Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/FCn109IjD9FTrKGd9qNSwDL1gvo.roa
File: FCn109IjD9FTrKGd9qNSwDL1gvo.roa (raw, json)
Hash identifier: /aN9kSTBBoraO0mSvNMchR1q4XKhV0Ddl8uvVK2AD0k=
Subject key identifier: 14:29:F5:D3:D2:23:0F:D1:53:AC:A1:9D:F6:A3:52:C0:32:F5:82:FA
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0B92B340
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/FCn109IjD9FTrKGd9qNSwDL1gvo.roa
Signing time: Sat 01 Jan 2022 08:56:21 +0000
ROA not before: Sat 01 Jan 2022 08:56:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208229
IP address blocks: 185.250.196.0/23 maxlen: 23
89.29.250.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194163520 (0xb92b340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 1 08:56:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1429f5d3d2230fd153aca19df6a352c032f582fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:9e:69:99:d9:ec:42:a7:09:26:eb:62:34:
2b:8c:62:0c:62:7c:53:ef:e7:e7:7a:86:db:47:7c:
fb:f9:48:19:d1:b0:94:0a:28:3a:2c:03:f9:47:56:
b5:b6:7b:50:ca:c5:c8:9a:24:c5:66:02:fd:f6:59:
f4:ee:fc:8e:9b:ba:12:bb:31:35:89:14:e8:d0:f7:
34:c7:9b:6f:e6:73:84:d0:34:f9:4d:8d:06:bb:1d:
f4:35:a5:d2:df:2a:23:aa:ae:c6:08:4a:aa:df:af:
c1:b0:5a:a6:06:8b:b7:06:12:bb:bc:7f:bb:7c:88:
d0:68:bf:d0:2b:98:c9:55:93:61:05:9c:8e:1e:9c:
67:4d:1c:ab:77:8d:07:20:5d:dc:9c:80:ef:24:7f:
13:2f:1a:1a:6b:0e:af:5c:97:85:48:8e:69:5d:28:
b2:23:38:80:16:57:eb:29:e3:3e:d2:9c:7f:7d:88:
bc:11:5f:cd:6a:d0:cd:1c:a5:67:55:a3:3b:3a:3a:
4b:82:32:c3:fe:1c:5c:8e:0b:f3:0b:6d:18:59:04:
5e:ab:68:5b:cb:9e:f8:23:dd:bd:67:6c:e8:7f:f6:
61:c6:39:b6:25:b6:46:72:fa:46:0f:d1:e5:80:62:
c4:bd:9e:c5:ce:6d:70:94:6b:aa:57:31:52:7d:37:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:29:F5:D3:D2:23:0F:D1:53:AC:A1:9D:F6:A3:52:C0:32:F5:82:FA
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/FCn109IjD9FTrKGd9qNSwDL1gvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.250.0/23
185.250.196.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:76:61:69:d8:2f:91:f6:ef:e1:a7:92:7d:65:bc:99:77:fc:
6a:26:20:af:10:5e:d5:13:5d:42:91:d5:3b:bd:a3:f0:b0:44:
39:f8:17:68:60:f6:7f:42:e5:e6:3d:13:1f:4f:5e:97:b1:22:
62:b0:02:db:dc:65:d8:a5:87:fb:9f:c6:ed:41:90:f5:31:98:
6e:2f:98:5c:e3:51:15:69:96:50:a2:00:94:f0:7f:76:86:3a:
ae:3c:74:98:a2:11:90:98:9f:72:3f:b7:be:dd:5a:fb:cd:7e:
03:73:5d:d0:cc:08:d1:55:b0:85:23:22:e4:e7:3b:78:94:28:
4a:1d:76:2e:98:97:85:d8:b5:ae:f9:33:3d:bb:7c:c7:c4:b7:
b0:28:bb:7e:e7:51:04:d9:22:7f:ae:a2:49:f0:86:91:63:db:
9a:a6:e3:23:68:e8:94:ac:cb:7e:d7:ea:4f:d5:25:79:b1:d7:
4f:54:34:6b:b0:16:5e:fb:6a:6b:11:ef:51:35:66:54:11:39:
95:74:43:50:3c:6e:85:df:d1:81:75:7f:71:bb:b4:2c:df:10:
a2:de:7b:c7:75:3f:41:05:c8:90:2c:19:8b:32:87:0b:9e:d2:
24:8d:8f:a6:f3:c6:43:04:84:e1:d3:9e:ec:d0:2e:6c:09:88:
aa:95:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-fra.rpki-client.org