Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/FDQOtoDt_jOuTo7gE5CYc25axGY.roa
File: FDQOtoDt_jOuTo7gE5CYc25axGY.roa (raw, json)
Hash identifier: kVb2n1rmnLIJsCT/R2IEN29KIh0AVoDNh/bQF+kGTuU=
Subject key identifier: 14:34:0E:B6:80:ED:FE:33:AE:4E:8E:E0:13:90:98:73:6E:5A:C4:66
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 0A534EF1
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/FDQOtoDt_jOuTo7gE5CYc25axGY.roa
Signing time: Sat 01 Jan 2022 12:58:08 +0000
ROA not before: Sat 01 Jan 2022 12:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41726
IP address blocks: 212.70.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173231857 (0xa534ef1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 12:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14340eb680edfe33ae4e8ee0139098736e5ac466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:27:1d:9a:b8:31:b5:05:93:fb:55:ea:5b:
9a:db:5e:0a:ea:a2:ca:ee:52:c4:4e:16:02:b7:68:
6b:84:7a:e8:a3:76:a9:fc:b0:39:ce:52:08:8a:df:
d9:42:35:11:a0:84:05:3f:19:01:27:2a:70:b9:37:
24:74:44:58:4a:7f:fc:37:74:8f:d0:f3:7a:e2:41:
46:ef:9d:f0:71:95:23:5b:c3:52:40:2e:21:be:3b:
e4:a0:64:91:47:70:ac:19:15:4a:a5:cb:85:0b:b3:
4a:56:37:11:fe:16:15:3a:76:d5:19:3c:e5:c9:67:
48:c2:96:28:27:4b:a3:8a:f4:81:52:1f:ff:e2:25:
01:84:9f:66:7a:2c:67:37:11:c5:c8:d8:d9:66:76:
f6:26:1f:da:14:fc:8a:0d:1b:d7:dc:a3:8f:85:fd:
ce:1c:b1:f8:8e:97:9c:da:b8:e5:0d:e1:1c:e2:86:
ad:b1:94:44:3d:69:12:cd:a6:93:43:d8:7d:8b:32:
0d:e0:f0:7c:ec:9f:d0:3c:5c:70:d9:1e:06:a1:56:
23:b6:af:ef:fc:b4:2f:ae:79:72:87:43:2e:a4:8c:
a7:4a:8e:da:ff:3b:d0:1d:08:58:2f:ad:24:85:e3:
34:06:b3:f7:d5:ad:40:65:0d:6c:13:ef:16:73:ba:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:34:0E:B6:80:ED:FE:33:AE:4E:8E:E0:13:90:98:73:6E:5A:C4:66
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/FDQOtoDt_jOuTo7gE5CYc25axGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:64:4a:d3:d5:b5:6a:83:44:47:95:76:4e:27:13:d0:e5:8d:
84:9b:12:a1:c0:3e:ae:80:36:f1:44:64:cf:18:16:ea:29:ca:
25:67:dd:5b:ec:5a:2d:f2:96:86:b1:d7:cf:b6:6c:9c:9e:c2:
29:d3:1e:d8:d9:90:b9:75:8c:3a:b6:dc:6a:f6:e2:4c:fe:44:
60:58:9a:fe:62:cc:b9:20:3a:f7:87:a1:5d:d9:c2:b5:f4:c6:
e9:28:f4:ee:16:b8:43:61:d6:f2:54:ba:28:29:5c:46:7e:be:
57:ce:81:26:13:06:ee:b6:26:85:5a:76:b6:7d:2f:14:1b:1b:
3b:ae:d7:d9:21:a1:45:c4:10:98:d7:6c:cc:c0:c8:a1:fd:30:
9a:70:12:ef:d9:4b:8b:ba:16:b8:8a:23:28:a9:7d:90:87:00:
06:a1:ea:ab:b4:69:dc:50:0b:60:56:72:32:4c:c9:ca:b4:ef:
a7:59:34:26:f3:86:ef:9d:b3:fb:ed:c3:d3:1c:43:15:6f:3f:
9c:be:a2:de:41:51:ed:45:a1:e8:d6:76:4f:0c:70:ee:d0:c8:
30:80:3d:44:27:27:8d:6e:97:99:64:f0:5a:57:eb:a7:5d:79:
58:21:a9:6a:1b:e3:6e:9c:49:50:0f:0c:0d:75:64:f6:c5:0f:
7c:b1:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:07 2024 by rpki-client on console-fra.rpki-client.org