Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_ByjSZciHh2IdxYOOTgb3yPzluI.roa
File: _ByjSZciHh2IdxYOOTgb3yPzluI.roa (raw, json)
Hash identifier: sZF6QsQX6z2wrtrQxdjkvJ1y/qu+TGwF7BzLAAkhfj0=
Subject key identifier: FC:1C:A3:49:97:22:1E:1D:88:77:16:0E:39:38:1B:DF:23:F3:96:E2
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 040151D7
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_ByjSZciHh2IdxYOOTgb3yPzluI.roa
Signing time: Mon 20 Jun 2022 05:43:44 +0000
ROA not before: Mon 20 Jun 2022 05:43:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67195351 (0x40151d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 20 05:43:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc1ca34997221e1d8877160e39381bdf23f396e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:d5:83:05:35:92:c4:09:6b:89:45:6c:dd:
74:fc:d6:24:b5:19:48:c2:55:53:16:df:2e:7a:bd:
a7:2c:cf:35:e4:7e:d3:52:c9:f8:6b:d1:74:6e:aa:
8f:a9:63:d1:a6:cd:cc:4c:de:b5:38:3b:c8:10:a2:
e7:77:03:7d:b2:f2:fe:38:63:67:8b:09:66:74:93:
c4:b9:f8:26:cf:ff:da:ef:76:ea:64:28:50:56:8b:
66:a2:2f:70:47:5a:e6:aa:c5:b3:4e:ec:ca:ff:53:
7d:6c:68:f0:83:80:2a:a7:76:22:35:8e:e3:9a:40:
11:d6:eb:8f:b0:94:6d:0b:9b:e3:ce:11:7e:f9:f8:
90:ef:4a:5f:d2:ca:99:b4:3d:af:10:77:57:50:36:
79:66:6b:01:a5:7d:9b:64:66:ce:70:05:14:31:dc:
9e:62:fc:ca:df:c8:0a:cf:15:50:39:8d:04:4b:91:
52:29:3d:b1:48:31:ff:5c:71:a7:ca:c7:18:96:52:
90:5b:9f:c2:32:ae:72:5e:92:9a:bd:d2:37:38:84:
18:c9:4f:ed:4d:22:a9:72:8c:96:15:07:d5:78:c7:
3b:9e:9f:fc:79:83:63:99:75:8d:ce:e9:b3:76:bd:
32:92:87:06:15:0c:d1:d7:40:3c:fc:36:8c:e1:82:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:A3:49:97:22:1E:1D:88:77:16:0E:39:38:1B:DF:23:F3:96:E2
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_ByjSZciHh2IdxYOOTgb3yPzluI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
23:7e:c0:4a:f9:e1:e3:b1:80:95:70:db:fb:e8:71:f6:a0:b1:
b0:9e:17:c6:6e:6d:92:05:2e:b5:09:f9:c5:cb:56:23:e7:43:
da:c2:16:cd:60:0a:96:e0:2f:2b:27:01:c8:2d:85:f5:e7:8e:
4a:c5:d2:ca:a9:7f:d0:53:cb:0c:d6:f9:78:e0:e9:ee:43:74:
9f:65:78:bb:21:12:4e:1b:03:0c:2c:2a:d6:0d:66:f5:e1:02:
1a:9e:18:1a:12:43:c3:f6:aa:e1:98:c6:9e:79:34:a4:b7:af:
0e:8d:ce:2f:b1:97:d5:20:f5:e1:ab:64:d4:7d:f1:17:ad:05:
b0:70:58:05:75:81:41:6e:5f:73:c5:5a:df:b2:8c:bc:17:88:
0a:ea:6a:25:47:06:92:3b:3d:4e:0f:a2:43:fb:dd:73:c3:c4:
b9:8b:ec:96:27:10:f4:1a:ef:05:af:80:24:1b:3b:c9:64:e0:
17:12:8a:d8:44:46:cb:43:db:49:82:95:ea:25:31:72:b8:10:
4a:1b:bf:26:13:c4:02:62:21:d3:76:b3:ee:4d:eb:2c:33:85:
d4:f9:a0:e1:af:f6:3c:af:82:9e:dc:3b:90:09:ee:5b:48:46:
36:f1:27:77:b9:bb:da:ba:6e:88:d4:5f:8b:9c:58:37:07:9c:
0a:d9:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org