Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/FCwyJqLgmc_H2wuwNri5H_A1H-s.roa
File: FCwyJqLgmc_H2wuwNri5H_A1H-s.roa (raw, json)
Hash identifier: VZKhCAvV0kgENCtn//K7rauAE+X2BYzyDdqJhsBiF7o=
Subject key identifier: 14:2C:32:26:A2:E0:99:CF:C7:DB:0B:B0:36:B8:B9:1F:F0:35:1F:EB
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 122F7342
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/FCwyJqLgmc_H2wuwNri5H_A1H-s.roa
Signing time: Fri 20 May 2022 07:31:29 +0000
ROA not before: Fri 20 May 2022 07:31:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 77.246.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305099586 (0x122f7342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: May 20 07:31:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=142c3226a2e099cfc7db0bb036b8b91ff0351feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:c5:99:dc:ec:ec:fb:01:da:48:10:86:a3:
46:e4:93:a6:8d:04:c6:5b:50:5b:7d:4f:d0:17:e6:
47:cb:1b:bd:9c:29:56:64:a0:72:bc:b4:cd:b2:3d:
f0:15:bf:76:9e:8b:9e:bf:d9:1e:45:a8:bd:c7:cc:
02:d9:fa:bb:d9:34:63:80:39:f9:34:18:d6:48:4d:
31:06:f7:bc:36:e7:29:40:59:58:5d:fc:b6:08:58:
76:7a:95:06:53:1b:39:c4:24:21:af:b5:8c:20:be:
aa:8e:21:05:35:f2:71:94:ef:20:b5:35:fa:ce:cd:
41:1f:f8:6d:67:01:cf:3a:42:8a:14:e6:75:4f:de:
2f:26:4c:33:b3:f6:e9:fb:db:72:cf:cd:42:fa:b9:
68:62:56:c2:8b:b6:1b:18:1d:70:0d:51:ee:e8:4f:
d6:60:75:7e:bf:c4:77:0c:f8:70:8b:e4:42:23:ae:
00:6d:20:36:8a:f1:7f:dd:d5:05:b2:47:eb:70:8a:
b4:ce:50:1c:d0:ff:30:31:cf:31:8e:61:36:43:40:
bd:de:35:20:35:65:4f:06:ae:9e:21:9b:78:11:6a:
15:6d:69:7c:c6:5d:a8:07:b0:82:cc:6b:07:54:47:
7e:34:b7:65:aa:19:96:65:61:08:e6:0a:46:e2:97:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2C:32:26:A2:E0:99:CF:C7:DB:0B:B0:36:B8:B9:1F:F0:35:1F:EB
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/FCwyJqLgmc_H2wuwNri5H_A1H-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.60.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a7:bf:dc:ff:58:64:8e:c8:6d:67:7d:63:76:2e:7a:a5:38:
9b:17:53:0d:6e:85:2b:13:22:39:14:96:1a:dd:a2:6b:45:2a:
e2:db:ce:15:63:0e:52:00:46:40:de:55:37:45:aa:61:26:5c:
ec:ba:10:9a:f8:94:70:96:42:f9:0f:96:af:d0:8f:9b:87:d2:
b2:b5:0b:2b:e4:77:12:bf:b1:4a:5d:11:35:66:53:f5:f8:eb:
f5:78:ab:b0:c3:79:ab:07:d0:fe:a3:c7:94:77:8d:ad:c8:d2:
7e:b0:f7:28:8d:20:a5:12:d9:50:82:1c:c1:ba:8d:b1:28:97:
9c:77:e7:02:b5:1b:25:a9:26:9f:5c:b4:4b:46:ea:f8:82:a9:
c6:ae:51:b0:fe:e9:89:d1:09:f7:11:2c:a2:50:83:2c:ff:cc:
8d:e3:3d:b5:79:c5:f7:2e:e7:aa:87:b3:13:6d:53:67:47:66:
b4:ba:43:18:c4:da:12:c4:f5:ca:f2:10:d0:6d:6b:d4:4c:85:
c0:cd:33:b8:c2:df:ca:c4:db:5d:59:66:9f:0c:39:0a:51:89:
87:f9:00:ac:cd:4d:45:ee:6e:d5:5e:32:28:6d:21:3b:8c:b1:
8a:cf:5f:3f:ef:72:db:5d:10:03:3c:2e:55:d7:7b:f0:40:86:
86:f6:3c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:20 2023 by rpki-client on console-fra.rpki-client.org