Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fxTnZuh6CHHZdLN9wg9UtOh02RI.roa
File: fxTnZuh6CHHZdLN9wg9UtOh02RI.roa (raw, json)
Hash identifier: FE72YIbgZYy9aFlSxRP/nRnbou0Lm6qcRHqzbWRtNpg=
Subject key identifier: 7F:14:E7:66:E8:7A:08:71:D9:74:B3:7D:C2:0F:54:B4:E8:74:D9:12
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01844E8639AF494E4C1FF3807CE7167FB59E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fxTnZuh6CHHZdLN9wg9UtOh02RI.roa
Signing time: Sun 06 Nov 2022 19:58:50 +0000
ROA not before: Sun 06 Nov 2022 19:58:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 188.255.200.0/24 maxlen: 24
109.121.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4e:86:39:af:49:4e:4c:1f:f3:80:7c:e7:16:7f:b5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Nov 6 19:58:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f14e766e87a0871d974b37dc20f54b4e874d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:8d:db:09:d0:c6:43:f5:01:09:7e:eb:84:
ac:96:56:ad:00:36:4c:ee:5f:e1:7a:6b:ba:1e:71:
1a:32:89:b4:b7:6b:3b:18:89:0b:13:0b:7a:0b:c2:
49:44:9c:58:9a:0f:b8:a6:69:f6:a5:4b:db:06:48:
95:7b:74:29:55:a3:f3:5d:f2:cc:bf:74:22:5d:5b:
29:cb:50:e2:e0:93:ec:85:0d:fa:05:8e:f4:cd:d4:
3a:47:1d:66:b7:21:e0:34:59:73:a1:5b:6a:8a:03:
e2:e4:57:ae:f3:d9:41:b4:e0:0b:85:44:35:ab:b9:
be:ce:07:55:ba:b1:fc:8a:40:dc:0f:a3:ba:8f:f4:
9a:0d:e6:2e:2a:64:46:88:6e:e3:dc:4b:56:f0:fe:
18:11:2a:b5:ad:a4:d7:41:ae:0f:56:8c:ee:8b:ad:
61:16:23:fc:8e:55:c4:e8:0a:30:2a:33:30:c5:d1:
72:36:f1:2e:8a:92:88:f6:4e:e8:0c:31:2c:7d:a5:
a7:6c:f2:af:2e:eb:84:14:47:58:21:74:5c:93:06:
fa:25:dd:26:50:f3:dc:c7:19:bf:42:69:d0:d6:5b:
6d:d9:db:e7:f4:2f:42:83:93:08:67:cf:c1:88:23:
98:51:a2:e6:27:71:90:d4:7b:ad:0d:82:c1:0f:6b:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:E7:66:E8:7A:08:71:D9:74:B3:7D:C2:0F:54:B4:E8:74:D9:12
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fxTnZuh6CHHZdLN9wg9UtOh02RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.41.0/24
188.255.200.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ca:b9:7c:08:02:68:f8:56:7f:14:a7:7d:25:83:a7:5b:5a:
a2:cd:c9:d1:1c:a7:ab:c3:3f:4d:2d:a9:a0:cd:91:63:c3:0d:
72:20:b6:75:a1:78:51:54:61:8e:e6:d7:70:d2:ef:6c:6b:0c:
30:9e:bc:aa:a5:d4:c3:72:a8:13:2f:56:b4:a8:3d:d3:b1:59:
f6:80:cc:f7:9f:fa:c8:a8:c0:db:66:29:86:ca:4d:27:ef:87:
33:a7:e8:06:bc:96:25:ef:45:42:fb:e9:29:07:4f:9d:66:3f:
0a:28:37:5b:08:eb:fa:64:a1:e7:34:98:28:53:2c:d7:6b:da:
94:e0:7b:2a:75:e5:d8:79:34:bd:3f:5f:93:df:76:f3:57:86:
9f:5f:8b:e2:a3:49:38:67:c8:6e:e6:f7:5a:14:56:5a:01:6a:
66:a7:7e:4b:47:23:02:f8:91:62:30:8e:32:3a:e1:bf:fd:0f:
e7:4e:ae:a7:df:37:1c:20:7c:68:fc:79:b6:9c:7e:51:e8:86:
64:67:79:20:04:fd:b3:13:f7:92:d5:ac:44:aa:38:34:41:6d:
03:a9:2d:87:a5:57:83:21:7b:f8:19:50:e1:9b:76:68:61:13:
ef:8c:47:e5:c5:15:a4:81:1f:c0:5a:ec:b3:b6:3c:1e:18:6a:
53:55:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org