Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/tFeKISxDqFDs7nCwaCn2ZzN5R-w.roa
File: tFeKISxDqFDs7nCwaCn2ZzN5R-w.roa (raw, json)
Hash identifier: nvs4tNUs00al4v5GMGu/zpdaI4dtdJS2QxLx9Ma3iko=
Subject key identifier: B4:57:8A:21:2C:43:A8:50:EC:EE:70:B0:68:29:F6:67:33:79:47:EC
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 30DD175F
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/tFeKISxDqFDs7nCwaCn2ZzN5R-w.roa
Signing time: Sat 01 Jan 2022 10:59:32 +0000
ROA not before: Sat 01 Jan 2022 10:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8236
IP address blocks: 192.40.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819795807 (0x30dd175f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Jan 1 10:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4578a212c43a850ecee70b06829f667337947ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:8f:7d:99:c2:8c:59:d8:59:8e:dc:11:ac:
07:07:6f:67:81:a5:f5:f9:a1:7b:d5:6c:df:20:fc:
b5:55:b4:b1:9c:12:e2:68:d3:1a:f1:0b:c0:43:c1:
d4:46:cd:af:f8:06:7f:c4:43:fb:36:b9:11:1d:ef:
52:88:13:0c:c8:dd:71:8b:5b:90:5e:5a:9c:36:d5:
f0:b8:2e:0c:bf:28:e5:92:b9:90:98:e8:a4:cf:ca:
ac:68:ae:7d:5d:7f:56:57:10:04:b7:4f:88:b4:2d:
0a:35:2f:e8:f0:63:11:c0:0a:b3:92:17:f0:4f:3c:
bf:2e:38:49:f5:0a:fe:3e:43:cb:d2:95:57:d1:6b:
67:e7:5f:00:7d:e9:75:31:7a:fa:29:0d:4b:1f:95:
47:87:bd:62:fd:9f:f4:52:7c:fc:d1:78:80:9b:6c:
24:df:d8:70:3d:6c:2d:c3:de:ac:e7:7c:27:d3:c2:
dc:f6:ae:a1:87:da:53:c7:7b:19:95:fb:0c:d4:e4:
92:e3:74:f2:b2:a3:bf:1e:82:00:0e:82:23:85:d1:
38:42:dc:81:98:3a:14:83:06:27:76:35:92:e6:9e:
a0:0e:af:d0:42:d1:33:b8:81:89:4c:7a:76:1d:24:
e1:79:55:71:1b:5c:08:2e:7b:3a:cb:93:f7:e6:b3:
a7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:57:8A:21:2C:43:A8:50:EC:EE:70:B0:68:29:F6:67:33:79:47:EC
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/tFeKISxDqFDs7nCwaCn2ZzN5R-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.40.74.0/24
Signature Algorithm: sha256WithRSAEncryption
29:83:18:31:4f:46:14:69:cb:4e:a8:00:a1:5c:f8:75:51:0c:
e0:53:31:41:fb:ff:08:42:2b:fc:98:e7:e9:e5:b9:6b:ba:23:
ac:2c:6d:b8:0f:73:7b:87:13:5e:25:74:46:80:51:4e:59:b9:
73:35:15:10:db:e1:0a:1d:0c:47:1f:a9:26:98:fa:dc:ce:a6:
0a:b9:59:00:5a:63:13:2a:73:3a:39:b4:10:59:4e:7d:73:fb:
df:b9:0b:4f:16:07:ee:9f:06:bb:77:10:80:ac:ba:14:9f:bd:
b9:11:73:43:0c:39:45:e2:f1:dd:fd:67:a4:9e:f1:9a:16:5d:
85:4e:39:82:19:63:9d:91:e2:c0:aa:81:ca:12:6b:cd:82:d4:
a8:1f:5e:c0:e0:6f:f9:ff:59:91:4e:1b:ae:5e:fd:28:21:4a:
0a:a2:ec:bc:1d:b6:7d:de:53:a7:ef:41:83:55:83:b3:8e:af:
a6:9e:f5:ac:c0:a1:b6:9b:4b:76:3b:b7:69:24:9d:68:4e:d5:
0c:fb:2d:10:67:a2:0d:16:24:15:92:85:15:49:7e:94:4a:31:
64:d2:c9:05:74:66:f3:cd:cb:77:a7:a6:12:9c:98:b6:3c:29:
6e:39:eb:c0:68:4a:84:ef:dc:7c:40:12:0f:c5:4b:67:3c:4b:
01:a9:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org