Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/FwA-UkUwyGH8oIXUNDw89FE5msw.roa
File: FwA-UkUwyGH8oIXUNDw89FE5msw.roa (raw, json)
Hash identifier: ux8NowGNgtjMGwebgIkl3fz7d+GIVE2bf5+NfJiB2wQ=
Subject key identifier: 17:00:3E:52:45:30:C8:61:FC:A0:85:D4:34:3C:3C:F4:51:39:9A:CC
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 018539011865E3EFEA5856CA7D0E81275F65
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/FwA-UkUwyGH8oIXUNDw89FE5msw.roa
Signing time: Thu 22 Dec 2022 08:44:11 +0000
ROA not before: Thu 22 Dec 2022 08:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 194.56.124.0/23 maxlen: 23
194.56.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:01:18:65:e3:ef:ea:58:56:ca:7d:0e:81:27:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Dec 22 08:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17003e524530c861fca085d4343c3cf451399acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:ed:bf:f3:88:0e:12:2d:77:41:a2:e8:e7:
19:d7:ae:34:bd:70:f6:ae:b9:eb:12:b4:ec:e1:f8:
e8:33:6a:2f:c6:c7:3f:1a:74:32:47:3a:b6:6c:25:
0a:bd:df:e3:6c:ee:b5:f8:6c:52:22:c8:9e:c6:59:
82:3f:11:22:34:3e:d5:f0:4b:55:b8:0f:09:01:1e:
c8:29:13:e0:de:a4:c2:a5:bb:e4:da:4b:6e:00:29:
0f:43:96:df:75:28:40:cc:83:f4:84:27:8b:5f:93:
fa:e0:4e:6c:6a:08:ff:2f:fb:27:a6:92:30:bc:6b:
1b:ac:00:63:91:21:e0:53:e5:d3:18:07:5b:e9:cb:
5c:a0:1e:c6:d7:14:08:bd:94:ee:1f:11:1f:ae:a9:
b5:1b:dd:9f:d1:9e:0b:87:f8:0d:e7:55:82:a2:ba:
ff:cf:26:4f:34:c5:a8:a0:4b:ee:48:1c:c9:0a:f1:
76:a0:20:ab:00:33:1f:79:41:be:89:5f:fa:d9:d6:
f8:dd:24:05:ea:8b:4a:6f:1c:c6:8d:77:b0:00:ff:
9a:50:9d:13:18:47:f3:2e:6d:da:03:ab:47:dc:78:
e0:98:81:fc:9f:44:4b:3b:07:72:bb:f6:f0:bd:52:
95:59:30:52:d6:aa:8e:20:58:ce:c3:e5:bf:6f:97:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:3E:52:45:30:C8:61:FC:A0:85:D4:34:3C:3C:F4:51:39:9A:CC
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/FwA-UkUwyGH8oIXUNDw89FE5msw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.124.0-194.56.126.255
Signature Algorithm: sha256WithRSAEncryption
7e:7c:cd:64:25:6a:1d:33:58:54:e3:84:50:87:2f:98:f9:9b:
1d:eb:8d:c6:1b:99:35:21:cd:86:17:d9:1d:c1:08:ac:84:84:
30:42:c5:0e:62:f9:57:52:e4:8b:0e:f0:7e:12:ca:3b:c1:10:
14:14:ce:b1:7f:11:a8:71:ad:53:e1:a6:59:08:34:b1:7a:0c:
99:4c:64:12:02:d4:df:f0:8e:a0:3d:11:19:72:5a:5e:bf:23:
98:2f:3b:b9:6a:09:22:80:6d:07:40:aa:8b:95:68:f6:5b:28:
45:3f:72:9b:02:37:ea:2c:23:bf:cd:f8:ae:aa:93:e4:77:09:
22:4f:ae:f5:e4:89:87:85:f3:eb:21:c9:f9:01:2c:f2:2b:d5:
9b:b3:c9:c8:18:ed:ae:97:4f:69:6d:63:be:6d:27:54:33:6d:
e2:bb:81:e7:41:bd:6a:63:c7:03:3e:d3:7e:65:10:5f:5f:d4:
59:50:58:76:a9:fe:30:af:96:b4:23:a8:cc:53:b1:38:98:16:
53:ae:5b:50:f8:63:a5:bd:2b:88:f8:e0:71:f4:5d:df:7f:f8:
4a:ef:5b:27:5f:32:4b:98:48:1f:77:17:72:1a:91:6d:63:11:
7c:e0:53:01:8e:84:d5:59:f7:d7:14:9b:1f:b8:61:33:41:73:
f2:b3:8b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:39 2024 by rpki-client on console-ams.rpki-client.org