Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FQ55TknrBCBJrnOrO27NeDdUdlI.roa
File: FQ55TknrBCBJrnOrO27NeDdUdlI.roa (raw, json)
Hash identifier: RTqGGFJosNq3VvXFD8jRohcnLZYmyW9KL74+NYGcsMI=
Subject key identifier: 15:0E:79:4E:49:EB:04:20:49:AE:73:AB:3B:6E:CD:78:37:54:76:52
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018262565CCBE5B50C1C8FAE0AE873E3486E
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FQ55TknrBCBJrnOrO27NeDdUdlI.roa
Signing time: Wed 03 Aug 2022 06:13:23 +0000
ROA not before: Wed 03 Aug 2022 06:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207898
IP address blocks: 45.11.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:56:5c:cb:e5:b5:0c:1c:8f:ae:0a:e8:73:e3:48:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Aug 3 06:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=150e794e49eb042049ae73ab3b6ecd7837547652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:80:b5:10:fb:34:38:2d:b0:86:c2:74:d0:
0a:21:b9:da:91:c1:fd:a0:e8:3e:8a:7f:ec:2e:2d:
22:d9:a4:5f:8e:12:38:aa:3f:21:45:8f:d6:75:4c:
94:6f:42:3e:70:94:fc:86:72:13:f6:cf:6e:7d:29:
23:3f:d9:c6:30:ad:47:50:6c:2f:d0:23:c3:51:7f:
77:e4:56:72:96:fc:42:4a:4b:8b:6e:e0:e3:93:6f:
14:e1:e3:e6:57:87:ff:b5:5d:ef:c9:77:98:fa:8f:
b3:0d:62:f3:4c:51:12:fa:9e:b3:4a:45:2b:64:d0:
b2:72:4d:e8:e9:9f:c6:7e:fb:16:5f:10:ee:85:df:
81:8c:e9:4d:3c:04:77:b0:32:9f:6b:88:f3:1a:e4:
ae:74:ea:a1:24:b0:5e:b1:2c:9a:87:43:4e:3d:8f:
16:1e:9e:00:ef:65:49:75:23:ef:9c:5f:c9:cf:11:
b6:84:cd:c0:ac:aa:26:34:28:5f:f0:03:e6:0c:0c:
fc:dd:28:86:34:11:6c:52:06:da:9a:83:3e:4c:74:
d4:46:11:f8:da:4d:42:1a:77:64:31:2b:9c:c6:af:
f3:50:73:4c:a3:22:2c:f5:3c:52:e7:68:39:76:54:
21:c5:6d:22:8d:83:97:fe:96:ff:56:3f:22:02:5c:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:79:4E:49:EB:04:20:49:AE:73:AB:3B:6E:CD:78:37:54:76:52
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FQ55TknrBCBJrnOrO27NeDdUdlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.191.0/24
Signature Algorithm: sha256WithRSAEncryption
43:dc:b4:aa:dd:7f:5d:b7:7e:1e:79:67:86:b3:ad:b6:f7:d1:
81:9a:a2:a1:0a:5d:ae:04:6a:09:a6:cc:8a:2b:4e:d6:42:49:
8c:7b:58:2f:d7:97:c3:28:2b:55:05:77:50:fb:ed:f6:b8:41:
77:97:e4:1f:46:23:30:7b:65:83:87:9c:74:ae:6a:bb:1e:eb:
06:05:98:0e:52:09:0b:20:2f:0c:50:6f:2b:3a:07:08:f2:22:
1f:b1:82:7f:b9:9a:4c:c5:c9:9d:fb:e5:02:b1:19:ab:09:05:
4b:15:83:5e:04:72:5b:ae:98:d1:29:51:a5:78:94:e1:7c:9d:
88:ed:0a:79:51:b7:fb:ae:76:2e:8f:f1:e9:e0:1b:46:5e:47:
18:8b:54:36:42:47:3b:29:5d:9a:2d:93:ed:87:e0:a7:02:c0:
c3:4b:0a:7f:04:fa:89:4a:67:4c:d5:41:06:c7:09:2f:0b:34:
25:f3:2a:34:2c:24:cb:e7:78:cd:72:15:90:e3:18:ba:71:74:
43:74:be:33:84:68:19:5b:c3:20:4e:81:44:96:a7:ad:dd:17:
07:ea:ef:60:46:95:7b:b7:97:f6:a9:1d:b5:2e:2c:7f:e2:6e:
d1:a5:75:49:0d:63:66:5e:0c:62:58:9d:13:36:74:85:cf:a9:
f9:9c:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org