Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Fv0UC66Pr6T0CyNgPjYkeACFQNs.roa
File: Fv0UC66Pr6T0CyNgPjYkeACFQNs.roa (raw, json)
Hash identifier: X2OcjA58dEOw3sXtrohm/Y2zumU7hXQ2NNTJBTgk1cA=
Subject key identifier: 16:FD:14:0B:AE:8F:AF:A4:F4:0B:23:60:3E:36:24:78:00:85:40:DB
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200BD6EA05D9F69488C5A010A84B64F4E
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Fv0UC66Pr6T0CyNgPjYkeACFQNs.roa
Signing time: Fri 15 Jul 2022 07:23:10 +0000
ROA not before: Fri 15 Jul 2022 07:23:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208157
IP address blocks: 2a00:7180:8000::/46 maxlen: 46
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:bd:6e:a0:5d:9f:69:48:8c:5a:01:0a:84:b6:4f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 07:23:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16fd140bae8fafa4f40b23603e362478008540db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:10:fa:20:cb:8c:ef:d9:af:27:b8:c4:44:
7a:2c:b0:67:a1:9d:68:b6:8a:94:83:94:c4:93:66:
4d:ed:1a:80:86:d2:78:78:39:8e:ec:3d:7d:34:61:
4c:78:a4:92:e2:2a:38:c0:47:ee:e1:43:1d:05:bc:
5b:df:0b:22:7f:dd:d2:6c:64:09:62:d1:05:09:f7:
07:66:14:d1:ba:b9:5e:40:d3:c4:0f:b2:60:26:f0:
5f:13:82:f9:30:d5:f3:9b:be:61:97:d2:7c:74:09:
f6:f5:c1:99:c9:21:6d:c1:85:07:35:90:af:c3:38:
da:3e:62:d0:ed:21:a7:de:5d:ea:e0:4a:7d:7e:b0:
aa:f7:22:11:12:b8:8e:60:e0:cc:7b:93:6d:4a:d9:
51:0c:2d:22:11:ca:42:b0:c5:54:05:48:f0:bf:f1:
69:6f:4b:9d:8e:ff:89:7f:75:c3:17:2f:cb:c7:f1:
c9:d3:07:40:78:b4:b8:63:9c:59:a2:e3:57:20:a6:
0a:19:ea:3e:e3:42:8d:62:ab:f2:d1:f6:d7:b4:57:
77:74:ea:f7:96:bf:a7:a5:9c:49:82:2a:14:75:19:
36:80:6a:64:5a:23:0c:d7:7f:15:77:a6:d7:ae:05:
4e:4e:17:3b:e3:67:72:ea:b8:78:18:9d:89:1a:31:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FD:14:0B:AE:8F:AF:A4:F4:0B:23:60:3E:36:24:78:00:85:40:DB
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/Fv0UC66Pr6T0CyNgPjYkeACFQNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8000::/46
Signature Algorithm: sha256WithRSAEncryption
3d:a3:16:e0:19:e9:b3:42:d4:13:d7:b4:a5:20:b7:e0:e2:e7:
e3:f6:68:a6:0c:e6:df:9a:b8:44:6a:48:3f:0e:3f:61:4e:66:
41:13:77:ce:63:82:5a:9e:ea:cc:59:6b:f8:de:7b:e1:e1:43:
a7:66:41:b4:63:98:ae:75:bb:bc:4f:f9:f0:b9:85:3f:74:30:
7b:1d:28:fb:2f:c6:b0:d8:9e:82:98:aa:a7:ca:94:9f:9c:e1:
62:cb:df:4c:c2:84:0f:53:0a:1f:d6:40:79:03:82:e7:ab:44:
01:d5:11:5c:48:91:ce:13:25:50:48:56:48:50:5e:35:0b:e4:
17:93:59:23:0e:69:48:a6:fb:4e:06:31:a5:be:9a:7e:b6:ea:
9b:10:82:d7:62:ca:6c:cc:f7:5f:26:6a:c2:1a:a8:f7:36:63:
6d:c6:cb:7b:02:50:ce:4c:59:ad:b9:7b:c1:fb:96:56:05:20:
9e:23:1b:00:4a:8a:b6:f1:ca:40:e4:6d:06:61:7b:97:f4:ba:
95:ed:55:d2:a8:67:ac:a4:48:e4:fe:e4:bc:76:ca:c8:b9:4b:
1b:18:58:74:f6:03:30:09:71:db:cf:ee:46:b6:18:29:8c:fe:
fa:8d:78:e6:43:2b:07:b7:8a:c6:40:ef:a0:77:31:95:15:c6:
50:35:d4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org