Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/fQmXbP4Ya5ohoeha1x8rZhDvcbE.roa
File: fQmXbP4Ya5ohoeha1x8rZhDvcbE.roa (raw, json)
Hash identifier: AGfEW/UPJZARnEiJh9j931g3MOv1ikSWguOXK7c5N2w=
Subject key identifier: 7D:09:97:6C:FE:18:6B:9A:21:A1:E8:5A:D7:1F:2B:66:10:EF:71:B1
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 018413F286116F679BEF481A7947C7E0B1D5
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/fQmXbP4Ya5ohoeha1x8rZhDvcbE.roa
Signing time: Wed 26 Oct 2022 10:59:31 +0000
ROA not before: Wed 26 Oct 2022 10:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204760
IP address blocks: 185.241.64.0/22 maxlen: 24
185.22.0.0/22 maxlen: 22
2a0c:9c80::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:f2:86:11:6f:67:9b:ef:48:1a:79:47:c7:e0:b1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Oct 26 10:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d09976cfe186b9a21a1e85ad71f2b6610ef71b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:47:08:da:98:c7:9c:17:dd:a0:4c:ae:38:
1d:f0:b6:02:1d:a6:97:f8:d8:3d:31:3c:d1:f3:7c:
a6:0d:3d:62:c7:ea:c8:88:a1:ef:a1:92:57:33:6d:
53:03:fa:a1:61:30:a6:05:ec:66:0e:50:a9:06:be:
b6:4a:db:bf:69:be:8a:04:b5:f0:b7:fa:f6:be:22:
46:ee:29:8f:a2:d4:8b:cc:02:2d:2d:db:bb:d2:44:
74:bd:90:6f:6c:15:6e:a1:c5:7a:a4:9a:f7:00:b7:
bc:7a:16:9e:76:a6:4d:35:eb:d3:17:d3:97:75:c8:
39:6a:9a:53:3c:27:d3:49:a4:4e:a4:f4:1d:cd:fe:
1b:e8:48:3c:79:56:fe:16:a8:d9:09:35:7c:4d:95:
cb:97:86:06:1b:54:10:e2:ad:a7:b9:18:b3:08:d6:
b8:73:d6:08:98:5c:82:8b:ac:c7:09:83:34:b2:80:
f9:5e:b0:3d:5d:75:ed:7c:e4:03:f4:69:71:24:33:
53:82:24:49:27:8a:9e:37:fc:f5:c1:49:53:9a:c2:
ff:5f:c4:9a:ee:ed:e0:2a:be:5e:f4:8a:e1:2f:21:
85:b3:b8:ac:0c:24:a3:3b:b4:2c:b8:f8:88:b8:74:
84:9e:7f:9c:db:e5:9c:2c:2f:21:7c:d3:22:f9:82:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:09:97:6C:FE:18:6B:9A:21:A1:E8:5A:D7:1F:2B:66:10:EF:71:B1
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/fQmXbP4Ya5ohoeha1x8rZhDvcbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.0.0/22
185.241.64.0/22
IPv6:
2a0c:9c80::/29
Signature Algorithm: sha256WithRSAEncryption
4a:44:d2:36:84:3e:91:14:65:1d:8f:13:92:b3:82:4d:7d:68:
63:c6:b2:52:34:db:51:31:9c:a1:a8:10:ab:d2:a7:a7:e0:14:
51:6a:33:99:b1:99:29:de:ae:1f:56:ee:c8:58:9e:56:79:a9:
7a:24:0a:29:89:31:c5:93:b6:f8:e1:97:8c:14:48:d1:11:ed:
76:61:f5:d0:ba:33:79:46:dd:ff:ef:13:31:06:5c:69:12:51:
56:5c:32:0d:72:4c:ad:bc:71:9d:fe:72:35:5a:20:56:0c:77:
87:b7:bc:71:58:9e:85:ac:04:f1:44:7e:9c:f1:7f:5a:a5:f2:
b9:df:d2:b1:b1:10:66:53:c4:08:94:24:c6:2a:a0:f2:c8:13:
c2:0e:9f:52:ae:2d:98:d8:4d:e7:3d:2c:71:5d:de:e9:82:1e:
0c:27:b4:f9:40:13:5c:85:0f:f7:f4:a2:9d:77:75:57:25:92:
e6:f8:92:48:19:e6:8f:d7:df:05:e6:9c:23:59:7b:1a:10:4a:
62:8b:95:7c:35:64:ad:e3:d5:79:0c:a8:6b:17:39:72:f2:c6:
49:45:fe:ee:d3:b1:71:27:74:68:2b:65:e1:4f:50:df:ea:9b:
f6:b4:3d:9b:b2:98:35:09:0a:a0:33:7e:c5:21:88:08:ab:ae:
86:4b:80:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-fra.rpki-client.org