Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/fcaXEk_7npJLE54p4N2cKVP8cL0.roa
File: fcaXEk_7npJLE54p4N2cKVP8cL0.roa (raw, json)
Hash identifier: M+Q3pUjIs1g5l/LppTrJ80qmO95KPdCeDILvKwkVHRA=
Subject key identifier: 7D:C6:97:12:4F:FB:9E:92:4B:13:9E:29:E0:DD:9C:29:53:FC:70:BD
Certificate issuer: /CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Certificate serial: A10A56
Authority key identifier: 7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/fcaXEk_7npJLE54p4N2cKVP8cL0.roa
Signing time: Sat 01 Jan 2022 00:52:36 +0000
ROA not before: Sat 01 Jan 2022 00:52:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49855
IP address blocks: 202.49.88.0/23 maxlen: 23
91.212.95.0/24 maxlen: 24
2001:67c:18e8::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10553942 (0xa10a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6a8e5d55c2498a82636f99f8fc9e319e07771e
Validity
Not Before: Jan 1 00:52:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dc697124ffb9e924b139e29e0dd9c2953fc70bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:e0:27:4d:92:e2:8e:10:4b:6e:52:bd:5f:
e1:11:64:8e:e3:78:99:31:4b:ca:4a:75:0b:92:34:
20:9f:63:03:c4:f0:87:fb:16:e1:7f:fe:0f:91:8d:
83:67:ac:af:85:ee:e6:0a:53:08:a3:4b:03:27:bf:
68:90:59:d3:a6:a4:92:92:19:8f:9a:b0:28:1e:02:
db:24:0f:a6:12:d6:23:c8:ba:ec:0d:1a:53:e3:fd:
9a:93:f8:40:8e:58:cf:8d:dd:8f:31:e0:1e:26:3d:
fc:e5:1d:ac:1c:60:af:c1:4f:ff:5c:0e:47:12:09:
58:38:8a:2b:e8:f1:fa:30:25:a4:e5:65:52:25:fa:
74:1c:fd:e9:5e:e6:8c:a3:8f:b9:48:23:5c:51:4c:
eb:52:0b:1c:18:8c:4a:27:24:02:fd:1e:1b:8b:40:
aa:48:aa:a4:de:ce:e6:19:d4:97:64:70:9b:5c:ae:
92:2f:e6:b2:c9:c3:0f:d9:58:fe:8f:eb:31:3b:c2:
56:fe:5a:d4:ee:4a:4b:fe:fd:44:77:cb:58:4c:1c:
f1:a3:79:66:a5:8a:87:53:42:a6:dd:d5:93:c3:8a:
0a:b2:35:1b:bd:e5:49:7a:2b:2a:c0:8c:d1:84:38:
66:7a:bb:33:63:ed:a7:c6:d6:3e:3e:ed:a0:f7:1b:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:97:12:4F:FB:9E:92:4B:13:9E:29:E0:DD:9C:29:53:FC:70:BD
X509v3 Authority Key Identifier:
keyid:7F:6A:8E:5D:55:C2:49:8A:82:63:6F:99:F8:FC:9E:31:9E:07:77:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/fcaXEk_7npJLE54p4N2cKVP8cL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/27fce1-11ce-4a32-a649-e076b51721ad/1/f2qOXVXCSYqCY2-Z-PyeMZ4Hdx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.95.0/24
202.49.88.0/23
IPv6:
2001:67c:18e8::/48
Signature Algorithm: sha256WithRSAEncryption
6a:11:2c:7d:bc:c0:ba:fd:7f:76:24:be:c1:a1:c0:85:d0:fb:
9d:7d:91:c4:ed:60:20:8c:bc:2c:90:cb:89:56:e1:6e:18:aa:
90:2a:27:0b:01:da:ad:47:2f:78:8b:48:77:54:34:fb:0e:52:
02:0c:55:de:81:48:9e:cd:05:16:33:cc:a6:6c:4f:c1:55:64:
36:72:30:a3:b0:71:af:1a:ee:30:e9:3e:53:91:ea:d7:23:21:
22:b0:fb:23:b1:85:d2:b7:23:16:8e:d0:cf:a6:0e:d8:b3:ff:
06:2f:06:af:dd:41:8c:8e:cf:c5:de:75:4b:90:dc:40:78:64:
ef:ca:92:01:c5:f8:ae:7c:06:51:9e:62:02:1d:0a:bb:c3:71:
e7:b5:a8:50:14:dc:a6:29:7a:b0:c2:00:fc:65:1b:be:8f:3b:
b7:1a:4f:3f:85:96:0b:be:93:19:96:0e:ee:06:37:b3:04:e5:
76:00:8d:c8:8f:da:f7:8d:01:24:8d:cb:d6:71:fe:0b:34:13:
a5:94:33:cd:67:fc:13:d3:18:44:6d:ad:ae:6e:f8:d1:ca:c1:
3c:82:b3:8e:69:52:94:b5:bf:ff:f3:82:36:45:c4:cc:ab:5a:
de:f8:6f:57:f9:f0:b8:0e:63:ac:a4:5e:d4:22:90:a3:ee:70:
94:90:09:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:04 2024 by rpki-client on console-fra.rpki-client.org