Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/b74nvldXvJqYkkYlrJ2RU5r9p6Q.roa
File: b74nvldXvJqYkkYlrJ2RU5r9p6Q.roa (raw, json)
Hash identifier: sELUMsghQ01xIXJfkorxmBR1QrCRqwh14JLkAOiJ8dw=
Subject key identifier: 6F:BE:27:BE:57:57:BC:9A:98:92:46:25:AC:9D:91:53:9A:FD:A7:A4
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 36B16729
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/b74nvldXvJqYkkYlrJ2RU5r9p6Q.roa
Signing time: Mon 23 May 2022 07:50:51 +0000
ROA not before: Mon 23 May 2022 07:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212139
IP address blocks: 84.124.119.0/24 maxlen: 24
62.175.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917595945 (0x36b16729)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: May 23 07:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fbe27be5757bc9a98924625ac9d91539afda7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:2b:e0:b2:3a:84:44:9d:4f:4c:6a:5c:c5:
43:af:e7:10:c5:7e:c8:0f:8d:b9:12:b4:64:aa:30:
0b:43:26:7a:a5:b9:59:0b:90:06:ca:14:4f:93:a2:
81:61:76:b0:fd:47:08:7a:b4:4c:b5:a2:6d:00:63:
4a:e9:ff:7a:ef:11:76:9d:ee:7d:91:43:db:e9:b3:
df:7c:dd:e9:6f:26:e8:e6:5a:d3:6d:fc:80:e8:7b:
d6:d5:2a:ef:13:87:da:b5:fa:b3:94:26:fa:a8:a8:
62:97:b4:da:f8:1d:8c:70:b0:8e:c7:6c:2d:3b:b1:
14:f0:d8:1b:1c:97:bd:e9:90:f7:de:98:65:e6:cf:
89:7f:75:aa:f0:52:40:39:37:9f:10:14:47:7b:64:
bb:25:b8:2e:cc:25:9b:75:f9:40:4b:9b:cc:fe:77:
68:ab:2b:be:76:f8:96:9d:bd:c9:71:19:1d:ff:bc:
d5:ea:a3:9d:dd:ac:51:59:eb:5b:db:b6:a9:4a:79:
7d:7b:fe:0d:e9:69:25:94:96:90:f7:8c:2b:5f:8e:
b7:26:38:cb:00:a9:bc:8d:9a:b4:0b:df:14:5c:93:
77:8a:77:c1:b1:f1:48:af:b9:b2:30:4c:dd:52:4e:
09:d0:db:e2:87:00:4e:e0:9e:d3:12:98:62:18:02:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BE:27:BE:57:57:BC:9A:98:92:46:25:AC:9D:91:53:9A:FD:A7:A4
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/b74nvldXvJqYkkYlrJ2RU5r9p6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.175.249.0/24
84.124.119.0/24
Signature Algorithm: sha256WithRSAEncryption
56:29:49:3c:e6:ac:de:fd:96:15:64:19:f8:c3:36:5d:03:92:
61:f2:18:cf:88:8f:39:fb:6f:8a:af:3b:fe:38:37:d8:99:27:
8f:2b:be:71:63:85:b6:d1:92:10:25:79:e2:24:a8:df:3c:bf:
77:28:11:b2:48:81:ad:44:ab:f9:bc:b8:00:bc:71:88:d0:89:
e3:5e:2a:06:9d:c7:c0:d9:b4:66:c4:09:ce:37:d8:f2:6d:ef:
ad:a2:87:6c:27:1c:d2:92:e1:37:70:eb:88:78:1f:84:ee:d3:
82:74:4a:84:57:ef:d2:9a:85:23:64:85:06:0c:fa:0c:15:3f:
db:2d:3a:bd:12:8c:c0:3e:a9:68:4a:a8:da:85:d7:60:14:86:
9f:81:b0:6f:a7:e0:10:ef:d9:78:76:7b:2f:b4:50:83:08:2e:
40:74:ba:7b:67:7f:8b:21:8b:a3:74:e8:8d:56:cf:31:9b:23:
cf:b0:21:6b:ff:ac:62:88:0e:8d:3c:ad:f8:e5:1b:aa:4c:a7:
59:0a:5f:b7:8c:58:d7:a6:21:f3:70:fe:e5:30:43:6d:b4:f3:
56:aa:d0:d0:a5:47:67:b9:83:7f:df:a8:e3:d6:3e:2d:a1:7a:
55:84:88:36:0f:d4:37:ff:a6:41:1f:bf:4c:f9:23:b9:01:b1:
74:69:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-fra.rpki-client.org