Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/FaIc-x9wCHpHjOphynVwcFL0P-4.roa
File: FaIc-x9wCHpHjOphynVwcFL0P-4.roa (raw, json)
Hash identifier: 8ewi+Ob5ValtAufN8DMhZEkflL896eVAPU0sB+a8xIg=
Subject key identifier: 15:A2:1C:FB:1F:70:08:7A:47:8C:EA:61:CA:75:70:70:52:F4:3F:EE
Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Certificate serial: 05729627
Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/FaIc-x9wCHpHjOphynVwcFL0P-4.roa
Signing time: Sat 01 Jan 2022 08:03:59 +0000
ROA not before: Sat 01 Jan 2022 08:03:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13127
IP address blocks: 176.117.57.0/24 maxlen: 24
2001:67c:17ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91395623 (0x5729627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c
Validity
Not Before: Jan 1 08:03:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15a21cfb1f70087a478cea61ca75707052f43fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:4e:d4:35:13:fd:a7:cf:ec:45:cc:5a:90:
fe:70:24:1f:79:0b:2a:14:93:15:b0:a2:69:92:92:
1e:74:c4:76:3f:b3:09:12:8f:36:90:73:c6:0d:b7:
22:6b:38:64:65:08:a2:77:19:6b:65:d7:9f:72:ca:
8d:2d:3f:c2:b9:bf:0a:04:52:10:a9:a6:dc:5b:81:
fa:c9:d2:4c:31:fa:52:66:05:14:3a:25:f5:ec:ec:
7f:f9:f5:8f:eb:0e:4a:4f:6c:77:63:89:35:af:bc:
11:ed:6f:45:19:5a:ba:0a:8d:fe:6c:c1:cf:95:89:
e3:86:f7:f2:09:29:ca:79:23:3f:06:83:e4:18:b0:
41:90:1a:34:cb:d6:3e:12:3b:2c:9e:2f:7b:16:1e:
d9:e5:54:0b:89:c2:d9:9d:92:6c:76:6d:cb:49:65:
4d:cd:8a:5f:1a:3f:d4:ee:bf:c0:f3:c5:86:20:6a:
c6:1c:24:9a:5c:a7:ac:f2:24:3d:3a:c5:09:63:a0:
7a:c7:8c:de:1e:98:ae:8f:a1:e6:f6:63:54:48:ba:
f4:d1:63:9b:05:85:ca:94:42:a5:d4:7b:d5:45:ff:
82:71:07:2a:dd:8e:5a:bf:af:77:b5:57:a5:1b:4f:
12:79:30:d6:42:55:49:49:ed:4c:27:84:97:ec:04:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A2:1C:FB:1F:70:08:7A:47:8C:EA:61:CA:75:70:70:52:F4:3F:EE
X509v3 Authority Key Identifier:
keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/FaIc-x9wCHpHjOphynVwcFL0P-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.57.0/24
IPv6:
2001:67c:17ec::/48
Signature Algorithm: sha256WithRSAEncryption
7f:e6:8e:ed:1e:43:f0:1b:a8:58:ca:89:94:e0:a9:ea:bf:48:
a9:cd:4f:a2:e0:a5:06:ae:b9:ef:4f:e9:45:49:02:41:94:c6:
cc:48:dc:99:d4:8e:bd:92:3b:14:b7:7b:3b:44:2b:3a:dc:06:
98:67:4a:34:6f:99:a9:6c:90:30:51:ec:97:26:8f:ad:ee:31:
02:5e:30:c4:b1:f4:a0:7d:c5:a1:44:90:45:67:72:53:5d:fe:
7e:bf:52:11:95:60:db:d8:f4:f0:dd:ed:5e:19:8f:48:ac:bd:
a7:e0:99:09:1d:b6:00:cb:d2:d4:4b:50:35:20:0d:8a:fe:72:
eb:70:ce:f1:92:c5:b7:cb:e4:a8:66:b9:1a:17:03:94:11:1c:
2e:ab:86:43:43:46:dd:2f:18:1b:9f:f5:1c:15:63:5d:80:77:
b3:3a:b7:b0:47:41:fa:fe:02:56:b5:27:17:29:8e:75:f6:23:
f9:2f:a4:90:5d:2a:0e:1e:db:9a:b5:64:22:29:3a:08:e4:61:
f6:a3:d4:5c:6c:48:32:b3:2e:36:99:a5:e0:28:ae:c1:66:dd:
b5:68:68:a1:8d:14:4a:e2:15:0b:fe:06:83:f6:50:b4:17:a9:
e9:3f:75:47:b0:14:49:89:f2:3a:51:35:e0:56:72:74:8c:d7:
da:ba:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:04 2024 by rpki-client on console-ams.rpki-client.org