Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/FNcMDN8CDwJeIYIOYOnFmWmmPE8.roa
File: FNcMDN8CDwJeIYIOYOnFmWmmPE8.roa (raw, json)
Hash identifier: eVsTutRBUFfZ3cNPT6HZiCcfEbS/IrQcLvkCGORlveQ=
Subject key identifier: 14:D7:0C:0C:DF:02:0F:02:5E:21:82:0E:60:E9:C5:99:69:A6:3C:4F
Certificate issuer: /CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Certificate serial: C9F1ED
Authority key identifier: 45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/FNcMDN8CDwJeIYIOYOnFmWmmPE8.roa
Signing time: Sat 01 Jan 2022 07:57:46 +0000
ROA not before: Sat 01 Jan 2022 07:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 185.253.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13234669 (0xc9f1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Validity
Not Before: Jan 1 07:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14d70c0cdf020f025e21820e60e9c59969a63c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:37:1b:d1:30:e4:97:9f:d6:cb:05:b5:73:
12:fc:ef:bc:11:b0:57:98:4f:60:d0:1a:ff:66:86:
4d:8c:db:a5:91:81:28:7d:c5:27:7f:d6:dc:2c:82:
d5:7c:ba:85:3e:65:11:61:db:a5:76:0d:d9:b8:3c:
25:f7:26:25:d0:54:a3:02:78:46:75:81:ba:8b:da:
8d:74:6a:71:3b:f3:af:75:cb:05:5a:75:b5:de:48:
e2:02:06:40:71:76:99:74:36:4a:02:eb:18:c7:69:
09:77:df:e9:d0:7a:75:f7:7e:a4:e2:ab:85:ff:3d:
3f:be:f4:14:3b:a2:c9:35:dd:e6:09:f1:45:da:10:
c7:61:25:42:93:bc:77:ba:4e:1a:2b:ae:23:c1:57:
8b:3c:b3:a4:57:d0:29:ca:96:a7:d2:be:9a:d3:39:
79:58:62:43:d5:e1:bf:33:f0:8e:df:68:5f:97:20:
e0:33:89:0f:ec:5b:86:99:46:e5:e1:a0:7d:97:de:
2d:eb:4f:a1:a8:76:27:bd:56:67:a8:81:4e:f7:c3:
dc:d6:3f:d5:39:35:57:bf:c0:46:6f:02:97:d4:d3:
b4:8d:51:6d:63:63:e4:d6:81:30:dd:f1:0c:e6:ca:
63:c3:11:98:46:69:c3:23:5c:cc:71:c1:ea:fb:df:
cc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:0C:0C:DF:02:0F:02:5E:21:82:0E:60:E9:C5:99:69:A6:3C:4F
X509v3 Authority Key Identifier:
keyid:45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/FNcMDN8CDwJeIYIOYOnFmWmmPE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
62:37:02:8a:29:3f:75:51:71:6e:7d:da:ae:0e:b6:b4:cb:8b:
40:b7:21:23:65:7e:be:6f:93:46:3a:19:25:61:0f:20:19:58:
a6:dd:5d:f0:b5:9a:f9:79:34:db:e7:90:48:05:f3:dd:8e:8b:
1b:5d:fb:44:29:e9:7d:f2:7d:2e:4d:ef:2d:2b:8d:ec:93:49:
dc:1f:da:f6:47:ab:f9:b7:b6:b1:0a:9e:f7:00:74:c8:39:38:
48:8b:64:62:aa:f3:4c:8f:70:25:6f:15:f3:16:3e:05:99:e1:
16:29:68:d6:c6:c4:a4:f3:e8:02:db:29:71:51:c9:9f:a7:e9:
27:54:09:85:2e:09:f4:ce:be:45:c6:02:53:9d:d0:2d:67:bd:
02:de:69:3b:89:b1:c0:cd:e3:80:d2:35:a1:6a:4a:42:fe:fe:
87:1e:7b:09:6a:25:d1:5e:98:f1:7e:39:70:65:4b:3a:ef:66:
49:18:58:ef:f9:d8:4d:c2:af:f1:07:47:c6:f0:c8:d0:b3:d9:
26:60:cf:6b:70:83:dc:4f:19:c2:40:58:55:db:2d:fa:87:60:
9a:77:77:0a:63:a5:ee:4c:21:a1:ea:e3:d1:ff:f8:d8:66:59:
f3:3c:d5:27:b9:d3:cf:2f:20:7d:c3:a0:9b:a1:5b:f0:a0:e6:
e3:59:f6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:56 2023 by rpki-client on console-fra.rpki-client.org