Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FRoNNStUie-OKRFW8LEOpgnZaOM.roa
File: FRoNNStUie-OKRFW8LEOpgnZaOM.roa (raw, json)
Hash identifier: h/iq+1Xh/KahSdUAhFSZKrHIna74olUAZ+IhbOf91oc=
Subject key identifier: 15:1A:0D:35:2B:54:89:EF:8E:29:11:56:F0:B1:0E:A6:09:D9:68:E3
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0182C6F934B95756038A641EB895801E6D00
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FRoNNStUie-OKRFW8LEOpgnZaOM.roa
Signing time: Mon 22 Aug 2022 19:13:16 +0000
ROA not before: Mon 22 Aug 2022 19:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 188.255.215.0/24 maxlen: 24
93.186.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c6:f9:34:b9:57:56:03:8a:64:1e:b8:95:80:1e:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 22 19:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=151a0d352b5489ef8e291156f0b10ea609d968e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:18:8b:10:f8:d1:fa:58:47:0b:2d:fa:ba:
38:a5:97:0a:a2:b4:d5:5e:2f:09:e4:c3:8a:4b:15:
f4:59:51:92:f8:ae:01:33:31:e3:c5:83:1f:e5:b2:
a3:13:0f:82:e9:14:6a:fa:a7:24:ac:d6:86:79:94:
0b:71:44:7a:9d:39:6a:40:3c:69:4f:80:07:06:9d:
d6:ca:87:35:ba:db:62:d2:f1:eb:bb:c0:1a:73:f7:
04:e3:52:60:7f:08:d1:92:49:e0:77:3b:4c:1d:04:
de:32:3e:3e:0c:08:c6:a0:50:57:d0:98:6b:7a:07:
87:85:ae:2d:0a:92:5d:52:b0:95:1f:72:2e:c0:23:
e7:d1:3f:3f:11:b3:10:f1:f9:b7:36:85:39:b1:e8:
a3:03:77:8b:29:91:4e:de:91:68:1f:27:fb:6c:14:
95:26:07:94:3d:62:51:bf:85:a3:e5:98:d0:87:bb:
f0:14:6e:25:e4:ca:0d:78:2c:e9:07:a5:e3:d6:60:
74:d0:3f:9d:d7:71:ea:28:85:b7:7f:5e:59:08:ab:
29:d6:01:8c:a6:f2:e4:1b:17:2d:d8:fd:9f:41:4c:
48:2e:19:11:8e:1f:58:d2:1e:6b:b8:dd:d4:1e:84:
c3:09:f4:df:48:97:e1:d8:16:e4:3e:dd:e4:8e:68:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1A:0D:35:2B:54:89:EF:8E:29:11:56:F0:B1:0E:A6:09:D9:68:E3
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/FRoNNStUie-OKRFW8LEOpgnZaOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
188.255.215.0/24
Signature Algorithm: sha256WithRSAEncryption
84:02:92:6c:45:bf:b7:f3:6e:d2:83:52:fc:99:35:88:f6:bb:
d1:fc:95:8f:83:f5:c7:b0:d3:6b:77:91:87:bd:25:c0:bc:51:
1a:59:ed:12:cd:83:cd:1d:74:91:a8:c7:3c:66:40:30:32:29:
60:65:9a:d1:d9:27:94:74:50:cd:35:7b:8c:af:1c:82:7d:15:
9e:a9:40:55:87:3c:7b:40:e0:75:78:66:c4:1a:54:d1:bb:f9:
82:3b:89:04:ca:b4:98:8d:32:03:64:8a:f3:91:0b:d2:ce:ea:
99:cf:71:41:3a:76:72:2c:25:cd:d1:88:40:28:98:ef:df:88:
c7:13:d0:0d:fc:a3:21:2b:6a:8e:b3:ad:ea:3f:67:29:5f:bc:
e7:fa:62:8f:26:74:e3:e9:65:82:c8:83:c7:f7:13:d9:d7:1d:
eb:42:43:63:cd:8a:2d:4a:7c:05:b5:d9:59:07:50:b4:1d:93:
9c:39:8a:c3:3e:53:60:7d:8b:c5:c3:7f:7c:3a:79:c6:82:3f:
e5:a8:93:31:2b:8b:91:13:e2:bb:23:32:58:58:88:ba:6d:7d:
b1:96:e6:3c:9e:84:a2:91:ed:a9:ad:8f:f3:6d:42:7f:c1:d5:
f5:a3:04:fd:42:4a:2d:c8:9d:85:25:6b:54:cb:4f:56:e2:79:
91:09:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-fra.rpki-client.org