Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/fPgqBiQmHIsyswnHE5z778br-U0.roa
File: fPgqBiQmHIsyswnHE5z778br-U0.roa (raw, json)
Hash identifier: MROzLDrJzuVkM3lBYMDlavcxbw966Du6d6DHx6xiY/M=
Subject key identifier: 7C:F8:2A:06:24:26:1C:8B:32:B3:09:C7:13:9C:FB:EF:C6:EB:F9:4D
Certificate issuer: /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial: 01606C48
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/fPgqBiQmHIsyswnHE5z778br-U0.roa
Signing time: Sat 18 Jun 2022 03:45:44 +0000
ROA not before: Sat 18 Jun 2022 03:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207655
IP address blocks: 194.36.0.0/24 maxlen: 24
2a12:3840::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23096392 (0x1606c48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Validity
Not Before: Jun 18 03:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cf82a0624261c8b32b309c7139cfbefc6ebf94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:31:ab:54:f7:ae:7b:89:9c:d4:32:c3:dd:
37:e6:10:06:ec:31:c2:84:0e:0e:d7:5b:e4:99:73:
1b:6c:f8:3d:76:1f:fe:d1:11:cf:0b:79:f5:46:3a:
ec:fb:65:0d:54:be:21:ce:d1:df:4a:b3:3f:1c:3c:
61:10:ad:60:16:ea:a0:c0:20:81:fb:1d:5c:0a:fb:
9e:7f:c0:96:5a:9e:9d:7d:64:d3:14:9d:20:e5:e0:
4e:aa:bc:c1:41:ed:38:f1:a7:ff:e4:ef:2b:61:f9:
fd:4e:cb:a4:1f:d0:aa:b0:61:5b:c8:a7:10:d1:52:
ea:8b:97:8e:ac:9e:79:75:33:3e:1e:16:84:bf:58:
89:38:eb:9d:51:12:b0:4e:f7:f8:35:c5:32:30:b7:
be:7d:b5:f7:01:12:52:06:1e:22:97:35:20:81:35:
f1:99:2b:4e:aa:53:c3:2e:da:87:3d:93:10:fd:41:
21:09:d3:47:02:30:6d:b0:f3:d8:00:a2:5b:dc:bc:
d6:50:9d:ee:20:9f:28:fb:30:3d:18:fb:b4:9b:75:
f6:56:82:36:63:12:61:f7:05:6b:f7:3c:fd:28:a4:
5f:39:c9:28:6b:0f:e1:4f:8b:2d:a6:13:31:38:5b:
eb:27:a0:32:e3:42:f8:5e:ee:4f:f9:b8:24:47:d7:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:2A:06:24:26:1C:8B:32:B3:09:C7:13:9C:FB:EF:C6:EB:F9:4D
X509v3 Authority Key Identifier:
keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/fPgqBiQmHIsyswnHE5z778br-U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.0.0/24
IPv6:
2a12:3840::/29
Signature Algorithm: sha256WithRSAEncryption
28:97:3a:c0:6b:7a:5b:42:10:f8:d5:e2:08:3b:cc:1f:ff:76:
c7:ae:fe:ea:ae:ab:b8:4c:b8:12:41:64:04:7b:48:d1:67:b3:
c1:ac:8e:d3:79:50:45:ad:03:2f:1e:98:c4:c7:36:d0:08:9b:
70:28:f8:8a:8a:c3:5b:4f:24:1e:16:d8:e3:ba:5c:e4:c7:0a:
2a:50:63:54:9a:f8:19:52:e2:20:a3:49:55:d1:4b:98:16:cb:
64:8c:d1:7d:e8:85:93:19:e0:6d:b8:50:e6:33:c9:83:b0:cf:
ca:32:37:85:94:28:86:98:1c:0d:76:2d:28:7d:8b:c0:4c:a6:
7a:36:a1:d7:a7:e7:00:0b:54:f2:56:3d:55:d2:41:c7:a1:6b:
58:ee:4d:61:d4:99:27:ae:24:3c:59:8a:a5:54:c9:fe:55:9b:
8d:12:26:12:de:b5:e8:14:23:d7:a2:cc:59:43:3b:63:0e:11:
68:a4:41:72:a1:b8:51:96:cf:72:e6:fd:e0:fc:ea:73:c5:b9:
69:a2:49:47:ae:23:ab:c2:a4:f2:87:fb:c4:b0:78:d5:fd:c6:
c8:21:91:ba:32:b0:fd:14:e6:61:40:8c:ea:21:ca:92:d3:47:
d6:18:a4:4d:15:9d:88:80:17:b8:0c:43:83:56:d3:39:42:a4:
ca:27:83:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:04 2024 by rpki-client on console-fra.rpki-client.org