Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/FfOOLn1hBEl5MrzzIDLD2Fy1n4o.roa
File: FfOOLn1hBEl5MrzzIDLD2Fy1n4o.roa (raw, json)
Hash identifier: 0ZDpezbw+IwkUT71+/Ac+KXs5k8mqR2TLVbsIYZRP10=
Subject key identifier: 15:F3:8E:2E:7D:61:04:49:79:32:BC:F3:20:32:C3:D8:5C:B5:9F:8A
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 0182FE4702186F65F7F52CD850EC7000ED79
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/FfOOLn1hBEl5MrzzIDLD2Fy1n4o.roa
Signing time: Fri 02 Sep 2022 12:57:22 +0000
ROA not before: Fri 02 Sep 2022 12:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203130
IP address blocks: 194.62.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:47:02:18:6f:65:f7:f5:2c:d8:50:ec:70:00:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Sep 2 12:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15f38e2e7d6104497932bcf32032c3d85cb59f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:08:af:46:13:be:f2:a2:89:15:5e:26:67:
42:dd:ab:c6:aa:03:78:1e:62:97:b7:1e:af:2c:57:
9a:cf:1a:37:05:a9:7f:f8:b5:33:b9:84:3d:0b:f5:
30:7a:44:43:f4:f9:bc:67:ff:8f:a1:72:e1:86:2d:
57:91:4c:37:4b:00:bf:28:13:ef:1a:54:56:05:f8:
c1:e1:0d:09:89:8b:33:b5:69:2d:f5:df:df:8d:55:
ea:5f:92:f5:d4:6e:59:00:ad:11:1a:16:7d:3b:c4:
28:2f:17:e3:38:5e:ba:a4:e2:ff:a1:49:f8:0b:8f:
19:b8:35:13:bc:ae:d4:bf:09:18:1b:a8:a3:ec:39:
9d:b0:c7:31:85:ef:ca:c4:bf:87:44:25:97:63:d3:
81:a4:3b:ab:0f:ad:06:22:a3:c7:48:c2:b8:12:c0:
59:bf:8a:30:44:fb:a9:fd:6a:e9:be:ef:3f:cb:60:
25:e6:a3:a1:6b:5b:27:03:15:00:a1:3c:8f:0a:1f:
cd:a3:c5:95:7f:bf:16:51:1c:f2:c0:34:d5:20:9b:
e2:f9:74:ca:df:d4:de:06:2a:40:3e:cb:f1:af:cb:
6e:96:30:ff:7a:81:39:e6:04:d0:e8:74:0c:f6:dc:
ed:ba:8f:3d:40:ca:26:19:38:6a:10:10:43:d3:4e:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:8E:2E:7D:61:04:49:79:32:BC:F3:20:32:C3:D8:5C:B5:9F:8A
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/FfOOLn1hBEl5MrzzIDLD2Fy1n4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.161.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e7:1a:82:9a:cd:4b:df:56:dd:5b:5e:49:e1:86:f8:c3:2f:
1a:cb:d3:bf:ec:e2:1d:ac:49:f9:ee:d4:2e:bb:b3:57:b0:34:
3a:24:1c:bd:9c:5e:e2:73:cf:a6:fb:71:28:eb:fc:e9:7e:41:
20:48:4f:50:37:a5:04:60:2f:40:db:7d:c5:40:f9:7d:e0:ae:
45:d7:9f:d1:a4:9a:b0:b8:78:3f:02:5c:51:a6:47:b1:50:f5:
a4:1e:c7:96:d5:53:ea:88:0b:4d:69:4b:c7:63:a8:af:df:20:
75:23:0a:e3:a7:c5:65:b1:d8:08:5c:b7:16:54:82:62:bb:ca:
73:86:a2:d4:d8:db:b4:df:ff:f8:19:55:09:68:38:51:fa:83:
f7:4e:ac:59:ad:78:fc:14:5a:56:77:37:ec:80:8a:6e:ac:d8:
dd:19:b0:5b:7b:11:f1:ad:1c:07:95:1c:85:d1:d1:e2:96:6b:
fe:b4:26:06:1e:69:a4:d0:03:c8:51:ed:1a:8e:44:a6:94:19:
01:57:fb:c7:c8:fa:13:24:a4:54:39:ce:79:dc:61:ea:a5:09:
d5:5e:70:58:3a:9a:19:e3:00:39:bc:e6:3f:03:c6:e4:71:e8:
5d:36:a1:05:e6:a6:fd:a3:6b:a9:a2:36:f8:54:3c:33:c4:01:
49:01:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org