Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/FNZFzSpYaOjhF64bB-IrBho0_E8.roa
File: FNZFzSpYaOjhF64bB-IrBho0_E8.roa (raw, json)
Hash identifier: kKYUAvXaQuYYPqAgJU91ChESVPj0k3B9xGxX9vhmKLQ=
Subject key identifier: 14:D6:45:CD:2A:58:68:E8:E1:17:AE:1B:07:E2:2B:06:1A:34:FC:4F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 086CAF73
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/FNZFzSpYaOjhF64bB-IrBho0_E8.roa
Signing time: Sat 01 Jan 2022 14:04:04 +0000
ROA not before: Sat 01 Jan 2022 14:04:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 51.149.8.0/24 maxlen: 24
51.149.14.0/24 maxlen: 24
51.149.252.0/24 maxlen: 24
51.149.250.0/24 maxlen: 24
51.149.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141340531 (0x86caf73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jan 1 14:04:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14d645cd2a5868e8e117ae1b07e22b061a34fc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:a7:76:b3:57:67:66:02:f4:5d:34:64:28:
e6:56:69:26:3d:af:8a:0b:c1:38:22:93:f3:d1:8f:
c1:d0:ea:0c:2e:a3:e3:43:d2:7d:9b:a2:79:39:0c:
07:3a:1d:f5:de:d5:de:81:93:b3:54:24:fb:f6:dc:
96:1d:05:80:02:a7:0d:70:4f:22:ff:cc:f1:20:86:
7e:34:6c:5f:f8:a8:1d:7b:92:89:73:d7:fe:67:f6:
be:74:14:29:6c:da:a6:fc:53:d5:13:4d:55:99:95:
08:d5:ad:5f:d1:31:ae:27:db:2c:11:df:54:ee:dc:
21:e2:ee:01:d9:65:00:68:a1:04:f7:56:80:90:76:
2e:d6:c8:0a:73:b7:b3:6f:8a:e4:66:e7:ec:c9:95:
4d:37:16:0c:a3:f6:54:d2:6c:d8:8c:70:28:8e:6f:
f6:7f:69:96:e1:30:ad:d3:2c:a9:8c:48:4d:67:4c:
72:67:0a:29:c5:cc:ed:3b:43:3b:38:d1:a9:fd:d1:
a0:c9:bb:6e:42:0f:7a:16:1e:2a:c8:f2:d8:5a:27:
fa:20:7f:f1:b9:76:f4:de:8c:e1:1a:ad:cb:b9:1d:
73:5a:26:65:9a:94:6a:d2:fa:9e:84:b2:42:0b:97:
4f:08:49:21:aa:f2:df:2a:f9:f9:fe:cc:52:b6:3c:
5a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D6:45:CD:2A:58:68:E8:E1:17:AE:1B:07:E2:2B:06:1A:34:FC:4F
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/FNZFzSpYaOjhF64bB-IrBho0_E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.8.0/24
51.149.14.0/24
51.149.250.0-51.149.252.255
Signature Algorithm: sha256WithRSAEncryption
19:5b:b2:b4:a2:db:04:40:15:b4:20:52:e9:aa:52:22:52:eb:
ef:e4:4c:71:bb:d8:bb:ae:12:9f:d7:13:67:f3:41:db:7d:11:
cb:5b:6e:ee:02:64:10:8b:bb:3f:5d:9f:f4:83:4c:f7:b3:fb:
5d:bf:bb:00:e1:59:ed:08:88:c7:b4:f5:f8:13:7b:56:2c:88:
56:63:f0:fc:5d:71:ef:51:58:d1:d4:51:00:f6:80:28:64:53:
81:65:8d:54:c7:aa:66:09:17:6e:81:d0:6d:d0:90:a3:33:78:
8f:d2:a3:e5:b2:0e:87:21:fb:72:ea:73:97:e3:b1:e2:81:b8:
1b:65:a9:bc:a6:35:41:6b:31:19:68:9e:c3:e4:00:cb:37:91:
cb:46:57:7b:d9:6a:32:7e:9c:ad:e4:12:47:b1:10:0b:9f:6e:
58:22:a9:33:34:4d:a8:bb:1f:6f:1d:66:0f:10:91:88:1b:1b:
d4:5d:96:75:92:8e:e7:e9:30:ae:d9:78:11:6d:89:2a:98:90:
f2:5b:62:b5:e7:f8:e8:d8:63:cd:dd:af:20:bc:f4:eb:4e:16:
ef:df:52:cf:01:f2:9c:4d:50:ae:cb:21:f6:89:ab:1f:dd:f9:
a8:16:22:34:cf:51:ce:40:94:11:09:4f:b5:13:b6:1f:7e:7d:
6c:2f:d8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:04 2024 by rpki-client on console-ams.rpki-client.org