Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/FSz2qrx7hoQBRMkiiWUC9BZQvWA.roa
File: FSz2qrx7hoQBRMkiiWUC9BZQvWA.roa (raw, json)
Hash identifier: K1J5LJquxJD9avs8gY/z5Hefn72suGVU7O0I8rt2RwM=
Subject key identifier: 15:2C:F6:AA:BC:7B:86:84:01:44:C9:22:89:65:02:F4:16:50:BD:60
Certificate issuer: /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial: 011231
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/FSz2qrx7hoQBRMkiiWUC9BZQvWA.roa
Signing time: Tue 25 Jan 2022 08:34:52 +0000
ROA not before: Tue 25 Jan 2022 08:34:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51778
IP address blocks: 194.5.228.0/22 maxlen: 22
194.5.228.0/23 maxlen: 23
2a0c:e740::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70193 (0x11231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
Validity
Not Before: Jan 25 08:34:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=152cf6aabc7b86840144c922896502f41650bd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:96:e2:2d:31:03:23:d5:89:ea:b4:f7:a7:
25:8c:bb:ab:4b:bf:7e:ed:3e:f9:58:04:26:13:17:
c6:b0:36:84:ff:7d:03:44:e7:7c:2d:a1:07:1b:ca:
b9:9f:a7:76:0e:0b:95:ab:68:2d:98:e7:e8:c4:23:
92:33:7c:84:72:7e:57:5d:8a:8c:23:96:6b:41:0f:
bf:fc:81:ec:fe:3d:9d:de:fa:e7:b1:f0:7f:cf:c0:
2e:22:f7:35:7a:3c:9a:a2:57:cb:26:15:3e:da:41:
30:5b:6f:6c:04:53:36:49:84:b1:d4:b6:23:5b:71:
d9:c8:90:f7:df:18:1d:98:29:a5:47:9e:69:7b:b9:
13:b8:b5:4c:64:27:0c:35:67:53:2c:83:3c:46:c3:
b9:c2:6e:e7:0e:10:c9:43:44:7c:90:af:18:5a:92:
a7:91:72:ce:91:c2:50:8e:7e:85:1d:b4:a8:1f:be:
20:35:65:b8:ef:ff:ae:a1:af:66:ac:95:23:78:61:
db:96:04:51:a6:2b:1b:ea:78:1d:f8:9a:61:ed:de:
66:88:79:36:8f:8d:a0:ab:20:a1:27:71:4a:e4:83:
ed:dd:05:0c:ed:40:29:96:c0:1e:d5:98:bc:ed:b7:
80:30:94:1e:ef:c4:05:30:79:08:2e:64:17:92:b4:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:F6:AA:BC:7B:86:84:01:44:C9:22:89:65:02:F4:16:50:BD:60
X509v3 Authority Key Identifier:
keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/FSz2qrx7hoQBRMkiiWUC9BZQvWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.228.0/22
IPv6:
2a0c:e740::/33
Signature Algorithm: sha256WithRSAEncryption
1a:04:54:22:12:e1:bb:1a:69:23:70:ff:90:51:d3:81:44:53:
9b:85:47:6f:84:78:9a:cc:d9:db:e9:70:65:24:0a:3c:7e:33:
69:9e:11:77:e9:2c:0b:47:a0:51:61:88:21:27:0f:eb:0b:c0:
5e:91:08:8f:0b:33:b3:65:f3:93:8b:72:e3:a1:35:ae:2a:74:
93:f9:ce:ea:8a:8d:11:ed:d9:3d:73:98:9b:52:67:9f:48:00:
4b:72:dc:9b:e4:84:4a:ce:23:79:84:b0:5c:16:ed:41:fa:2c:
28:ce:ae:8a:9c:5b:21:bb:31:f5:ed:72:c2:09:d6:b2:53:a1:
3f:c5:a1:79:3a:6b:7e:08:ad:67:4b:04:a1:a8:7f:1b:be:95:
ed:7a:72:3b:a6:32:8a:e8:44:40:9f:31:6f:b2:48:f3:9d:7a:
83:f4:b0:f7:81:98:fa:15:24:0b:51:22:a8:4b:b3:ed:0d:6c:
21:ff:84:74:8f:67:97:62:30:c6:3a:4c:13:1c:06:e7:8b:71:
e5:7a:88:27:54:6b:c5:36:12:06:bb:b6:b4:4f:21:b1:f8:e2:
b5:b5:86:4a:6e:f1:00:20:79:89:6c:8c:f7:da:e7:1f:3d:9f:
22:1c:d7:a1:f6:95:96:95:2a:88:5a:d0:a4:6f:64:3e:b5:6e:
f1:42:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org