Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FZU0a9Y8H4FB9I0bPV7B4Du8cr0.roa
File: FZU0a9Y8H4FB9I0bPV7B4Du8cr0.roa (raw, json)
Hash identifier: pTT0Dw9CdZwmF61f4ZYpm6zCvgk5oMoPzXcC1spe3KE=
Subject key identifier: 15:95:34:6B:D6:3C:1F:81:41:F4:8D:1B:3D:5E:C1:E0:3B:BC:72:BD
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0183415951E26E2A74CD6D98E62D733746F1
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FZU0a9Y8H4FB9I0bPV7B4Du8cr0.roa
Signing time: Thu 15 Sep 2022 13:31:56 +0000
ROA not before: Thu 15 Sep 2022 13:31:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.83.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:59:51:e2:6e:2a:74:cd:6d:98:e6:2d:73:37:46:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Sep 15 13:31:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1595346bd63c1f8141f48d1b3d5ec1e03bbc72bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:b5:25:b1:19:17:26:8c:2e:82:11:3b:73:
59:f1:37:0c:ea:26:06:07:ed:46:09:7d:87:71:3c:
76:a6:a1:ae:bb:c1:61:d1:c1:b6:d1:66:c2:77:0a:
3d:81:cc:ca:db:5a:67:bf:8f:92:2c:37:0d:09:f2:
aa:de:90:d8:a1:3b:20:99:e3:49:3f:ef:cf:34:52:
15:ea:e7:2b:73:0a:0e:f2:e0:6a:32:d8:6d:f4:60:
67:d0:19:85:f9:bd:bc:b4:ba:0c:46:8f:9e:a8:ed:
f8:80:f7:85:c6:cc:ec:55:99:d2:c8:e4:f1:7b:b4:
2e:a6:38:21:ca:6f:77:2a:78:ad:4d:40:21:a9:8c:
78:4e:42:5a:a0:96:80:c2:c3:d9:f3:84:95:61:fc:
d3:71:a3:03:0a:4b:22:e6:ac:43:02:b9:4b:02:68:
85:ea:d3:7f:75:bf:f1:48:00:b3:08:1f:02:b4:f8:
12:68:c5:dd:74:35:6d:1e:cc:65:8b:e3:79:24:0e:
1c:7a:1c:c8:7d:4e:c0:5d:77:d4:5f:19:04:0b:df:
2d:ae:35:47:96:de:1f:96:f4:8b:d2:eb:a3:3e:38:
60:c2:c7:5e:b5:fa:4f:fd:00:9d:66:db:eb:36:9f:
17:4e:ba:b7:90:ea:93:94:58:4b:45:56:2a:eb:10:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:95:34:6B:D6:3C:1F:81:41:F4:8D:1B:3D:5E:C1:E0:3B:BC:72:BD
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FZU0a9Y8H4FB9I0bPV7B4Du8cr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.200.0/22
Signature Algorithm: sha256WithRSAEncryption
62:d5:57:58:af:62:3b:0a:c8:ad:c6:61:01:91:40:d9:91:de:
b4:27:26:6d:4e:0f:0e:ab:a0:2e:b5:74:ca:80:02:5c:87:ca:
24:5e:4d:f2:6b:a8:91:1a:dd:0a:63:f0:68:4c:dd:38:0d:34:
92:b6:59:86:5b:bb:a2:9b:d4:1b:44:7e:a0:ef:99:7e:91:a4:
eb:46:3c:32:67:a5:17:5b:ee:7d:48:67:10:c3:21:2c:91:f2:
cb:56:7e:57:6f:94:4f:47:b5:0d:d4:10:61:57:2f:06:5d:ee:
db:cd:9c:73:f2:cb:30:29:8a:a3:38:70:29:99:cd:4c:9c:7b:
f9:81:fa:01:b0:ef:05:5d:cc:3c:79:9e:48:a5:f7:d0:87:52:
c8:33:bb:21:0d:75:bd:02:d4:e5:8d:f7:04:5d:65:40:c5:86:
c5:2c:3e:25:a3:12:b9:4a:69:21:37:c0:2e:bd:28:83:a6:92:
9f:b2:6c:e3:39:21:c3:a0:30:da:21:13:aa:8b:da:b5:ca:51:
f4:b3:32:f0:6c:22:9b:98:25:a7:39:53:87:1c:b0:3b:be:0b:
95:b0:c4:f1:ab:92:69:5e:d7:32:be:a8:56:cc:3c:0a:4b:b8:
3d:71:94:90:03:78:2b:49:8c:ca:24:93:82:80:ba:c2:ff:ae:
5d:a4:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org