Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/FRzzS395OBBwBniCvd5clNKcP8U.roa
File: FRzzS395OBBwBniCvd5clNKcP8U.roa (raw, json)
Hash identifier: e2YmXzrZbHzAVTY0ynZiE7JgK95CFyyO3WGqwikAPxQ=
Subject key identifier: 15:1C:F3:4B:7F:79:38:10:70:06:78:82:BD:DE:5C:94:D2:9C:3F:C5
Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Certificate serial: 0184F891E10AD4AAD1A4087B5FD6C39F276B
Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/FRzzS395OBBwBniCvd5clNKcP8U.roa
Signing time: Fri 09 Dec 2022 20:27:00 +0000
ROA not before: Fri 09 Dec 2022 20:27:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201285
IP address blocks: 185.196.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f8:91:e1:0a:d4:aa:d1:a4:08:7b:5f:d6:c3:9f:27:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee
Validity
Not Before: Dec 9 20:27:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=151cf34b7f79381070067882bdde5c94d29c3fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:01:c3:20:83:3c:ba:14:80:03:99:b9:e3:
6d:0c:0a:75:39:9d:17:ca:eb:99:d5:73:db:aa:17:
4b:61:04:05:85:5e:a8:9c:4e:f1:fa:22:75:c0:34:
12:f8:6e:c0:83:b5:2f:ba:e6:33:39:6d:ef:5b:cc:
fe:b4:97:ec:e7:64:36:07:1a:19:5c:af:32:93:4b:
d1:ff:35:83:fb:6a:76:83:35:f1:ca:59:2a:1c:71:
0e:0d:74:40:7c:cf:ff:f0:98:da:0b:a1:a3:ff:44:
1a:5f:97:da:38:a6:40:79:fc:69:9c:92:cf:62:74:
c6:a7:66:6c:31:20:44:ef:b2:5f:89:9c:0f:4d:f3:
ef:8f:c3:aa:de:82:31:60:6d:b3:a1:bc:17:fa:e5:
b2:80:be:73:a4:13:36:3b:50:1f:7e:fc:22:9d:05:
a2:75:08:29:a5:99:20:1f:a8:02:de:60:50:07:0e:
ad:5a:3b:b7:98:b1:1a:57:c5:32:47:ff:bc:c0:e8:
cb:d7:14:96:48:77:0a:eb:2e:8f:1a:b9:5e:f2:89:
a8:97:cf:5d:15:95:85:f1:d0:ee:06:91:91:b9:4a:
1d:7c:5c:ce:01:01:bb:8f:b8:d0:19:9f:e8:77:85:
4f:8c:82:3a:07:d2:8d:20:b5:bd:a2:22:d5:a9:ea:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:F3:4B:7F:79:38:10:70:06:78:82:BD:DE:5C:94:D2:9C:3F:C5
X509v3 Authority Key Identifier:
keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/FRzzS395OBBwBniCvd5clNKcP8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.31.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:34:af:01:b9:7a:52:43:9b:0c:85:6a:1f:68:6e:79:94:e5:
dc:4f:74:f3:6d:f7:63:fd:73:32:3b:0d:d2:00:78:ac:e9:a8:
e6:19:b4:29:95:98:58:1c:99:05:a4:c6:28:3d:ab:30:69:75:
b0:c4:4d:a8:fd:11:e2:4b:d2:fb:55:5b:07:40:f7:5a:b8:5e:
3e:24:73:44:81:b5:69:8d:be:58:4b:fc:96:62:a1:96:57:34:
b3:42:1f:92:3b:1b:ec:1f:8c:f6:bf:71:a8:b1:18:ce:0e:04:
bc:75:86:52:6f:76:38:d9:0b:18:e4:9f:fd:d4:27:4c:c4:bd:
0d:fb:64:3a:bf:67:30:29:9e:d9:ce:10:7f:60:c5:82:53:d9:
f0:5c:bf:c8:70:78:ce:de:ba:bb:08:31:3f:06:26:0e:91:96:
46:f3:67:9a:30:7f:5b:dd:ac:5e:50:a0:ea:41:bb:5c:e9:11:
23:cf:f0:d1:50:15:13:1b:eb:84:da:27:23:62:02:a5:cc:35:
3d:c8:5a:d4:f6:ec:ff:77:c5:cf:3c:90:46:60:5c:57:b0:fe:
f5:0b:3e:fc:55:6f:71:b1:a4:c7:ab:58:14:ce:17:e3:b0:d0:
dd:fd:0c:c1:dc:7f:48:28:bf:44:4c:9f:7e:b3:35:0d:f9:96:
c1:0c:b4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:41 2024 by rpki-client on console-fra.rpki-client.org