Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMaPlT2w36uvhb9CT-Lt2uaPxkw.roa
File: FMaPlT2w36uvhb9CT-Lt2uaPxkw.roa (raw, json)
Hash identifier: iqa0s9iLewmyO9XA/mVulLQ8vp2vTBAHEdQ+fSfDzAw=
Subject key identifier: 14:C6:8F:95:3D:B0:DF:AB:AF:85:BF:42:4F:E2:ED:DA:E6:8F:C6:4C
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 048889F7
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMaPlT2w36uvhb9CT-Lt2uaPxkw.roa
Signing time: Wed 02 Mar 2022 10:42:15 +0000
ROA not before: Wed 02 Mar 2022 10:42:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209314
IP address blocks: 148.81.12.0/24 maxlen: 24
148.81.11.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76057079 (0x48889f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 2 10:42:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14c68f953db0dfabaf85bf424fe2eddae68fc64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8b:ae:51:2c:6e:68:72:12:9e:ec:c4:51:cc:
84:fe:48:2f:cd:8a:c5:68:96:48:7d:be:3c:e6:f1:
5e:80:8e:db:24:5c:12:91:62:3e:b6:89:e3:c2:7e:
ad:ed:b1:6e:df:6b:9e:36:76:b7:6d:14:b9:8e:aa:
37:d0:53:8b:e1:f7:33:8a:59:29:52:7f:1d:89:30:
ad:cc:9b:fa:42:d9:37:89:1c:76:f3:ad:94:5b:e6:
55:2d:b7:62:8f:de:dc:e5:9c:70:e9:7d:44:e5:33:
ea:92:df:28:32:e9:6d:a9:25:18:19:38:ff:f0:05:
54:14:d1:83:24:5b:e0:a3:6b:f5:6a:62:e4:02:60:
ac:48:1e:52:cd:fc:7f:ab:16:82:90:11:1b:5e:00:
d1:0d:cb:6b:b0:b0:fb:1b:e0:6d:42:8b:ed:bd:c3:
46:3d:24:48:0d:f4:1a:a1:91:2f:d6:89:af:97:c7:
4b:7b:72:15:15:4e:f8:6d:b9:92:9f:7e:0d:f9:30:
04:fd:01:8f:04:26:82:3f:db:42:40:72:d8:4d:b7:
e2:a2:d1:1c:7b:4d:dc:7b:b1:c7:d6:17:ca:0a:fb:
a9:90:4e:45:0f:8b:bb:9a:05:55:5c:3d:b7:32:fd:
4f:e7:e8:b2:6b:03:56:47:6e:c8:ec:6b:35:99:bd:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C6:8F:95:3D:B0:DF:AB:AF:85:BF:42:4F:E2:ED:DA:E6:8F:C6:4C
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FMaPlT2w36uvhb9CT-Lt2uaPxkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.11.0-148.81.12.255
Signature Algorithm: sha256WithRSAEncryption
81:1a:a5:cf:01:c4:5e:33:7e:96:a9:b5:d7:fd:94:f5:6e:62:
36:78:f7:da:b0:d8:9f:8f:7e:92:5f:e9:7a:c3:a2:50:c5:51:
55:f1:ee:60:8d:c9:28:bf:8f:d3:82:87:4d:9c:bb:b5:26:7a:
05:8f:02:17:58:14:50:35:e3:61:d1:ea:c2:4c:33:b5:c9:93:
b3:e4:35:ce:c8:a9:44:97:f2:21:c8:9d:b2:d3:3a:a1:39:97:
41:6b:20:69:8f:09:01:bd:14:78:6d:78:41:75:2f:fd:cd:0d:
48:ab:a4:d6:7c:7e:60:e9:7d:9b:b9:39:74:14:e1:17:d3:e8:
5e:08:5b:45:b8:14:9a:44:21:c3:04:c6:30:61:70:f8:5f:56:
7f:99:07:c4:93:f9:be:e9:19:06:91:04:9e:20:79:05:00:13:
85:56:24:17:5b:ec:c0:45:7c:ae:d4:1c:0b:4d:e8:66:30:b1:
cb:7d:23:61:51:cc:bc:6a:d1:6c:c4:f0:f9:99:87:83:cf:7b:
2d:3f:ad:ab:cd:be:62:f2:12:f8:7e:ad:44:47:5f:f2:62:76:
51:52:14:f5:ac:44:29:f4:f8:be:fb:a4:34:08:e3:c6:b3:fb:
40:60:da:6e:c0:4f:96:8e:4a:4a:30:8d:68:0f:4c:41:de:22:
e7:3d:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org