Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/F66U9V185Mw0HRDx6EZCwC-oDRs.roa
File: F66U9V185Mw0HRDx6EZCwC-oDRs.roa (raw, json)
Hash identifier: 9bVI+mxHCEXI/7F/1Fp/Zr6rt21l6FfGKpEtf6k+Dgo=
Subject key identifier: 17:AE:94:F5:5D:7C:E4:CC:34:1D:10:F1:E8:46:42:C0:2F:A8:0D:1B
Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Certificate serial: 01BE7EEE
Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/F66U9V185Mw0HRDx6EZCwC-oDRs.roa
Signing time: Thu 26 May 2022 22:27:51 +0000
ROA not before: Thu 26 May 2022 22:27:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50554
IP address blocks: 139.28.112.0/22 maxlen: 24
185.3.176.0/23 maxlen: 23
185.3.176.0/22 maxlen: 24
185.3.178.0/24 maxlen: 24
185.3.179.0/24 maxlen: 24
89.106.160.0/21 maxlen: 24
2a00:1bc8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29261550 (0x1be7eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0
Validity
Not Before: May 26 22:27:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17ae94f55d7ce4cc341d10f1e84642c02fa80d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:55:88:42:07:b6:32:2f:74:b3:7d:0b:9f:
d8:38:5f:be:69:40:b4:60:3c:ec:55:a5:83:8f:ef:
c0:5f:ed:b2:90:c9:f7:7d:84:24:54:d1:01:d3:60:
11:6d:37:33:6f:45:7b:92:a8:1f:9a:47:7c:a5:03:
63:c9:72:bd:1b:41:cd:32:9b:b2:cb:91:29:a1:02:
98:d8:bf:59:9f:78:a5:46:d4:23:d5:bd:be:ac:6b:
44:97:78:e5:c5:39:76:83:92:05:50:e0:c2:bc:c5:
7c:a2:dc:de:f1:1d:28:97:85:04:42:18:b5:7f:a7:
85:db:5f:ed:75:ca:30:3d:c6:53:e7:52:af:2c:b2:
d0:00:a9:b5:6a:9a:6d:fc:9c:53:a2:f5:52:5f:a4:
83:4f:d8:f0:6a:6b:c6:24:69:d0:a5:a7:3d:b6:c2:
b1:22:ee:16:69:cd:d2:35:83:e0:b4:47:d0:57:95:
a6:4f:b1:88:7a:76:23:e7:8a:d3:56:ea:01:37:89:
7a:56:ec:5e:2c:80:57:a4:0f:6f:d8:fc:4b:67:1e:
dc:03:fb:b0:0a:17:24:aa:83:a3:6b:11:02:84:72:
f8:a2:8e:73:55:72:74:cd:b3:c4:00:26:15:05:0e:
f9:d9:c4:e0:df:33:70:99:b7:df:ac:43:7d:f6:48:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:94:F5:5D:7C:E4:CC:34:1D:10:F1:E8:46:42:C0:2F:A8:0D:1B
X509v3 Authority Key Identifier:
keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/F66U9V185Mw0HRDx6EZCwC-oDRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.160.0/21
139.28.112.0/22
185.3.176.0/22
IPv6:
2a00:1bc8::/32
Signature Algorithm: sha256WithRSAEncryption
23:bd:9e:20:89:c7:64:74:80:bb:60:de:21:6f:82:83:35:f6:
21:1f:9e:e8:c3:33:b5:2a:41:a1:e1:f9:b5:d2:6f:35:06:4e:
7e:ae:9b:70:a7:df:28:a3:c8:b0:7d:36:63:74:6f:f1:a1:a7:
57:94:e2:01:00:ac:27:17:d9:19:78:3e:cb:38:6d:3f:00:fd:
45:46:5e:18:ef:9a:50:8f:66:58:b5:23:54:5b:cc:fd:76:e5:
29:c9:f5:2e:f4:f9:07:67:d5:4c:89:88:25:bb:d9:23:e7:58:
2f:03:1f:18:3f:0d:73:4e:54:d3:5a:c7:fb:1d:ce:6d:9a:10:
e4:5a:a7:e5:55:1e:71:1b:b1:83:5a:5e:b8:93:c5:42:c0:2a:
e3:e6:79:e0:32:65:ac:e8:78:8a:94:11:c4:82:f5:4c:69:7a:
62:7c:25:ba:e5:10:43:66:05:19:ea:d8:ce:6c:54:90:8b:93:
dd:4f:3f:0e:63:42:df:9d:b0:5b:22:93:dc:5d:8f:c2:bc:73:
89:df:46:00:41:75:e3:62:f8:a7:00:85:97:be:24:c3:d0:07:
4a:ec:92:88:1a:e4:cf:6a:55:a3:22:c1:bd:be:e0:1d:37:1b:
c2:f3:53:de:12:74:f7:aa:76:a9:a2:a5:56:3d:19:a2:3a:ba:
ae:11:e6:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:45 2024 by rpki-client on console-fra.rpki-client.org