Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FEfgb5O1pcjlUWvjoqMQWghX0LA.roa
File: FEfgb5O1pcjlUWvjoqMQWghX0LA.roa (raw, json)
Hash identifier: 19n1SRK2GEcn2NpgN1iVQLFdeR/pmflO0wBT0FCubyQ=
Subject key identifier: 14:47:E0:6F:93:B5:A5:C8:E5:51:6B:E3:A2:A3:10:5A:08:57:D0:B0
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0181F7E63E1B0471B604B1324B0D08AF92EF
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FEfgb5O1pcjlUWvjoqMQWghX0LA.roa
Signing time: Wed 13 Jul 2022 14:11:10 +0000
ROA not before: Wed 13 Jul 2022 14:11:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 176.96.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:e6:3e:1b:04:71:b6:04:b1:32:4b:0d:08:af:92:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jul 13 14:11:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1447e06f93b5a5c8e5516be3a2a3105a0857d0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:05:40:a2:c0:0c:b3:55:d2:1e:65:98:b3:
22:fa:94:71:c1:a7:8c:20:ed:bf:c7:1c:3e:30:18:
83:74:e8:2e:04:05:77:8b:f2:18:5c:4d:3b:fc:bf:
8f:30:b6:a4:c4:e7:70:b6:4c:20:b5:ef:57:84:79:
ac:63:f6:55:20:ec:6c:f3:54:dc:5b:da:f4:8e:fc:
a0:5b:dc:b1:2b:42:db:bd:ee:73:79:f7:5b:44:b9:
16:eb:9e:86:73:1b:2b:09:24:c6:f1:19:eb:ba:69:
f2:a4:88:2f:e6:f8:8e:a5:d0:27:b0:4d:6f:f8:c9:
b2:56:2d:7d:41:6b:2b:65:18:6f:ce:35:06:df:f1:
21:71:aa:fe:a2:ba:a4:7f:c7:c2:7f:d9:ad:d0:3f:
3e:77:83:64:a9:39:3d:24:5b:62:62:48:4f:4c:e5:
fc:9e:c4:31:d9:6f:48:ad:04:da:57:13:9f:e9:a2:
56:42:b3:7e:27:72:8e:95:79:4e:16:0d:67:58:3a:
d1:d9:b7:78:e8:e1:2d:32:03:bc:88:06:76:81:db:
c8:fa:23:51:8b:f3:93:8d:1d:9e:9a:cc:e6:f4:dc:
11:ed:3a:e9:a8:82:38:66:12:a5:4b:e6:ea:70:62:
cd:74:5c:ef:c1:00:24:43:d1:fe:7a:64:f2:2e:4f:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:47:E0:6F:93:B5:A5:C8:E5:51:6B:E3:A2:A3:10:5A:08:57:D0:B0
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/FEfgb5O1pcjlUWvjoqMQWghX0LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.95.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e0:93:bb:0f:eb:e3:72:48:e0:c9:cf:0d:52:57:68:6f:0f:
db:20:aa:b4:0a:73:4b:b4:96:cb:84:88:d7:4f:f5:67:c3:ed:
c1:2b:b8:ef:f7:79:9b:39:51:48:be:c8:ce:b2:e9:2b:fc:a3:
e1:04:ed:d4:00:ab:07:d3:95:b7:60:da:8f:f1:a2:40:09:b1:
85:97:63:77:7d:7b:3d:09:1b:b8:11:24:39:2c:68:5c:52:5d:
58:a5:1e:22:74:c0:2a:4f:6e:04:cb:71:89:60:4c:df:47:7f:
a0:8e:12:11:5b:35:87:59:81:13:52:60:d8:c6:96:05:0a:12:
c4:9f:54:07:3f:65:39:c3:46:b1:ab:96:d0:ff:91:4e:7c:0e:
5c:e5:1f:df:90:ac:70:7b:84:12:34:50:4d:d4:fc:9e:30:a6:
62:c7:29:33:c9:cc:a7:b0:60:c5:ae:eb:f4:15:98:8a:19:1f:
f7:bb:cd:6e:e1:80:b6:6e:20:11:ec:e2:0f:80:43:10:74:a2:
45:44:d4:8f:82:8c:3c:9e:dc:00:a7:25:d8:db:ab:47:c1:49:
33:f1:7c:70:5a:10:27:50:0b:43:58:07:83:2b:64:47:a5:69:
b9:fc:10:6a:6d:f8:7c:13:66:56:7b:f5:c5:d3:60:c8:34:bd:
e5:82:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:48 2024 by rpki-client on console-ams.rpki-client.org