Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/C1pxDbTV6kClPA7cF-g3TFZ4sek.roa
File: C1pxDbTV6kClPA7cF-g3TFZ4sek.roa (raw, json)
Hash identifier: RHhJCJQhaYryt0Nc1+9hAQJZimPC3GgjPY5qRhhmFto=
Subject key identifier: 0B:5A:71:0D:B4:D5:EA:40:A5:3C:0E:DC:17:E8:37:4C:56:78:B1:E9
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 01F48D79
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/C1pxDbTV6kClPA7cF-g3TFZ4sek.roa
Signing time: Sat 01 Jan 2022 15:59:41 +0000
ROA not before: Sat 01 Jan 2022 15:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.198.32.0/20 maxlen: 24
45.89.21.0/24 maxlen: 24
86.106.24.0/24 maxlen: 24
91.123.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32804217 (0x1f48d79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 15:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b5a710db4d5ea40a53c0edc17e8374c5678b1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:a6:e7:fa:40:6c:7a:01:24:20:7c:da:c8:
26:ee:f8:f3:a0:6d:6d:21:3c:8e:85:05:ab:b5:2d:
52:46:c2:ce:72:34:ca:d2:8c:8f:d2:08:a6:79:80:
0d:91:89:14:1a:1c:06:81:ca:ca:cb:47:5a:3b:48:
fe:da:a8:40:24:1b:21:32:3d:58:04:bd:18:77:87:
13:08:fc:fb:02:d5:f8:48:c1:26:d7:57:63:8f:31:
f4:a3:a7:2e:f4:16:db:e0:8e:3c:c2:91:9d:b0:e5:
db:1e:87:fc:79:8a:f5:d9:a8:d4:14:18:1c:a2:19:
3b:7d:66:72:36:3c:08:69:65:89:b5:2e:3c:5f:81:
cd:39:10:9b:59:8a:a2:25:20:4e:aa:95:45:4a:24:
2f:1a:c0:f9:30:14:e0:f0:26:5b:69:f7:6c:7b:ae:
2d:d1:5c:57:ad:6b:3c:04:68:5e:bb:6f:e9:f3:93:
dd:a1:28:e0:a5:c3:69:60:42:27:a7:b3:90:bf:96:
cf:81:91:83:ad:00:24:c5:a6:64:41:8c:6c:af:53:
13:e7:10:d1:bd:fc:a0:1e:c8:d3:5e:f0:be:54:fb:
94:5c:83:65:44:4e:33:41:69:5b:05:64:06:f2:c2:
c4:1d:07:aa:9c:8d:3e:f1:17:ea:eb:5e:22:ce:8d:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:71:0D:B4:D5:EA:40:A5:3C:0E:DC:17:E8:37:4C:56:78:B1:E9
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/C1pxDbTV6kClPA7cF-g3TFZ4sek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.21.0/24
85.198.32.0/20
86.106.24.0/24
91.123.0.0/20
Signature Algorithm: sha256WithRSAEncryption
53:b3:41:d8:99:15:7b:e5:e6:fd:fe:a0:49:bc:db:57:a6:71:
ec:3e:15:f4:1a:1b:a2:63:43:61:3e:87:27:c0:0f:10:27:4d:
1b:0f:95:49:bf:64:b4:86:7c:19:42:c2:7d:09:8f:74:15:0e:
3a:0d:89:1d:b0:d6:c5:e0:fe:2f:be:79:e1:b4:91:75:3f:93:
93:ed:fa:cd:7b:b0:28:23:56:88:66:1d:e9:c3:a8:78:1b:21:
40:13:82:ad:63:7e:9a:75:67:c3:c5:dc:26:04:4d:a8:53:c6:
86:02:6f:9c:92:4b:c8:52:0c:ef:7a:9d:cf:fb:a9:a7:8e:c1:
12:bd:dd:c7:64:02:db:8b:c9:85:71:87:27:20:85:96:0b:c2:
a2:88:e2:17:43:5e:91:6c:b6:f3:9f:93:06:19:30:1e:3e:9b:
5e:3e:be:0a:74:f3:1f:4b:49:15:37:dc:4a:e2:02:b6:65:a5:
af:4f:b2:e5:60:e3:69:dd:49:98:aa:21:8c:d6:18:e7:8f:89:
34:c3:b1:e8:8d:ea:bb:3a:f4:2d:c6:1b:41:cd:32:eb:2d:73:
09:3f:61:b2:26:8f:da:02:1b:bd:72:12:21:58:ef:36:da:13:
c7:e4:a0:ca:99:82:66:17:00:7c:f9:b2:8a:8e:1d:f2:75:4e:
33:e6:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-fra.rpki-client.org