Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FhthABR9ErKxThG0peySgQymNQc.roa
File: FhthABR9ErKxThG0peySgQymNQc.roa (raw, json)
Hash identifier: kWrDd4hDJchT9SuuIQuZDMIG/59yy3eVm3dczSbTKuk=
Subject key identifier: 16:1B:61:00:14:7D:12:B2:B1:4E:11:B4:A5:EC:92:81:0C:A6:35:07
Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial: 066004
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FhthABR9ErKxThG0peySgQymNQc.roa
Signing time: Mon 16 May 2022 05:23:31 +0000
ROA not before: Mon 16 May 2022 05:23:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50783
IP address blocks: 193.3.49.0/24 maxlen: 24
91.214.20.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417796 (0x66004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Validity
Not Before: May 16 05:23:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=161b6100147d12b2b14e11b4a5ec92810ca63507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:a3:01:a3:62:e4:e2:df:ee:0e:05:80:d0:
8d:10:9e:00:6f:cc:f1:34:62:89:e9:80:28:8e:1d:
39:89:7a:a5:ba:ce:54:1e:79:82:3f:03:f3:82:de:
89:10:82:f6:d7:52:5d:f7:ad:28:1c:a9:70:94:d9:
91:d9:be:89:a3:3a:1a:1d:e6:60:a3:31:b3:7d:c8:
46:71:d4:7a:65:69:cb:fd:ee:98:13:3d:8c:30:89:
3c:d9:49:12:5a:0f:1b:e9:1a:0a:e1:5b:41:21:4f:
a2:92:0d:05:7e:46:c0:52:93:a0:9f:ed:0e:15:7e:
f4:85:9c:67:95:f1:63:43:17:1d:9e:39:22:2b:79:
23:ff:05:c4:96:90:92:52:43:da:84:d5:c7:58:e1:
3c:3a:c9:45:23:a0:5b:61:aa:41:51:fb:16:51:e9:
24:d4:e5:8c:a5:4f:f7:6e:e8:a6:bd:e2:94:ac:56:
6f:18:ae:9e:c0:a7:ab:65:2e:f1:d7:c4:37:c1:1a:
0c:26:f0:97:1d:0e:7e:ee:c2:bc:2d:f5:cc:e7:6b:
fe:06:c1:bf:f3:e0:04:97:83:b2:3b:9a:9c:31:ec:
6d:ac:95:29:ff:8a:68:e0:0b:68:40:78:17:b6:67:
c6:4c:9e:bd:1d:b4:69:f3:0d:81:c5:90:3b:98:9c:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:61:00:14:7D:12:B2:B1:4E:11:B4:A5:EC:92:81:0C:A6:35:07
X509v3 Authority Key Identifier:
keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FhthABR9ErKxThG0peySgQymNQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.20.0/22
193.3.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:38:8c:db:65:c5:bb:75:d8:4c:33:ff:6e:0c:5f:b0:61:54:
8b:2d:78:31:f3:50:9a:95:13:09:5f:09:a8:5f:89:34:fe:93:
d4:44:d9:66:28:27:fd:59:65:ba:8e:c0:5e:7a:f2:51:4d:9a:
15:fc:1c:74:f0:93:33:07:68:2d:56:59:59:71:00:d8:e3:67:
fb:65:b1:1d:ad:ff:54:9f:1a:56:9d:8c:e2:4a:3e:00:88:4f:
bd:8b:13:4e:f5:0c:74:3f:73:ed:0d:53:e0:71:30:52:eb:4c:
8e:42:4f:f5:44:47:39:aa:cf:dd:8a:34:46:42:a9:19:5b:1f:
94:7b:77:e1:6c:01:93:c8:df:b6:0c:76:6c:e5:a8:47:d7:fa:
67:53:e1:f3:cb:4c:4b:6e:0e:10:f4:26:84:fc:cb:3f:86:f7:
4d:9a:89:f3:b8:86:b5:85:66:05:4c:c9:dd:08:74:4e:c6:82:
c7:68:52:45:73:48:cd:a5:e2:a6:76:49:0d:ee:fa:42:ff:90:
2c:e4:46:8e:81:95:ac:43:7b:9b:5a:81:00:d7:af:ab:5f:4e:
b0:ac:19:5a:69:ab:e4:0a:79:4a:1f:24:b3:63:50:0f:61:67:
d3:f8:68:ca:96:55:9c:98:7d:d8:44:51:d4:77:0e:bc:0e:ef:
68:5e:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:06 2023 by rpki-client on console-fra.rpki-client.org