Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/AmUPpCDl_LDY9vBgYtdMNClZaq8.roa
File: AmUPpCDl_LDY9vBgYtdMNClZaq8.roa (raw, json)
Hash identifier: 9GPe2DlZ4CxLuF351UtF+Vr5H7UJYS9IJsc0inEuGh4=
Subject key identifier: 02:65:0F:A4:20:E5:FC:B0:D8:F6:F0:60:62:D7:4C:34:29:59:6A:AF
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 1A8E03DA
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/AmUPpCDl_LDY9vBgYtdMNClZaq8.roa
Signing time: Sat 01 Jan 2022 11:03:44 +0000
ROA not before: Sat 01 Jan 2022 11:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213122
IP address blocks: 217.146.81.0/24 maxlen: 24
217.146.88.0/24 maxlen: 24
185.16.204.0/24 maxlen: 24
5.226.138.0/24 maxlen: 24
2a01:4020:15::/48 maxlen: 48
2a01:4020:16::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445514714 (0x1a8e03da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jan 1 11:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02650fa420e5fcb0d8f6f06062d74c3429596aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8d:75:b4:23:98:e2:41:9d:ce:cc:dc:39:1a:
17:40:04:fc:25:c2:5b:ff:cc:b9:27:7a:fb:f1:ea:
ca:41:21:db:92:9e:e0:bb:a4:ff:4f:d4:7a:b1:b2:
ef:ca:e0:41:21:69:6e:94:e7:2e:0a:bc:76:37:59:
43:f6:e1:8b:e4:b3:7a:97:c9:5d:ef:c6:72:96:46:
ee:01:01:bd:84:f7:00:88:16:35:fc:ea:60:64:90:
a8:35:ed:37:5a:c1:70:a7:10:42:0a:56:eb:64:87:
6f:5f:89:66:ea:c9:13:3d:4c:8e:b2:a1:79:28:a5:
3e:df:f0:e2:9f:dc:32:04:6e:bb:7c:ba:e7:f2:e3:
35:5c:05:77:59:13:86:89:db:5a:db:1f:70:9f:54:
e8:43:4f:9c:c4:1f:37:c9:ec:b7:bd:06:b1:b1:cb:
a3:54:cf:19:22:a7:3c:05:61:76:79:e2:8c:61:22:
b5:aa:5b:56:ce:c5:73:44:f1:e4:35:bf:ce:6e:60:
1d:6a:d2:bb:7c:62:50:3e:3e:84:75:67:c5:42:05:
40:c6:9b:96:fa:75:a8:23:ce:77:9b:a1:e6:4e:1e:
ba:a1:1a:89:2a:db:98:dd:a5:f0:d0:b5:63:4d:90:
74:bf:20:b8:ef:80:7f:25:f7:10:64:76:5b:53:13:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:65:0F:A4:20:E5:FC:B0:D8:F6:F0:60:62:D7:4C:34:29:59:6A:AF
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/AmUPpCDl_LDY9vBgYtdMNClZaq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.138.0/24
185.16.204.0/24
217.146.81.0/24
217.146.88.0/24
IPv6:
2a01:4020:15::-2a01:4020:16:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:01:ba:d0:88:f0:4f:67:02:fb:ce:1e:3d:d3:34:f0:80:77:
5e:87:52:1b:8e:cb:b3:de:89:57:4c:46:cb:72:81:01:8b:3b:
db:2b:2d:a4:cf:35:5c:bc:d1:37:e1:5b:0c:f2:b1:76:19:d0:
a0:f9:71:99:70:83:68:cd:03:5f:93:9e:82:c2:f5:47:47:22:
b7:77:0e:e2:f1:1c:c2:a4:21:d3:19:31:b1:0e:be:85:33:08:
17:b4:81:08:96:60:ac:06:0f:10:4b:6f:28:53:2a:84:92:51:
5c:a8:fa:6d:24:f6:9d:7e:98:aa:65:23:8a:f4:db:d3:06:c0:
97:eb:9f:fd:c6:e5:0e:8b:87:f2:d6:ae:cd:e1:6f:71:e1:ee:
49:f5:c0:fe:4e:9d:f5:0c:03:e5:8e:e4:a6:68:b0:e0:e6:84:
d2:4e:cb:b1:ca:cb:95:f0:e6:eb:ef:89:18:da:6e:11:7d:44:
d6:71:6a:40:d1:f5:b5:f7:f1:72:88:61:bc:5f:ee:bc:53:8c:
8c:42:49:e3:a9:c8:70:37:8e:4b:9b:bb:13:32:ab:05:5e:39:
75:9a:b9:26:bc:73:2c:25:e2:e3:57:79:a7:86:a7:8f:a0:de:
cf:30:8e:71:f9:6c:9a:d0:5e:e2:80:a0:0c:dd:43:97:88:ad:
dd:02:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org