Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/86FV7_YS60FOekUkDz5gsWW5qbo.roa
File: 86FV7_YS60FOekUkDz5gsWW5qbo.roa (raw, json)
Hash identifier: +F8688O6HsViji9AiBVu38SyriABAU6Gk2X9F7nvgpo=
Subject key identifier: F3:A1:55:EF:F6:12:EB:41:4E:7A:45:24:0F:3E:60:B1:65:B9:A9:BA
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 1AFE360A
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/86FV7_YS60FOekUkDz5gsWW5qbo.roa
Signing time: Sat 01 Jan 2022 09:54:53 +0000
ROA not before: Sat 01 Jan 2022 09:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47377
IP address blocks: 194.62.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452867594 (0x1afe360a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Jan 1 09:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3a155eff612eb414e7a45240f3e60b165b9a9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:59:cc:64:f7:c1:c4:e3:e2:51:da:c1:f2:
bd:f2:0d:5c:e4:3e:19:0b:b5:e5:1c:2b:ec:1c:30:
6c:58:a1:49:ca:e4:48:df:fd:3f:b0:03:73:8f:42:
de:00:c2:25:44:cc:66:31:36:9b:e4:cf:72:ae:37:
51:34:d9:c2:f0:0b:90:3f:6e:63:3a:70:f9:f2:ec:
d6:dd:73:95:6c:d3:35:e9:0e:ef:58:5a:4a:37:59:
19:6c:9f:07:12:13:3e:f1:3b:2f:35:c6:e2:8d:9c:
a4:19:c5:08:57:b6:6e:86:d1:a3:cd:b5:13:fc:f2:
53:96:e6:c9:a6:86:01:e3:fa:ec:00:0b:3f:b5:bc:
0d:e6:f2:4a:df:f8:be:e8:70:0b:59:f3:67:09:c7:
0f:19:f1:d0:46:f2:f8:3d:b7:b8:53:c4:5d:9d:74:
e6:65:98:ea:18:e6:9a:26:f4:8e:4c:14:2e:85:1b:
42:43:e6:8b:4e:87:d3:83:78:5b:31:ab:66:bb:de:
23:b3:2e:9e:3a:a9:e7:20:88:10:9f:68:67:8e:a2:
cb:64:ec:d1:6e:a9:e2:f1:f4:18:f8:55:3b:91:22:
8e:14:91:96:1d:86:22:e0:fc:ac:cf:ea:6b:29:d8:
78:79:de:93:42:71:5c:6f:d3:f6:19:da:09:a4:5e:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A1:55:EF:F6:12:EB:41:4E:7A:45:24:0F:3E:60:B1:65:B9:A9:BA
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/86FV7_YS60FOekUkDz5gsWW5qbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.72.0/24
Signature Algorithm: sha256WithRSAEncryption
53:35:95:7b:32:08:d1:a6:41:65:c7:a5:f9:05:d9:c9:bc:7e:
8f:2a:9d:5d:0a:ec:1e:2a:e9:1b:97:72:49:98:43:5f:c9:98:
45:03:ce:57:ef:70:5b:9c:ea:f7:e3:13:94:8a:78:be:5e:96:
b0:4e:81:16:d2:d2:0e:28:4e:e0:5f:1d:54:b8:27:91:0d:3c:
ad:29:c5:2d:06:1c:44:36:4a:c9:d3:03:4d:3f:c2:8b:1a:fc:
e6:a3:75:aa:eb:ae:4b:bb:e3:2b:6a:64:1c:eb:1b:83:fd:8d:
0f:60:a0:cb:0c:4f:d6:c0:13:30:36:62:92:6e:03:98:ca:67:
64:34:f7:97:4b:61:44:ef:c6:91:42:53:ef:fb:bc:ca:d5:e8:
bf:58:8c:26:9a:5c:06:e6:53:62:0e:8f:3b:ed:57:ff:f1:78:
c2:aa:e7:54:e8:67:f4:8c:82:85:75:32:07:76:bf:d8:f1:dd:
4f:b5:1b:65:62:0f:1e:b1:fe:bc:15:08:c2:a7:c5:a9:99:2e:
65:0f:d0:5f:4d:b2:45:a4:11:5f:f4:43:9a:02:28:1c:c7:c7:
c6:45:e2:c2:68:60:c5:21:01:d8:13:33:95:df:40:54:82:16:
b5:01:4f:cc:8e:e7:89:71:d8:6c:42:78:b4:81:d2:b4:b9:b4:
a7:86:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:55 2024 by rpki-client on console-ams.rpki-client.org