Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/1-lW76h3GF1qq985CCVN5kZLE12w.roa
File: 1-lW76h3GF1qq985CCVN5kZLE12w.roa (raw, json)
Hash identifier: I+bop937Opan96ygTPB253pxXnJxnNza/A7NKH/cAhM=
Subject key identifier: FA:55:BB:EA:1D:C6:17:5A:AA:F7:CE:42:09:53:79:91:92:C4:D7:6C
Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial: 0AF354AF
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/1-lW76h3GF1qq985CCVN5kZLE12w.roa
Signing time: Sat 01 Jan 2022 11:02:05 +0000
ROA not before: Sat 01 Jan 2022 11:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.110.58.0/23 maxlen: 24
194.110.57.0/24 maxlen: 24
178.218.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183719087 (0xaf354af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Validity
Not Before: Jan 1 11:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa55bbea1dc6175aaaf7ce420953799192c4d76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:8a:62:63:22:ba:19:1b:31:33:3b:ca:ad:
a9:3d:de:1e:ce:06:79:b7:12:8d:97:d7:c9:b1:98:
3b:0d:2c:ec:fd:1c:8e:5c:23:ac:63:aa:57:ac:a4:
83:22:04:ca:eb:2c:77:1c:d2:2d:7a:8b:85:62:e8:
0a:0a:b2:fd:74:53:5d:27:12:45:af:bc:8f:a3:be:
56:7c:56:67:f8:5f:1b:3b:19:1b:b9:2b:a4:7e:0d:
2c:51:71:58:4f:dd:b0:75:e0:7f:fd:e8:d9:db:a0:
ff:6a:1c:8a:75:89:5b:ed:8a:fa:2f:9b:b7:21:d1:
e1:44:f4:21:19:86:5d:a4:cc:dc:da:3a:9c:f2:49:
40:27:44:a6:cf:94:36:5d:b5:eb:3e:1d:d8:b8:9e:
5c:43:14:68:9c:81:6e:2b:34:a3:7a:00:ed:1c:fe:
56:0b:a3:f2:52:5b:13:88:be:78:7c:d2:c7:82:7c:
6c:f5:29:f1:82:f9:4c:27:7a:9f:6b:6d:88:74:d0:
61:e0:a0:f2:19:68:8e:1b:53:25:27:de:26:c2:c4:
7e:01:73:0d:48:ec:e6:81:68:28:3e:78:36:d0:d5:
33:21:4b:43:b9:70:08:d3:3e:62:4c:10:53:62:15:
0c:f4:c0:92:66:69:ad:43:eb:8c:8e:90:99:62:3f:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:55:BB:EA:1D:C6:17:5A:AA:F7:CE:42:09:53:79:91:92:C4:D7:6C
X509v3 Authority Key Identifier:
keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/1-lW76h3GF1qq985CCVN5kZLE12w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.148.0/22
194.110.57.0-194.110.59.255
Signature Algorithm: sha256WithRSAEncryption
94:2b:f0:ce:f5:0d:2b:c2:17:35:37:96:7e:e7:9e:a0:11:1e:
17:a6:90:8e:70:3e:5b:f8:b5:1b:68:06:b3:6f:6a:7c:c4:8f:
0a:39:25:f1:69:55:28:85:04:74:dd:f6:a6:01:18:6b:51:b8:
83:41:6d:6e:76:04:9a:f6:c1:f2:be:36:bb:85:64:fa:77:ac:
46:0f:6f:90:92:74:c0:71:15:ee:94:6e:3b:f9:91:67:4b:53:
34:7f:11:81:76:c6:3d:87:5f:88:77:25:a1:a2:60:98:d6:b0:
3e:34:7f:d2:57:97:34:7b:15:0c:97:1b:e0:f6:73:e7:59:b0:
60:f9:15:73:81:1c:b7:19:1f:60:c8:2c:0b:af:06:67:80:e0:
a9:22:9a:e0:ec:d7:e0:d3:21:ed:b4:f4:a8:67:cd:1c:42:ef:
75:04:d1:7d:73:ab:d6:27:8f:dc:aa:10:b5:0b:35:fa:3f:3e:
da:6d:86:8c:95:1d:4a:bd:72:e7:f3:95:77:d5:90:bb:92:6f:
44:4d:cb:1c:31:6b:85:ce:6a:3b:ab:95:4b:cf:4f:56:23:f0:
5c:ec:26:70:ea:d4:d5:3c:cb:db:88:52:c8:b3:c5:2c:f5:37:
8b:3d:b0:9d:84:83:be:4f:f4:7b:d2:88:d7:1b:a2:f4:7f:62:
ff:2d:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:53 2023 by rpki-client on console-fra.rpki-client.org