a:eb:2a:c5:a1:e6:b9:01:98:e1:bb:b1:06:
f5:b8:c4:e9:36:03:2e:d4:6a:97:ca:6b:4d:6e:34:
f7:78:af:2f:02:c7:e2:13:0a:e0:87:76:aa:fb:95:
48:e4:67:e9:ab:78:c6:34:87:a7:fd:f5:3c:1d:a7:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C8:25:A7:5F:62:0B:61:9D:57:C4:51:C5:01:4B:13:2A:13:A6:FB
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/fMglp19iC2GdV8RRxQFLEyoTpvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.64.0/22
185.127.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:7e:1b:d7:fd:7a:71:51:77:f5:b9:b7:4a:de:d3:fa:75:bf:
73:6d:b2:f5:e5:f9:84:1c:64:f6:41:6e:9a:6e:47:75:63:ca:
8f:67:e4:c1:91:15:d8:2a:da:28:bf:e4:a7:b4:dc:c6:dc:b4:
29:d9:18:6b:76:77:13:bb:05:3c:50:0d:34:b7:3d:9e:30:6f:
56:1f:e5:69:3d:9b:73:a8:f9:c6:74:61:07:bf:34:b9:5f:7e:
a1:1b:20:a2:b5:4c:1d:c4:78:11:a8:55:24:0a:39:46:f4:ce:
e3:4d:41:02:1b:08:54:bf:b8:dd:b4:09:2b:ee:64:a3:ae:4b:
8b:e5:c9:da:df:fa:75:87:c5:46:10:84:4d:40:0a:d9:02:f0:
78:b0:7c:3c:7c:0b:06:b5:da:e4:fe:83:e2:68:cc:0f:0c:6f:
10:f5:f4:3d:9d:5f:dd:5f:9a:d0:52:a6:52:b3:3a:20:38:dc:
d4:03:07:b0:ae:0b:3b:a5:df:16:6e:6e:c1:cf:18:29:53:70:
3b:63:32:af:6c:69:96:b5:fe:08:07:4c:31:2b:db:29:67:73:
0c:49:2c:28:c1:5d:ca:2f:08:98:cc:11:72:49:ea:2e:10:7f:
45:03:f5:31:f7:56:25:a5:eb:9f:bb:f0:f2:f9:e7:50:bf:aa:
aa:52:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:29 2023 by rpki-client on console-fra.rpki-client.org