Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/faAYFXBRGsjAO-EpzrDIh21PSpM.roa
File: faAYFXBRGsjAO-EpzrDIh21PSpM.roa (raw, json)
Hash identifier: jYD/86BI53TmYZ26xes/zlYr5BOI4io2kY9ybh9eUbQ=
Subject key identifier: 7D:A0:18:15:70:51:1A:C8:C0:3B:E1:29:CE:B0:C8:87:6D:4F:4A:93
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 0D70797D
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/faAYFXBRGsjAO-EpzrDIh21PSpM.roa
Signing time: Sat 01 Jan 2022 15:06:28 +0000
ROA not before: Sat 01 Jan 2022 15:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212894
IP address blocks: 185.228.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225474941 (0xd70797d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Jan 1 15:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7da0181570511ac8c03be129ceb0c8876d4f4a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:94:4b:99:a1:45:6f:fa:54:a9:a0:db:96:
f2:28:fa:ec:be:93:08:fa:bf:09:e0:a2:37:39:d9:
13:8c:ee:4a:a0:09:5b:0c:b4:11:fe:c6:84:61:e6:
25:b6:43:64:a7:3f:2e:cb:7d:b4:b9:e7:b4:0c:a8:
e3:a3:3c:6f:1d:f1:f4:62:95:02:02:90:35:c6:22:
2b:da:2d:c5:b4:af:5a:04:cf:5c:59:9d:d0:ce:52:
e6:35:c6:b2:af:f3:d9:c7:69:15:06:4e:68:16:6e:
60:f5:b5:1d:7e:85:ba:ac:fd:b0:88:75:a4:37:60:
b5:6f:04:2f:5d:10:45:bb:c9:0b:4b:98:d8:e0:f3:
cc:82:11:06:bb:09:52:0d:2a:cc:e8:36:b3:c0:0c:
69:b9:4b:03:7f:e4:c8:0a:6b:4a:90:70:a5:56:2f:
8e:cd:31:5b:15:a9:9d:44:da:43:7b:9c:53:79:2c:
0a:f1:c5:d1:eb:04:62:db:0b:3c:07:8a:16:e6:64:
31:b7:ed:7b:00:a5:d3:26:ba:c5:1a:07:a7:37:72:
6e:b9:1a:6c:d5:ce:5a:14:2f:de:c8:8e:57:d1:d3:
b2:f8:73:fa:fa:27:3c:d9:17:17:f6:0c:10:d2:8a:
5e:4d:5f:53:1e:ed:29:47:fe:aa:1b:32:5d:f5:d7:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:18:15:70:51:1A:C8:C0:3B:E1:29:CE:B0:C8:87:6D:4F:4A:93
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/faAYFXBRGsjAO-EpzrDIh21PSpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.243.0/24
Signature Algorithm: sha256WithRSAEncryption
13:52:f4:2b:34:7d:17:76:4c:17:49:69:c6:dd:b0:38:1c:4f:
c2:e7:4a:b0:18:c9:e9:38:06:2e:b4:8f:c7:da:7e:e7:b4:55:
38:a1:65:07:4b:d8:41:25:f4:67:7c:b6:da:7d:25:41:60:7f:
f9:be:90:fe:83:84:6a:b2:c7:74:c6:c8:21:c0:2e:a0:7d:eb:
7d:c6:78:75:7e:64:6b:00:cc:7a:f6:f1:55:79:90:c0:c2:59:
a1:22:8f:42:df:5f:1a:82:3c:f3:c5:d4:d4:dc:bd:8c:0b:83:
0f:35:18:32:a3:08:19:0d:d0:f6:79:98:4e:0d:c1:e7:e4:64:
d7:ef:35:b4:3a:2f:80:4c:30:10:46:07:8d:e4:8f:e2:1d:2a:
d0:e8:bc:07:78:0e:d2:77:32:9c:f1:b8:a3:33:2f:1e:02:c2:
48:be:da:ed:01:12:8a:94:b8:30:7d:61:12:cc:b6:57:42:85:
26:ab:54:54:80:fd:59:3a:2d:4e:2e:b0:e1:6b:aa:72:c1:03:
f1:d6:63:f4:30:5c:e2:58:e2:00:e8:3e:22:e0:c7:a5:5c:60:
14:f6:0d:6c:68:63:4f:a5:fc:22:a0:9d:4f:cb:ef:9d:78:e8:
1c:43:d3:ed:0a:90:93:a4:da:38:17:ee:52:eb:88:b9:05:d3:
fd:5d:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:54 2024 by rpki-client on console-ams.rpki-client.org