Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/1-HdFdWPVk_EBdJvn2j5oBpPmibU.roa
File: 1-HdFdWPVk_EBdJvn2j5oBpPmibU.roa (raw, json)
Hash identifier: /6wWlxHaWlyx9LNQhX8PNfHZP7LhcBsvTGhlpC19Rqc=
Subject key identifier: F8:77:45:75:63:D5:93:F1:01:74:9B:E7:DA:3E:68:06:93:E6:89:B5
Certificate issuer: /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial: 043D670C
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/1-HdFdWPVk_EBdJvn2j5oBpPmibU.roa
Signing time: Sat 01 Jan 2022 09:55:57 +0000
ROA not before: Sat 01 Jan 2022 09:55:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9558
IP address blocks: 194.24.250.0/24 maxlen: 24
194.24.251.0/24 maxlen: 24
217.195.145.0/24 maxlen: 24
217.195.144.0/24 maxlen: 24
2a06:2340:1000::/44 maxlen: 44
2a06:2340:2000::/44 maxlen: 44
2a0d:9e40:1000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71132940 (0x43d670c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Validity
Not Before: Jan 1 09:55:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f877457563d593f101749be7da3e680693e689b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:75:8d:a9:11:44:be:c5:34:e2:a2:ed:45:
bb:8b:bd:94:63:dd:d6:8a:be:1f:4b:1b:29:12:fc:
59:5d:5b:02:11:4b:19:cf:2e:93:6e:b5:0d:3d:19:
cc:9c:c5:ee:8b:cd:e0:08:11:a3:23:ab:bf:03:93:
65:ba:75:38:27:c8:08:cf:09:92:78:86:20:37:57:
60:fb:c6:ab:d8:5a:7a:b6:3d:41:3c:d1:e3:5c:3a:
92:98:a6:24:dc:b2:5b:cb:03:75:ab:ca:0f:6f:24:
70:30:7b:22:88:2c:e8:e0:e5:71:ee:f4:3d:d7:5a:
d9:60:e4:30:63:a3:87:99:37:f2:81:1f:71:b8:eb:
ed:87:08:21:68:a1:bb:1a:e3:a0:f8:62:4d:b3:37:
29:11:94:69:46:8d:7c:4a:21:ef:18:35:ed:36:c3:
5f:f6:95:1b:75:82:d9:ec:75:60:5b:e9:84:f2:c6:
22:08:df:c7:2b:6a:74:d8:0e:72:73:6f:b2:cd:81:
cb:4d:7a:d1:da:67:fc:8c:f2:49:f8:f5:9a:7f:b4:
78:3e:5b:bc:ac:46:f7:c9:fe:25:95:f6:7e:c0:76:
30:08:5c:66:23:a7:9d:e4:e7:fd:08:ad:05:96:b6:
e9:e1:96:7e:f9:71:ec:5d:a6:d9:d9:e8:22:76:80:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:45:75:63:D5:93:F1:01:74:9B:E7:DA:3E:68:06:93:E6:89:B5
X509v3 Authority Key Identifier:
keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/1-HdFdWPVk_EBdJvn2j5oBpPmibU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.250.0/23
217.195.144.0/23
IPv6:
2a06:2340:1000::/44
2a06:2340:2000::/44
2a0d:9e40:1000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:13:6a:ac:1e:76:bb:7c:97:16:b1:18:a7:98:d7:ba:39:bc:
10:7a:60:eb:ca:22:58:d4:44:cb:a1:11:5a:4b:a3:e8:58:0a:
e4:eb:62:61:54:8c:2d:64:6f:4b:bb:dd:32:32:8e:f6:20:5f:
2c:e4:7c:e4:78:1f:b8:3f:16:51:de:d1:5b:d4:91:75:69:60:
98:fc:37:2f:a9:4d:6a:af:f4:cb:02:a1:89:26:5d:96:ec:cc:
09:b6:12:02:05:75:82:4d:a2:b1:53:88:2b:03:cb:4a:32:bc:
30:a3:b7:83:c6:15:7a:43:d6:2d:a3:99:4e:0f:bd:1f:5e:db:
3d:27:b8:e0:4e:e0:dc:97:ef:23:7f:d5:97:f4:b2:9d:3d:82:
b7:85:74:71:5f:a1:ff:25:e9:4f:24:2e:8b:99:38:c7:e1:54:
61:00:50:39:8a:69:9d:61:b4:86:b1:3b:d3:ba:39:22:70:82:
c2:94:f4:89:7c:5d:4b:67:ef:33:c9:ca:17:f1:dd:3d:fb:c9:
11:b0:77:9e:c1:f6:d6:98:39:0b:64:ed:72:84:ac:94:36:1a:
e8:3b:cf:65:4c:8d:9b:14:aa:c6:01:c5:d8:41:a8:5f:c1:52:
3e:a7:24:bd:d6:d5:35:50:0d:a6:ca:13:b9:94:bf:a6:77:bf:
5a:89:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:29 2023 by rpki-client on console-ams.rpki-client.org