Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/fxFsqVijm8RYqAkySFRMlYpcjlk.roa
File: fxFsqVijm8RYqAkySFRMlYpcjlk.roa (raw, json)
Hash identifier: 3wSZ7mUiQ8FTwwijwPWK0cx2QsZGx5QVzM/Vh+1TFWQ=
Subject key identifier: 7F:11:6C:A9:58:A3:9B:C4:58:A8:09:32:48:54:4C:95:8A:5C:8E:59
Certificate issuer: /CN=a385c3cba312a078c4d0a712af5316dd1e41c466
Certificate serial: 01008135
Authority key identifier: A3:85:C3:CB:A3:12:A0:78:C4:D0:A7:12:AF:53:16:DD:1E:41:C4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4XDy6MSoHjE0KcSr1MW3R5BxGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/fxFsqVijm8RYqAkySFRMlYpcjlk.roa
Signing time: Sat 01 Jan 2022 08:02:44 +0000
ROA not before: Sat 01 Jan 2022 08:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.252.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16810293 (0x1008135)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a385c3cba312a078c4d0a712af5316dd1e41c466
Validity
Not Before: Jan 1 08:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f116ca958a39bc458a8093248544c958a5c8e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:0f:b4:b1:c7:51:d2:18:ee:6e:c6:b6:aa:
72:74:64:a6:c1:f7:48:7f:c8:b3:de:62:c0:57:b3:
03:23:30:ae:50:6d:3e:48:7b:4d:e5:19:b7:e8:38:
c3:3f:e9:a8:86:42:23:6f:3f:39:a1:72:b0:89:00:
67:22:f0:15:25:e0:a5:79:c3:67:02:2c:12:f5:d7:
06:b6:b1:8c:cb:67:05:85:2a:31:d7:b2:1b:f7:71:
48:52:27:d7:82:6b:d7:ec:0c:36:0b:79:66:10:c6:
9a:27:eb:34:de:54:69:75:e0:28:5a:e6:d8:e3:37:
5c:e6:cb:a8:75:02:6f:c2:6d:f1:6b:f4:bd:d0:48:
2f:79:1b:c2:5d:8e:61:49:16:49:79:27:be:45:4a:
49:1f:51:a3:91:aa:24:1e:e1:51:72:4e:a1:c8:42:
9f:73:bf:e5:61:4d:56:59:58:15:e2:43:43:86:ba:
d4:2e:41:d0:a2:05:d1:c1:51:1e:c1:b7:e1:07:bf:
64:07:3b:f2:c7:a8:7c:5b:e6:93:09:4e:bf:5a:b0:
0e:e0:05:52:0d:63:11:e6:01:3f:d0:c6:c0:33:98:
5d:0c:fa:4e:68:44:d8:4b:98:1d:bf:87:da:67:e6:
3d:2d:99:33:e0:8c:2c:f7:34:5b:39:89:d8:f9:31:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:11:6C:A9:58:A3:9B:C4:58:A8:09:32:48:54:4C:95:8A:5C:8E:59
X509v3 Authority Key Identifier:
keyid:A3:85:C3:CB:A3:12:A0:78:C4:D0:A7:12:AF:53:16:DD:1E:41:C4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4XDy6MSoHjE0KcSr1MW3R5BxGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/fxFsqVijm8RYqAkySFRMlYpcjlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/o4XDy6MSoHjE0KcSr1MW3R5BxGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.212.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0c:4a:eb:c0:56:0f:0a:4f:da:8d:7e:7c:d8:c1:22:58:9b:
eb:8c:01:a8:1f:97:07:07:1b:c3:4c:3a:82:0f:76:b2:35:ce:
f9:05:2e:11:a3:11:67:c6:c7:7a:62:82:b5:58:e9:87:27:2c:
66:0c:5b:1c:d8:3b:07:15:8e:0a:87:d3:ac:26:f4:bc:41:da:
cd:b4:1b:b6:7a:38:ea:cd:69:02:c3:f0:a8:d7:c7:c3:3d:84:
3e:e4:05:b6:6b:5a:d2:2d:29:7f:f8:55:49:a5:18:55:b4:18:
5a:d1:a9:b9:e1:d7:43:10:64:c6:75:59:fd:b6:8c:74:f5:78:
17:79:80:21:37:32:53:95:47:c5:35:64:36:d6:d6:85:5a:7d:
a5:a8:4d:91:fd:54:83:d5:1b:6a:86:16:fa:9d:91:41:5a:9b:
e7:6b:e5:8c:30:b5:9a:14:d1:f6:69:fe:1a:33:cf:d7:bf:be:
da:9b:85:d9:74:99:6f:ff:f8:37:66:a2:9d:ba:24:d7:b7:f2:
f6:72:65:13:b6:62:9c:84:e0:2a:6b:f8:51:22:35:9c:f8:16:
d3:44:00:a1:99:e6:33:ad:95:13:21:aa:7d:a4:8f:7a:f3:37:
a7:b3:95:cd:db:7b:9d:f0:0f:49:dc:1e:bd:f3:0a:93:5b:bf:
50:65:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:45 2023 by rpki-client on console-ams.rpki-client.org