Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/_fGyd94uTwqBFsuYcu4-xAvFLCU.roa
File: _fGyd94uTwqBFsuYcu4-xAvFLCU.roa (raw, json)
Hash identifier: DcJMvMglWX+U1AMBCcbLNG05DYtXwGpjPbAiCaj0/mU=
Subject key identifier: FD:F1:B2:77:DE:2E:4F:0A:81:16:CB:98:72:EE:3E:C4:0B:C5:2C:25
Certificate issuer: /CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Certificate serial: 117210CF
Authority key identifier: 01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/_fGyd94uTwqBFsuYcu4-xAvFLCU.roa
Signing time: Sat 01 Jan 2022 08:59:48 +0000
ROA not before: Sat 01 Jan 2022 08:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200161
IP address blocks: 83.217.24.0/22 maxlen: 24
185.30.17.231/32 maxlen: 32
212.8.236.0/22 maxlen: 24
185.30.16.0/22 maxlen: 24
2a00:a960::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292688079 (0x117210cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016e5e31fa8716aaa54e18fcdcfed3fc94db90b5
Validity
Not Before: Jan 1 08:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdf1b277de2e4f0a8116cb9872ee3ec40bc52c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:ec:2e:85:87:44:54:86:3b:3c:8e:cb:9e:
d9:51:16:92:df:25:71:8e:aa:57:4f:58:b0:3c:af:
1d:dd:b7:5c:de:fc:87:15:15:8d:d0:5b:8d:4b:4b:
d8:0d:95:f0:f8:66:9f:72:21:48:7a:b8:74:59:2d:
ee:ff:9b:95:9b:20:ac:7e:78:80:69:d0:af:be:18:
65:19:71:5c:3c:cc:56:a0:4f:75:e3:9b:53:f2:91:
1f:ac:30:36:37:c2:8f:4c:a4:05:4e:97:c5:97:87:
6c:dc:55:8b:b4:4a:33:85:45:7d:8d:d8:6b:ba:f7:
48:30:9d:32:66:bc:78:46:d7:ac:10:d2:d0:00:7b:
44:9f:c4:be:47:8b:30:7c:2c:22:d6:68:72:20:b5:
50:37:4e:83:a3:2f:e6:44:4a:2f:81:b4:86:11:ca:
de:a0:9d:23:52:02:93:2e:d1:04:ac:c2:8e:a5:fc:
dd:f3:cf:0a:e4:61:33:de:69:aa:f6:c0:14:e2:af:
ba:1d:eb:0a:3c:a4:62:57:bf:58:8b:c7:60:ce:37:
12:95:b8:27:25:52:95:52:b0:02:53:c5:ae:39:92:
10:f6:b4:0e:40:5d:24:fd:e1:60:77:c3:57:01:12:
c5:59:f1:d4:bd:a4:d9:17:70:cf:9e:1c:d2:d7:c4:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F1:B2:77:DE:2E:4F:0A:81:16:CB:98:72:EE:3E:C4:0B:C5:2C:25
X509v3 Authority Key Identifier:
keyid:01:6E:5E:31:FA:87:16:AA:A5:4E:18:FC:DC:FE:D3:FC:94:DB:90:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW5eMfqHFqqlThj83P7T_JTbkLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/_fGyd94uTwqBFsuYcu4-xAvFLCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/af4ef8-ed07-4acd-a42f-c96c2ce859e5/1/AW5eMfqHFqqlThj83P7T_JTbkLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.24.0/22
185.30.16.0/22
212.8.236.0/22
IPv6:
2a00:a960::/32
Signature Algorithm: sha256WithRSAEncryption
66:56:e1:62:4f:13:89:f2:a6:b3:58:8b:b8:19:07:40:f0:14:
05:ff:b2:73:c0:6d:af:3b:61:bd:3e:e6:d5:16:df:bd:62:6a:
0e:50:df:ef:6b:f0:eb:0b:65:3b:be:b5:2d:e7:c3:28:b3:f0:
6d:98:9f:0f:a0:7e:13:b0:85:12:0f:6f:5b:7a:74:1b:63:e7:
13:26:83:b3:80:89:cd:e2:db:cc:a0:80:5f:89:21:05:da:0a:
2c:ae:40:f9:29:47:c1:6d:27:89:83:ff:05:44:5c:d1:9f:6a:
65:d9:11:e3:a8:81:73:54:ac:1f:bb:2c:e8:d6:53:3b:a1:91:
55:d2:7a:f9:ef:22:a5:b3:4b:41:21:51:83:ad:df:45:4a:d9:
9d:90:e8:4d:9c:78:5d:b6:c4:3c:83:04:10:4a:e3:f6:29:4b:
5d:01:2e:cb:91:7f:90:c3:68:45:76:44:57:39:0c:3a:76:84:
19:0f:23:ab:af:e8:e2:cd:49:e1:d3:12:da:20:8f:fa:01:24:
58:6a:ff:b5:68:c6:35:9a:a7:26:e8:43:fc:4c:12:93:fb:41:
1c:79:fe:a7:4a:40:84:b9:b5:a0:07:57:ec:23:7f:75:96:cd:
8e:b3:ef:0e:7b:b8:2c:7b:c5:e8:80:79:ae:cc:09:48:43:8b:
15:b2:73:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-fra.rpki-client.org