Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/fryCF-JA9gPpcH82grwugbAXn68.roa
File: fryCF-JA9gPpcH82grwugbAXn68.roa (raw, json)
Hash identifier: l9DaNipm0Hd2OXCr8n+ai3dN3NPeRIuLxBDX3duSMNc=
Subject key identifier: 7E:BC:82:17:E2:40:F6:03:E9:70:7F:36:82:BC:2E:81:B0:17:9F:AF
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01C53480
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/fryCF-JA9gPpcH82grwugbAXn68.roa
Signing time: Tue 31 May 2022 05:04:13 +0000
ROA not before: Tue 31 May 2022 05:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 45.131.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29701248 (0x1c53480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: May 31 05:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ebc8217e240f603e9707f3682bc2e81b0179faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:df:ae:b7:ba:79:30:a7:bc:55:4a:e0:62:
0c:d9:91:89:cf:31:56:7d:c6:b9:53:08:22:49:c2:
1a:73:be:ac:9e:aa:37:b3:fd:b2:7e:02:a6:30:37:
f3:8c:33:a1:32:ab:90:e6:dd:43:d9:29:b3:05:d4:
cd:1e:f4:a8:56:84:4b:bf:57:a4:9d:08:a0:a5:1b:
5f:f6:a1:8f:fd:46:4b:fa:59:31:2b:ed:ef:8a:0e:
4b:fb:93:30:a9:bc:e2:8e:c1:f5:ac:1b:26:f0:85:
d2:8a:17:5d:cd:a3:ea:d6:8a:98:b1:9b:cd:f8:5c:
04:c0:f0:6a:cb:5c:fd:35:d1:78:0b:71:69:bb:79:
17:22:bc:be:69:33:7f:4a:55:9a:4c:e5:08:4d:95:
9c:df:ce:74:37:b5:d1:0b:8f:eb:2f:00:f1:ea:9b:
3d:dc:c4:8c:be:83:ca:8b:83:1f:21:a9:90:54:d1:
1b:61:8a:a6:58:1d:08:3c:5a:d4:3a:ad:e9:6f:66:
a9:36:57:a5:4e:37:27:81:d1:9e:c8:c6:0a:d6:d7:
36:42:0a:58:a4:7a:95:ca:8f:23:ba:5d:3c:13:ac:
6f:9b:74:79:a3:74:36:a0:e1:97:df:7f:88:c7:55:
33:ec:ed:9c:42:c5:6c:4a:f5:6b:5b:17:69:91:f7:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BC:82:17:E2:40:F6:03:E9:70:7F:36:82:BC:2E:81:B0:17:9F:AF
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/fryCF-JA9gPpcH82grwugbAXn68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.193.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ac:f9:42:da:be:d7:49:e5:fd:4f:8d:3d:70:f5:d9:9d:af:
8b:0c:00:30:04:e3:11:8b:e8:87:b8:46:eb:b3:b1:e4:bd:74:
7f:51:07:70:70:40:26:2e:3e:34:98:b2:9f:d2:35:5b:1c:8e:
2e:dc:ac:c7:66:e2:0d:34:9d:09:71:4d:5a:ab:dd:96:a9:fb:
4d:38:b3:c2:fc:23:04:f8:11:01:a2:81:a6:40:74:16:6a:e7:
77:a3:63:b5:3d:3d:05:68:34:f9:d7:06:5d:71:94:3a:ad:66:
75:1c:2b:b9:b0:29:3e:c6:1e:fd:da:07:c4:73:76:f3:1d:0d:
7e:f4:c3:dd:ed:88:4a:3e:e3:c1:21:38:0a:b0:0e:82:eb:39:
fd:b8:70:dd:a7:c5:2a:5d:f4:fb:b4:d9:c9:01:03:28:ac:82:
b9:42:81:28:ae:2b:fc:5a:40:22:4e:e4:0f:f6:44:f9:24:76:
d7:f4:08:9a:62:48:f7:a5:f4:56:f7:85:07:58:41:70:f1:24:
cf:51:4f:88:2d:42:d6:e0:53:a0:c6:55:ab:76:e5:68:e0:d7:
87:45:87:d7:27:3f:21:4a:20:a8:29:dd:63:2e:9c:b5:79:7f:
15:4a:e9:00:ab:0a:c9:73:e6:e2:00:16:d3:7f:bd:50:aa:80:
31:58:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:51 2023 by rpki-client on console-ams.rpki-client.org