Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fMmKK1zx7z6BryHBN6rdHo8HL80.roa
File: fMmKK1zx7z6BryHBN6rdHo8HL80.roa (raw, json)
Hash identifier: J07Om9eMFH/eJOr3pg1C2atWB31eEN4L23Ys2xfOepE=
Subject key identifier: 7C:C9:8A:2B:5C:F1:EF:3E:81:AF:21:C1:37:AA:DD:1E:8F:07:2F:CD
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 086B46C5
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fMmKK1zx7z6BryHBN6rdHo8HL80.roa
Signing time: Sat 01 Jan 2022 13:03:06 +0000
ROA not before: Sat 01 Jan 2022 13:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13259
IP address blocks: 149.126.240.0/20 maxlen: 20
149.126.192.0/20 maxlen: 20
149.126.208.0/20 maxlen: 20
149.126.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141248197 (0x86b46c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 13:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cc98a2b5cf1ef3e81af21c137aadd1e8f072fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:dd:52:1e:86:0b:dc:15:63:c0:54:a3:20:
63:be:81:9b:98:20:2a:a0:83:6b:1c:bf:9c:1c:12:
3e:c5:0b:00:ec:41:4a:1a:1d:f7:54:0c:85:0c:27:
8b:60:d7:fa:1c:fd:70:17:59:6f:16:cc:e9:ea:ac:
fe:7c:1d:df:48:62:3d:a2:70:a4:14:9a:76:d7:24:
71:c7:1e:c7:09:28:71:3a:d1:c4:df:d4:89:f5:b6:
7e:1f:47:76:79:05:44:b3:9e:12:5e:e3:37:e8:42:
3e:91:db:b1:df:1f:04:29:b9:07:74:7a:aa:27:22:
05:c1:6b:c3:b3:a5:68:f3:58:ac:a5:20:ba:0c:c7:
e9:3a:b8:b2:4b:88:02:4c:26:1b:51:f0:5a:16:7c:
f2:50:62:ee:97:75:b4:f0:64:8e:1f:f3:bf:2a:0f:
5b:f2:c3:7d:d9:d4:d1:fa:88:2f:29:f6:a3:fc:fa:
8f:6f:08:9d:19:62:45:86:82:a5:f1:40:34:60:7a:
14:83:92:dc:b8:d6:bb:dc:0b:66:e6:8d:9e:25:8e:
53:21:a9:17:a5:cc:9d:88:ff:10:ce:fb:f2:1c:b3:
cf:cb:31:45:e7:21:28:0e:98:76:d5:db:f7:6a:d6:
80:e9:49:86:ff:ee:28:17:60:4d:2e:fb:47:60:50:
49:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C9:8A:2B:5C:F1:EF:3E:81:AF:21:C1:37:AA:DD:1E:8F:07:2F:CD
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fMmKK1zx7z6BryHBN6rdHo8HL80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
64:c1:b8:21:4b:b5:e1:c7:72:d6:e6:fa:13:5f:08:97:6f:23:
4b:b6:26:d5:52:2e:2b:a0:ca:05:ba:99:d5:33:13:ea:f1:09:
40:4f:54:8a:eb:83:8d:1f:c5:22:31:e2:d9:40:d1:24:b1:e6:
9a:e2:26:e8:6c:c3:79:6a:a8:07:d7:c5:8b:1c:3f:6d:2b:b0:
5c:60:a5:96:ed:ee:af:0f:9d:50:ea:ae:f3:24:31:a5:ed:51:
d1:4c:d9:1f:8d:b9:82:c0:fd:1e:d3:b9:e7:ed:9e:d0:44:44:
51:89:19:f8:86:b7:44:3a:37:4a:cf:85:8c:02:40:e6:69:1a:
12:d6:1b:f1:51:f8:c3:e6:43:1d:51:51:68:32:dd:63:44:af:
9b:33:d7:dc:0a:36:b6:7d:c8:48:16:98:c3:26:30:e9:48:9f:
e2:7a:65:c5:35:9f:d2:56:1c:3b:c2:c7:ae:ee:2b:27:57:a8:
99:54:e5:16:4c:1b:d9:b5:a6:4b:7d:d6:05:38:7a:f0:ba:ff:
12:da:eb:25:2b:0e:4c:ab:fe:91:7b:1b:2f:75:68:dc:a3:38:
ed:8f:32:fa:df:56:a5:89:3d:9d:4f:d1:fe:25:56:36:e0:70:
cf:95:2e:bd:71:8c:92:26:5d:2e:95:3d:b7:9a:15:33:f3:26:
57:32:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org