Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/fTuTjkqt8NyV31ORsLbyx42tWfI.roa
File: fTuTjkqt8NyV31ORsLbyx42tWfI.roa (raw, json)
Hash identifier: R5AWAbqQdCXbmkzD0t0y+7jzv5q3pXevdng97Ucaqe8=
Subject key identifier: 7D:3B:93:8E:4A:AD:F0:DC:95:DF:53:91:B0:B6:F2:C7:8D:AD:59:F2
Certificate issuer: /CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Certificate serial: 0C6AB61E
Authority key identifier: 4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/fTuTjkqt8NyV31ORsLbyx42tWfI.roa
Signing time: Sat 01 Jan 2022 03:59:03 +0000
ROA not before: Sat 01 Jan 2022 03:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199937
IP address blocks: 185.42.68.0/23 maxlen: 23
185.42.71.0/24 maxlen: 24
2a04:8e80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208320030 (0xc6ab61e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b796f0b3051b5bc814b2e89cb470a3826b2bf00
Validity
Not Before: Jan 1 03:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d3b938e4aadf0dc95df5391b0b6f2c78dad59f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:9b:3e:88:3a:e1:d0:ed:46:50:d0:5b:dd:
0b:b1:0c:c8:24:42:fd:aa:a9:4e:7c:4e:41:0c:59:
a9:bb:6d:c4:d8:bf:81:5f:19:54:e9:13:0a:a4:2f:
3d:bb:f1:c5:79:57:dc:e6:3a:32:84:0f:0b:8c:17:
f3:2f:98:a7:ef:5a:e9:5d:be:0f:26:ad:fc:ef:04:
a6:1e:ce:69:9b:aa:06:7b:5c:a9:e9:57:01:01:42:
cd:aa:02:ce:0c:c1:48:0d:dc:c7:a6:fa:b2:8d:0b:
87:23:17:22:3e:33:f4:4c:82:ef:86:f6:a3:46:99:
61:f1:8d:cd:bf:06:01:78:0e:cf:d0:48:9d:c3:f7:
4c:8a:da:88:84:08:a0:a6:8c:31:6b:48:22:f6:0c:
96:b3:60:b5:23:a5:bf:12:55:d0:8c:fb:0b:15:cc:
e4:23:ee:9f:23:7a:2b:1b:41:96:45:75:f0:68:46:
59:2e:0d:ea:77:f0:e4:28:21:5e:10:9c:cc:9c:70:
9e:93:4e:68:cc:29:bf:21:46:15:02:1e:2a:c9:d1:
fd:a6:87:8a:e0:28:16:6c:80:5e:8a:e7:63:d8:fb:
27:8e:96:fb:30:65:46:db:95:0b:c0:34:3b:ec:52:
8b:07:ab:9d:f1:ab:cb:0a:bb:1b:42:7e:b7:7e:4a:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:93:8E:4A:AD:F0:DC:95:DF:53:91:B0:B6:F2:C7:8D:AD:59:F2
X509v3 Authority Key Identifier:
keyid:4B:79:6F:0B:30:51:B5:BC:81:4B:2E:89:CB:47:0A:38:26:B2:BF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3lvCzBRtbyBSy6Jy0cKOCayvwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/fTuTjkqt8NyV31ORsLbyx42tWfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/bb46f5-9ff2-4058-9050-fbdcb1a41467/1/S3lvCzBRtbyBSy6Jy0cKOCayvwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.68.0/23
185.42.71.0/24
IPv6:
2a04:8e80::/48
Signature Algorithm: sha256WithRSAEncryption
1e:bb:45:ed:66:eb:f9:e7:25:ec:19:ff:d4:49:f2:8f:cb:41:
f7:38:35:96:46:a5:5a:61:eb:8e:1e:03:2a:02:9c:7c:28:b7:
61:54:93:23:51:25:2f:36:d0:6f:25:74:b7:95:81:27:01:15:
d3:f5:37:4e:24:9d:7c:41:e4:a6:d0:74:0d:3a:09:42:1a:bd:
64:c2:e4:41:8b:55:38:c7:bf:59:11:c5:25:8b:42:8d:a1:35:
98:e5:1d:b0:37:cd:d8:cf:31:15:80:d6:67:58:5d:0d:55:33:
9a:00:28:96:c8:7e:ab:9b:d3:6a:83:28:72:c4:6b:67:ca:72:
98:3a:34:71:56:5c:7b:51:ad:16:4a:3e:9f:c8:20:2b:c9:3a:
42:98:8a:0d:8e:be:f9:f6:03:c3:31:72:95:cc:1d:7e:09:0a:
bc:86:12:48:e5:b4:7f:28:76:c1:6e:04:1f:70:26:ae:0f:00:
d0:f1:60:c4:27:fd:bf:3b:93:e6:4a:93:58:ff:22:60:6b:77:
85:71:1c:eb:c1:6c:76:8e:1b:b6:54:d1:05:75:77:46:2b:15:
73:38:1e:12:58:3f:d4:8b:ff:97:19:65:e2:e8:36:66:aa:bc:
84:27:b1:c2:94:3c:54:ae:eb:d5:9a:a0:36:5a:52:d8:1b:1f:
c5:22:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:13 2024 by rpki-client on console-ams.rpki-client.org