Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FCr1rAJ_2qJdHoBa9GqeiLC3fL4.roa
File: FCr1rAJ_2qJdHoBa9GqeiLC3fL4.roa (raw, json)
Hash identifier: e6LqWy3ISwktcnYaZu/51XIPg7ahYFjsGEdwUr6HSTQ=
Subject key identifier: 14:2A:F5:AC:02:7F:DA:A2:5D:1E:80:5A:F4:6A:9E:88:B0:B7:7C:BE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01831D018AC6FFADE6F45A11090EA3F47858
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FCr1rAJ_2qJdHoBa9GqeiLC3fL4.roa
Signing time: Thu 08 Sep 2022 12:09:43 +0000
ROA not before: Thu 08 Sep 2022 12:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 193.124.133.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.164.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1d:01:8a:c6:ff:ad:e6:f4:5a:11:09:0e:a3:f4:78:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 12:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=142af5ac027fdaa25d1e805af46a9e88b0b77cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:7c:d1:06:76:73:e7:e4:0f:44:99:19:37:
a6:ac:dd:ff:bc:e7:e7:93:03:09:05:6a:ad:97:af:
4f:5a:f0:63:f8:33:5a:18:8d:69:ba:09:c0:78:33:
b6:16:85:06:4c:d8:16:55:e6:89:17:ef:06:19:38:
20:9e:6f:38:b0:75:cc:8f:ae:17:a6:f5:32:c0:7c:
ca:d6:35:44:9d:7a:1e:a6:bf:f4:cf:98:5f:75:56:
f7:ac:0b:94:e2:58:7b:bb:1d:4d:84:b2:aa:aa:64:
87:87:b8:a5:71:77:f1:ae:eb:b2:47:c7:c0:3c:65:
dc:bc:59:6d:4d:bb:c8:59:c3:a6:e4:2c:b6:53:2a:
c4:3b:21:a1:f7:70:4f:d4:fd:29:36:cb:b0:20:23:
9c:03:b4:b8:9c:73:76:57:02:1b:d8:a9:61:47:55:
49:e1:f7:40:d0:ba:1f:4b:a8:87:0d:c2:d2:19:de:
76:1d:38:9b:fc:17:c2:3e:72:d3:e3:b3:a0:74:9e:
ba:f3:62:14:58:ae:25:c0:8f:f3:f4:f6:24:4d:e3:
59:fc:d0:c2:c9:35:5e:82:04:c1:c4:ad:2f:b9:c8:
14:7c:79:f8:ea:c8:9e:56:6a:aa:21:a9:4c:40:6c:
fb:74:67:ff:83:5a:59:a7:f2:4b:2f:78:bb:7d:66:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2A:F5:AC:02:7F:DA:A2:5D:1E:80:5A:F4:6A:9E:88:B0:B7:7C:BE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FCr1rAJ_2qJdHoBa9GqeiLC3fL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.133.0/24
194.87.164.0/24
194.135.23.0/24
212.193.2.0/24
Signature Algorithm: sha256WithRSAEncryption
87:54:d1:31:4a:66:63:3d:d6:59:bb:21:8d:94:8a:ff:72:ab:
78:39:f2:ce:3d:20:44:e7:ab:e6:2e:de:9a:9b:3d:aa:4a:2d:
56:7b:3c:f0:80:49:54:a6:be:84:ca:0d:ab:27:c4:cc:1e:41:
24:e0:ef:35:f0:4b:f7:9e:43:e5:b4:07:75:57:ac:06:4d:24:
61:86:0a:af:70:1e:ce:6f:38:66:1f:65:dc:71:06:06:d6:7f:
9c:fd:7d:50:12:c7:51:80:6b:4d:c8:f4:8b:b8:c1:cb:7e:e9:
29:04:ae:fa:5a:1b:ed:65:e6:1c:0e:ee:d9:e2:fd:28:39:c4:
7b:2d:a5:ac:40:d1:67:10:76:aa:d5:28:cd:c0:f9:8e:72:b4:
3c:5c:25:3d:cb:01:00:de:8c:7e:8c:7b:5a:db:2c:60:5c:95:
a3:3f:66:b1:4f:aa:f8:da:e8:85:6d:b1:2e:c9:ff:c0:df:bc:
15:fb:b3:32:c3:fc:6a:03:8a:b0:de:5b:52:ae:39:9f:da:35:
14:c7:a0:53:45:15:6b:9e:f7:c2:66:d9:39:fb:b6:7a:c4:fb:
2a:7c:79:59:06:dc:b1:e9:c4:71:6a:38:1e:11:53:ba:cf:a7:
8a:aa:25:8a:be:23:45:23:d2:cb:4b:98:0b:a5:eb:ef:00:d8:
57:36:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org