Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/FZZA-4DeriyxkGWdtCAniNmZpEE.roa
File: FZZA-4DeriyxkGWdtCAniNmZpEE.roa (raw, json)
Hash identifier: JpKn45/JiskWy8UiJOh53nPg9MR5ECuDgGyQlpfvtMY=
Subject key identifier: 15:96:40:FB:80:DE:AE:2C:B1:90:65:9D:B4:20:27:88:D9:99:A4:41
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 01A8494F
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/FZZA-4DeriyxkGWdtCAniNmZpEE.roa
Signing time: Sat 01 Jan 2022 16:06:58 +0000
ROA not before: Sat 01 Jan 2022 16:06:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211322
IP address blocks: 193.228.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27806031 (0x1a8494f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Jan 1 16:06:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=159640fb80deae2cb190659db4202788d999a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:21:77:56:69:72:f5:99:91:3b:5f:1d:5c:
0b:f5:f6:53:4b:d0:4e:b7:ab:85:b4:7f:76:ab:78:
e8:35:9d:8b:b5:db:78:3a:28:4e:f2:a8:b6:0e:e9:
43:5f:cb:d4:b7:b8:45:aa:cb:82:db:10:1b:db:e7:
ff:e6:9d:0e:7b:54:74:80:1b:e5:c4:a5:a2:78:9d:
98:41:a7:7e:5b:cd:87:f0:97:54:df:76:68:1f:ea:
22:53:b3:b7:f7:95:6c:59:4c:cd:80:2f:72:69:41:
ad:4f:01:b5:af:6d:d7:1f:b9:d8:54:dc:06:8d:0c:
ad:2f:8d:12:6c:ba:81:5c:aa:d4:25:9e:40:11:28:
69:21:8a:5f:a6:4c:2d:4f:ee:4a:d3:12:2e:6d:67:
27:51:78:30:c3:ef:5a:ca:4d:9f:00:99:f5:5f:6e:
0d:73:42:3d:e1:9d:3e:00:48:e5:58:34:e0:02:bd:
ad:bd:1c:ba:73:63:73:d4:64:93:e0:36:5f:66:c3:
4e:8c:f8:68:e8:b9:14:fa:40:98:13:2d:92:63:96:
ac:12:2f:b9:9c:2b:2d:c7:3f:06:31:b6:8b:2c:f2:
d4:96:b3:7a:ac:a2:61:bc:e3:87:79:4f:aa:27:00:
fa:0e:d1:fb:90:cd:fe:43:0a:82:06:c8:87:4a:a8:
0c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:40:FB:80:DE:AE:2C:B1:90:65:9D:B4:20:27:88:D9:99:A4:41
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/FZZA-4DeriyxkGWdtCAniNmZpEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.126.0/24
Signature Algorithm: sha256WithRSAEncryption
26:41:68:bb:ea:6a:e3:72:b1:ff:0d:ee:1d:b4:c8:1e:69:cb:
5f:a7:2b:45:5a:b1:fe:e3:c3:7f:66:99:37:da:d8:6c:25:59:
2b:61:94:9f:db:be:19:dd:3c:84:f8:05:e6:a3:19:7a:ae:e3:
48:18:e7:57:d8:16:57:df:fd:d6:47:30:d3:11:4b:d1:7d:54:
9a:e5:90:9d:89:e6:54:d9:2a:b1:ec:48:be:d1:c2:4a:95:83:
fc:59:c7:91:8f:79:78:54:1d:f2:c9:e5:92:93:f2:98:ac:0a:
57:4d:83:63:a3:c6:d5:9f:12:29:c4:87:ad:76:6e:4c:64:d0:
36:1e:fa:ea:a3:f2:5e:8f:e6:20:99:67:d4:b5:05:f8:7f:1b:
f0:a8:88:04:9e:0b:09:c7:d6:40:6b:7f:b0:47:82:1a:de:e1:
f8:5c:56:b5:88:70:3d:4d:b0:70:b1:9d:58:73:cf:8b:48:16:
c3:d5:2e:56:27:74:bb:64:f7:f0:ee:7a:88:84:be:53:16:fe:
0e:7e:a6:59:70:f5:28:42:97:37:5b:f4:bb:85:23:6c:29:41:
e9:dd:75:3e:92:45:60:86:fd:ab:e6:13:2a:a9:c0:22:17:48:
89:0f:55:96:ff:94:63:58:77:31:07:59:51:f0:69:ae:39:3d:
64:f7:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:36 2024 by rpki-client on console-ams.rpki-client.org