Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fuoLNEHNGYW3pNauzynVjeSF3gQ.roa
File: fuoLNEHNGYW3pNauzynVjeSF3gQ.roa (raw, json)
Hash identifier: bk/XTa0jrPiZS+mRw2p1t37x8AGicyIctSzxcRDrZD4=
Subject key identifier: 7E:EA:0B:34:41:CD:19:85:B7:A4:D6:AE:CF:29:D5:8D:E4:85:DE:04
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1329A253
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fuoLNEHNGYW3pNauzynVjeSF3gQ.roa
Signing time: Sat 01 Jan 2022 04:02:57 +0000
ROA not before: Sat 01 Jan 2022 04:02:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39743
IP address blocks: 82.115.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321495635 (0x1329a253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 1 04:02:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eea0b3441cd1985b7a4d6aecf29d58de485de04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:73:30:ec:50:16:ac:1c:98:ec:14:6e:11:
73:8a:f3:80:6f:74:21:53:f1:a0:29:6a:97:1f:8a:
cd:8c:be:76:19:77:55:28:14:44:00:28:a0:25:4d:
12:d6:d1:eb:ea:e9:79:40:e6:e4:91:fb:30:f3:7e:
e3:ee:36:4b:b8:2d:1a:67:7e:07:cc:20:e9:5e:2d:
de:1e:41:57:dd:2d:da:5d:13:16:5e:36:2c:79:e5:
f6:de:16:2d:42:de:1a:d1:3c:7a:f2:a4:8a:38:94:
fd:1a:02:af:2f:be:2c:ce:be:1f:1f:5d:76:16:72:
ed:94:5e:7a:88:5b:54:bd:f2:b7:c0:41:f0:9b:cc:
34:e1:aa:80:64:06:39:70:a5:b7:b4:cd:37:8d:d0:
fe:15:93:4b:31:d2:0f:8c:12:9f:42:02:2b:6f:bc:
e4:9d:42:48:e4:d3:ba:11:e8:40:ce:8d:91:4b:c9:
10:03:ac:68:65:f2:48:81:89:8a:79:3d:b9:6a:7b:
37:5d:dd:c7:95:8d:ed:69:31:cf:a6:be:43:50:f5:
2a:28:07:ff:bd:b3:97:e1:63:06:b2:b2:2c:aa:cb:
d0:de:c6:30:11:21:a7:fc:bf:78:4a:5a:37:df:28:
18:69:7b:6f:fa:a0:7c:9d:a7:96:90:e0:d0:4a:4d:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EA:0B:34:41:CD:19:85:B7:A4:D6:AE:CF:29:D5:8D:E4:85:DE:04
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fuoLNEHNGYW3pNauzynVjeSF3gQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.17.0/24
Signature Algorithm: sha256WithRSAEncryption
41:18:9b:59:11:01:43:6d:73:00:a7:ae:83:d9:c1:aa:27:51:
a4:cf:72:0b:f7:f4:3e:1f:48:18:e3:dd:9d:2c:b4:f1:68:dc:
12:21:45:0e:e2:d0:d3:a5:43:1a:da:42:dc:57:79:2e:77:2a:
8f:0e:39:00:84:ca:12:de:1b:6a:1f:a1:d7:c9:ba:f3:99:38:
08:9c:37:e7:03:02:c6:f1:39:c3:d9:6f:08:27:d7:6c:0a:e0:
d0:d5:1c:e9:94:67:cd:af:83:71:7f:b4:c3:64:1d:7a:42:2f:
ce:8c:dd:ca:cd:91:a7:65:09:91:ff:30:70:52:f8:0f:b3:ce:
9e:61:41:dd:65:d8:30:fa:99:ec:1c:83:dd:59:f7:e9:ba:5e:
1c:1b:f7:8a:a3:de:b5:d4:9a:e5:4d:54:6a:79:41:45:31:40:
8d:38:a2:03:97:07:2e:3f:e5:9d:d8:22:9f:a4:e9:b8:7d:9b:
ef:44:59:62:c5:2b:fd:f9:b3:94:a1:f1:af:8a:52:7f:d2:61:
6a:51:2a:d1:d2:c7:05:9c:a3:ec:14:83:97:a3:e5:08:64:09:
bb:d5:a3:fb:cb:58:52:8a:40:b9:7c:1a:4d:32:07:40:9e:98:
2b:01:58:d7:85:3a:f8:aa:1a:6d:91:aa:85:44:82:4a:69:2e:
f0:d4:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org