Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Fcl5vskGXFctrZLaSH0c7-F66jI.roa
File: Fcl5vskGXFctrZLaSH0c7-F66jI.roa (raw, json)
Hash identifier: 15cB2w/Sq/ZEjawdUsmRZ9gcWAheJQ9CbYmBQrTASus=
Subject key identifier: 15:C9:79:BE:C9:06:5C:57:2D:AD:92:DA:48:7D:1C:EF:E1:7A:EA:32
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0183A423AFF3374AB4C72C5037DB25F023B8
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Fcl5vskGXFctrZLaSH0c7-F66jI.roa
Signing time: Tue 04 Oct 2022 17:55:45 +0000
ROA not before: Tue 04 Oct 2022 17:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 88.216.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:23:af:f3:37:4a:b4:c7:2c:50:37:db:25:f0:23:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Oct 4 17:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15c979bec9065c572dad92da487d1cefe17aea32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:79:8c:c6:4e:b5:ae:96:58:3e:74:85:16:
b6:62:92:2b:f5:97:60:c9:21:f6:d7:31:f7:f8:2f:
8a:ce:17:88:85:d2:63:ae:b0:ef:c2:00:5c:76:de:
ca:f4:99:12:26:ec:5f:4e:99:fc:a8:bd:56:12:72:
1b:15:e7:f6:ec:2d:d3:f7:ce:6c:f2:03:7a:4d:09:
14:f2:27:5e:73:65:54:b8:0e:af:44:34:95:39:03:
94:54:07:27:e7:f5:4d:7b:59:30:7e:ed:19:1a:3a:
6d:ac:fe:e9:bc:76:06:2f:03:9d:0d:28:1f:be:6a:
23:14:5e:de:57:9e:a0:19:2f:99:a0:5d:b2:86:48:
4f:0c:2d:71:c3:05:de:db:3b:6b:97:3e:84:97:22:
8f:23:a3:51:86:e7:f4:ab:3f:a5:8f:ca:ef:a5:38:
68:3f:49:74:66:32:34:ad:34:68:de:b1:d3:4e:e7:
92:45:ef:37:5c:1f:00:06:38:43:98:87:27:ef:5c:
61:09:33:b2:1f:d3:fa:0e:d6:a2:08:01:74:c8:40:
6a:b3:92:8c:64:a6:5f:6a:af:c2:82:96:78:30:5c:
2f:5c:eb:c7:d2:c8:91:73:a3:49:40:b8:49:76:5a:
10:f2:02:cd:75:44:0d:84:c2:cb:a3:7b:fb:c0:83:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C9:79:BE:C9:06:5C:57:2D:AD:92:DA:48:7D:1C:EF:E1:7A:EA:32
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Fcl5vskGXFctrZLaSH0c7-F66jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.216.129.0/24
Signature Algorithm: sha256WithRSAEncryption
57:1e:d2:39:4b:81:ab:36:1f:13:b8:f4:14:d6:62:96:3d:0b:
1f:47:f2:9d:c1:e0:1a:f7:c4:c9:86:72:da:9c:b1:8a:ff:72:
ce:94:ba:05:53:0b:85:5d:e0:87:cd:3a:c6:f5:e9:61:89:9c:
43:b6:6f:07:92:a6:42:4e:88:ac:f5:32:b8:49:e2:03:e3:3a:
b1:df:31:a4:b3:f0:ff:9a:34:69:a0:bc:3f:ea:72:84:af:44:
0a:84:ee:55:90:e5:ca:a2:87:eb:d2:1d:f2:56:8b:6a:bd:72:
15:12:06:43:57:af:67:73:9c:94:3a:cc:2c:f7:60:62:c1:9d:
9c:e6:e4:79:71:aa:32:f1:24:1d:57:ed:19:52:9c:87:a5:df:
9e:33:28:43:fd:41:a7:cb:84:12:b5:01:22:50:12:8b:48:1e:
c3:ed:81:1c:59:04:35:6b:d8:3b:59:d3:80:a5:75:7c:7a:d0:
e8:e0:c3:ca:0b:2d:06:af:c0:d7:9c:c1:4b:1b:0b:95:02:81:
b1:76:fb:48:24:ef:d6:7b:a7:64:8f:a1:10:e8:b0:26:38:43:
e5:64:43:fa:bf:68:b7:7f:dd:e6:08:a8:b5:0d:73:4b:d0:ac:
22:18:af:5a:50:ea:6a:5a:bb:81:97:ef:b2:74:27:1b:68:88:
40:1b:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:31 2024 by rpki-client on console-fra.rpki-client.org