Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/FCigdn84-UjyQ9s8hAWaaYEuypQ.roa
File: FCigdn84-UjyQ9s8hAWaaYEuypQ.roa (raw, json)
Hash identifier: J774TsozVSJZf+3/MBzVBlfcUFEkj0+sL0Jv9LtnKf4=
Subject key identifier: 14:28:A0:76:7F:38:F9:48:F2:43:DB:3C:84:05:9A:69:81:2E:CA:94
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 038A6C17
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/FCigdn84-UjyQ9s8hAWaaYEuypQ.roa
Signing time: Tue 24 May 2022 15:35:16 +0000
ROA not before: Tue 24 May 2022 15:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207023
IP address blocks: 185.174.90.0/23 maxlen: 23
185.168.158.0/23 maxlen: 23
185.242.94.0/23 maxlen: 23
185.242.92.0/23 maxlen: 23
185.115.64.0/22 maxlen: 22
185.126.72.0/22 maxlen: 24
185.126.76.0/22 maxlen: 24
2a0a:d05::/32 maxlen: 32
2a0a:d01::/32 maxlen: 32
2a0a:d04::/32 maxlen: 32
2a0a:d02::/32 maxlen: 32
2a0a:d03::/32 maxlen: 32
2a0a:d07::/32 maxlen: 32
2a0a:d06::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59403287 (0x38a6c17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: May 24 15:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1428a0767f38f948f243db3c84059a69812eca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:70:f0:87:d3:71:68:fb:9c:e7:09:6c:6e:
14:00:fc:4b:a8:69:71:fa:23:1c:9c:43:4e:69:c0:
da:ce:7e:3b:fd:06:c6:98:e5:4c:fb:6d:b5:87:3f:
59:7e:33:9f:a4:5f:95:6b:b6:ee:03:46:22:27:7d:
77:e1:63:55:a0:ae:f1:2e:c2:26:53:ce:ae:05:40:
e9:63:70:c6:af:6e:b7:a1:ac:b9:db:24:c4:58:d9:
e3:e9:98:69:75:ac:f0:66:1c:be:07:1d:0b:e6:e7:
cd:65:de:70:83:f1:29:e3:79:3a:1c:01:bc:3e:ee:
43:53:1c:f8:ce:11:0e:9a:76:12:d3:d1:92:7f:7c:
1a:80:08:ea:39:56:0a:2a:17:ef:b8:86:4b:76:ca:
1c:d8:44:97:de:d4:88:26:0b:df:e7:ce:d3:bb:b7:
f0:e3:e3:97:86:6c:78:40:00:57:c1:df:af:60:80:
ad:1a:a3:9a:ae:d4:a4:41:94:5b:e1:e7:dd:7f:df:
1b:9c:47:59:58:94:c6:05:a4:a0:fc:75:07:52:98:
40:7b:af:a6:bb:3a:97:c0:4b:ae:5a:30:84:8f:e2:
e8:47:11:f8:fd:6a:1a:b6:06:ac:87:94:01:c1:92:
6f:61:3a:24:17:c9:35:cf:79:11:ce:63:2d:f8:de:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:A0:76:7F:38:F9:48:F2:43:DB:3C:84:05:9A:69:81:2E:CA:94
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/FCigdn84-UjyQ9s8hAWaaYEuypQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.64.0/22
185.126.72.0/21
185.168.158.0/23
185.174.90.0/23
185.242.92.0/22
IPv6:
2a0a:d01::-2a0a:d07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:44:6d:02:1f:bc:db:7c:cc:2b:74:c5:94:c4:0e:12:a7:9f:
d6:02:a6:da:1c:92:8e:57:93:4e:1e:84:51:f0:33:0d:4c:0f:
17:8f:08:76:6b:db:fa:8d:99:90:3a:02:8e:88:6c:fd:d1:c3:
58:58:bd:59:3b:b4:3a:44:04:df:7c:dc:1e:52:5b:0f:39:8b:
7a:b8:b9:e8:40:fe:83:2d:0c:d8:64:b9:8f:2c:fe:d3:e8:8c:
02:a9:29:4b:1c:ea:8f:40:19:b3:bc:64:74:a2:ff:4e:ad:15:
90:b9:1c:81:86:03:5e:e7:86:b5:3a:71:4b:22:20:dd:8f:bd:
2e:87:67:73:be:69:ea:46:09:4a:46:11:c8:a3:57:1c:37:20:
5f:34:ef:9f:fc:13:3e:e7:30:93:20:5a:44:a8:6a:a2:8a:b9:
8e:5b:9e:21:49:01:80:26:6f:5b:c2:78:b9:df:06:22:bc:7c:
32:2b:8f:ee:f4:b9:03:ab:40:90:43:9c:a4:11:85:a0:2b:8a:
fb:87:4c:d0:f4:ec:da:73:80:75:57:1b:cd:55:ac:25:cc:c2:
9b:5a:a6:17:bd:ff:0a:3c:35:57:ee:2b:a4:d9:27:66:dd:c3:
34:5c:cc:ae:fa:26:27:3d:9c:b4:6a:cd:f9:f1:f6:bc:7c:92:
9f:66:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:46 2023 by rpki-client on console-fra.rpki-client.org