Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/FugoJIAl-SYBceP5Nr8Usht8mMs.roa
File: FugoJIAl-SYBceP5Nr8Usht8mMs.roa (raw, json)
Hash identifier: /8gtdgo0hwn3D3W/Vp6RsGfmh4W24LuQRPbBnD0YQ9M=
Subject key identifier: 16:E8:28:24:80:25:F9:26:01:71:E3:F9:36:BF:14:B2:1B:7C:98:CB
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 06DA4BE1
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/FugoJIAl-SYBceP5Nr8Usht8mMs.roa
Signing time: Sat 01 Jan 2022 12:55:30 +0000
ROA not before: Sat 01 Jan 2022 12:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28685
IP address blocks: 176.124.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114969569 (0x6da4be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Jan 1 12:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16e828248025f9260171e3f936bf14b21b7c98cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:18:f9:1c:9f:8d:28:a4:54:6f:81:27:8a:
c2:12:56:04:1e:ce:c3:25:ed:07:58:16:8f:7c:d6:
5f:fe:77:0f:ae:b2:99:5f:03:1e:e8:f3:a0:00:5e:
04:75:d2:93:54:65:a1:44:07:48:cc:40:9e:28:4c:
b2:b1:3a:61:2d:08:3d:d3:55:ac:59:4d:2b:a9:18:
4a:d2:a9:4a:6e:ac:d4:22:d3:f5:7b:0e:c3:7b:c8:
b0:ad:db:dd:1d:47:93:2f:35:10:c9:51:00:3d:ba:
ae:87:b5:9b:b1:6e:23:ed:10:16:8a:9e:2e:31:2d:
81:0c:fe:09:3d:8d:f3:87:9b:f6:d1:c3:f4:59:7c:
2e:52:18:c9:1d:86:70:53:cc:af:d4:b9:a0:a4:1f:
16:f4:ac:01:46:4e:c7:ea:c8:bc:24:ab:ad:2f:bb:
ee:c5:7f:6f:4a:ec:11:c4:38:36:aa:df:93:34:57:
f9:bd:11:d0:79:1e:e9:75:83:c2:10:ad:01:6a:df:
7d:78:a3:0c:51:2b:91:d0:64:53:2e:91:f3:93:59:
35:bf:e3:b7:69:18:aa:52:ff:2b:3e:cf:dc:10:db:
9b:fa:a0:a7:d4:22:f5:83:20:9f:58:8c:50:33:8e:
6c:3a:8c:f9:20:8d:da:7b:64:29:80:69:17:79:10:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:28:24:80:25:F9:26:01:71:E3:F9:36:BF:14:B2:1B:7C:98:CB
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/FugoJIAl-SYBceP5Nr8Usht8mMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.253.0/24
Signature Algorithm: sha256WithRSAEncryption
32:9f:3b:a9:53:e5:77:f7:e3:05:0a:37:cc:53:97:60:b8:ed:
11:0f:eb:21:74:00:f6:47:97:f0:b5:18:3a:b6:03:13:b5:fc:
e4:7c:dd:c8:66:f8:30:10:48:b5:d6:ed:5a:87:e2:5e:12:c7:
b5:a0:71:f0:36:51:f7:ee:f2:d5:bf:73:de:c7:60:05:d5:ab:
1c:30:a5:1b:49:79:85:46:3e:9c:b1:b1:ce:e5:fa:85:ab:8f:
62:64:4d:19:9b:5a:0e:5e:bc:a2:d6:d8:fa:83:6d:28:ef:fd:
d0:11:62:41:b6:a5:5e:e8:c1:4f:14:28:a3:96:57:f0:84:9d:
9a:7e:7a:7f:e7:d0:08:f7:4a:fe:a3:c6:41:89:31:04:e1:3c:
49:d9:26:8a:18:44:78:a0:7f:34:db:09:10:eb:9e:91:47:31:
cc:fd:15:ec:74:23:13:6a:21:f0:96:f7:02:68:54:c9:d7:f9:
42:0a:26:45:1f:47:5a:a7:ad:36:89:d9:6c:7b:c9:2f:3b:76:
ce:3c:b9:f5:8b:2d:73:ac:9c:17:42:cd:78:67:b4:9a:82:cd:
c1:ef:3a:f6:c8:95:f4:7e:48:a0:6a:6b:d9:72:26:1c:c1:68:
42:2b:40:d3:60:d2:df:88:9f:2d:2e:58:a7:4b:80:4f:a7:2d:
ce:69:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:18 2023 by rpki-client on console-fra.rpki-client.org