Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FqEDregaTBA-T_og8KgXeRa8sCM.roa
File: FqEDregaTBA-T_og8KgXeRa8sCM.roa (raw, json)
Hash identifier: Ct+5llAEJ6uJGvCzA94MQK3j6iCgKntBiG1dvL8ypdU=
Subject key identifier: 16:A1:03:AD:E8:1A:4C:10:3E:4F:FA:20:F0:A8:17:79:16:BC:B0:23
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 07144D6F
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FqEDregaTBA-T_og8KgXeRa8sCM.roa
Signing time: Mon 07 Mar 2022 10:12:36 +0000
ROA not before: Mon 07 Mar 2022 10:12:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 188.209.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118771055 (0x7144d6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Mar 7 10:12:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16a103ade81a4c103e4ffa20f0a8177916bcb023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:41:25:65:c8:84:4a:b8:e6:37:f0:1e:d8:
68:25:79:04:3b:82:7f:02:e6:67:c4:d2:29:c9:7e:
0d:26:71:a1:07:86:06:36:05:ab:43:2b:c3:cb:d8:
aa:d3:e2:23:34:58:fb:18:4f:fe:62:b1:88:1b:4f:
ea:f2:6b:9d:6c:2e:88:64:91:6b:ab:7d:fd:c9:9f:
aa:05:2f:cb:e2:cb:0c:88:59:85:c1:c6:38:b9:51:
90:5d:d0:9e:ba:32:a9:5a:1e:a9:8c:c2:9c:7c:1b:
09:5f:48:d0:3f:c8:e8:9a:c2:d2:f0:62:fa:e4:ee:
6e:f2:14:7d:8c:a9:40:d0:f0:54:82:11:16:a3:d9:
28:0e:55:07:09:b7:32:a5:64:82:bd:39:d9:18:46:
f7:17:c5:d2:b4:f6:14:21:a8:24:bd:aa:ab:e7:eb:
cc:ab:8d:fe:6b:f5:5e:11:dc:cb:ec:56:fd:8c:5a:
de:6c:95:a8:a5:fb:cc:d1:09:30:d9:b1:57:51:03:
3d:aa:ec:dd:fe:e6:f8:aa:13:55:56:a7:4e:f6:27:
bb:f8:2a:55:d8:ba:83:21:0a:d8:83:15:36:05:3c:
fe:83:30:43:92:f9:6d:f6:1e:6a:55:f0:d2:20:9b:
4b:a3:b1:fa:44:e4:b0:f9:1d:b4:a7:d1:8f:fd:b4:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:03:AD:E8:1A:4C:10:3E:4F:FA:20:F0:A8:17:79:16:BC:B0:23
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/FqEDregaTBA-T_og8KgXeRa8sCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.128.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:f9:5b:e1:1d:53:40:de:60:86:b3:d9:fe:fb:22:6a:bb:f8:
78:a9:3c:6b:f9:5f:c4:23:8e:1c:a4:a7:1d:6c:1b:7e:fb:2a:
21:ad:af:f7:7f:42:a4:30:03:ec:6f:cc:c2:88:9b:36:65:f5:
87:5a:4c:b3:78:51:64:f8:c3:bc:48:9c:58:a9:a9:49:db:98:
96:79:8f:51:2a:f4:d9:91:64:9b:a7:52:d9:6b:39:59:6e:69:
e5:b3:ec:db:1b:94:8b:ed:3f:45:19:28:96:4c:1e:1f:a3:ae:
32:95:18:e9:0f:f4:28:ce:c2:24:19:0d:72:cf:57:c8:4f:a6:
e5:ed:38:c7:61:1e:16:af:95:76:a8:64:bf:87:95:8b:e6:16:
8b:6a:96:17:b8:9d:2c:ac:74:73:60:27:40:f9:af:b7:e8:61:
f6:8c:42:60:9a:1b:8e:30:32:0d:54:1d:5f:7f:12:ca:b4:03:
c8:26:54:d6:8e:ab:92:1d:eb:dc:73:c3:18:13:4b:d0:16:46:
c7:0b:1f:40:5c:0b:60:29:30:2d:3a:bd:7e:2d:29:81:27:cb:
75:3d:8c:df:69:76:9b:12:9d:f1:fc:71:fd:9c:48:91:27:21:
72:fe:99:40:70:80:9e:77:20:ec:9d:66:31:04:ca:e0:35:95:
52:67:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org