Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/FgErSEcClK-I1o3j7__uzH782lQ.roa
File: FgErSEcClK-I1o3j7__uzH782lQ.roa (raw, json)
Hash identifier: f2CzePudqAJ2783So6SkCyukAslooF0VrenGQ2Qfqzc=
Subject key identifier: 16:01:2B:48:47:02:94:AF:88:D6:8D:E3:EF:FF:EE:CC:7E:FC:DA:54
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 018262F69438C9719474835E3D27525E0C03
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/FgErSEcClK-I1o3j7__uzH782lQ.roa
Signing time: Wed 03 Aug 2022 09:08:23 +0000
ROA not before: Wed 03 Aug 2022 09:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61333
IP address blocks: 94.228.108.0/24 maxlen: 24
94.228.110.0/24 maxlen: 24
185.251.54.0/24 maxlen: 24
185.251.53.0/24 maxlen: 24
94.228.96.0/24 maxlen: 24
94.228.96.0/20 maxlen: 24
94.228.98.0/24 maxlen: 24
94.228.100.0/24 maxlen: 24
94.228.104.0/24 maxlen: 24
94.228.105.0/24 maxlen: 24
149.126.64.0/24 maxlen: 24
149.126.64.0/21 maxlen: 24
149.126.65.0/24 maxlen: 24
149.126.67.0/24 maxlen: 24
149.126.66.0/24 maxlen: 24
149.126.70.0/24 maxlen: 24
194.169.198.0/24 maxlen: 24
193.200.249.0/24 maxlen: 24
2a00:e30:a00::/40 maxlen: 48
2a00:e30:ed00::/41 maxlen: 48
2a00:e30:3000::/41 maxlen: 41
2a00:e30:2100::/41 maxlen: 41
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:f6:94:38:c9:71:94:74:83:5e:3d:27:52:5e:0c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Aug 3 09:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16012b48470294af88d68de3efffeecc7efcda54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:ce:a7:b2:33:5f:ed:21:77:15:6f:6d:2a:
a6:0b:ef:4d:e9:ac:71:ba:3e:3a:60:ad:5b:54:ba:
5f:be:50:42:68:5a:27:06:b2:29:95:08:46:3a:a3:
ef:66:b0:7d:f9:63:10:90:fd:07:4e:4b:c2:97:aa:
65:22:40:fd:93:5a:dd:48:c8:f0:06:ea:39:6d:03:
e8:76:e3:05:73:53:c2:6e:f8:b3:13:df:b3:ce:bf:
16:22:18:0d:c6:68:36:4c:15:a3:0d:17:44:ac:a7:
a8:c4:4d:3b:9b:af:af:df:bc:14:78:fa:cd:cb:35:
7f:77:16:c9:f5:8f:d9:5a:61:e6:9b:5d:3d:e6:19:
aa:6d:41:65:48:81:9d:64:bb:b6:f4:53:3e:a2:7f:
98:89:6c:c7:e9:0f:ba:27:a1:89:c6:35:40:b5:cc:
fd:1d:1a:8f:52:9e:f7:58:f1:12:0f:82:fa:af:17:
64:2f:ad:40:e4:48:c0:8e:cb:17:cf:34:ce:48:ab:
ac:2c:99:f8:a9:14:3e:d6:ca:aa:ab:e1:62:3c:28:
01:3a:d0:ab:8e:75:71:d9:2a:f3:c1:2b:45:bf:48:
b1:50:b4:01:04:15:d7:d3:df:d9:05:2c:bc:64:0c:
d7:db:ab:89:20:a4:eb:13:e5:4c:6b:f9:f3:4b:bc:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:2B:48:47:02:94:AF:88:D6:8D:E3:EF:FF:EE:CC:7E:FC:DA:54
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/FgErSEcClK-I1o3j7__uzH782lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.96.0/20
149.126.64.0/21
185.251.53.0-185.251.54.255
193.200.249.0/24
194.169.198.0/24
IPv6:
2a00:e30:a00::/40
2a00:e30:2100::/41
2a00:e30:3000::/41
2a00:e30:ed00::/41
Signature Algorithm: sha256WithRSAEncryption
43:9d:68:30:14:d7:85:e3:79:38:3e:ef:e2:82:e1:f2:94:6f:
b4:53:b5:b7:ae:8d:b4:42:93:29:7b:ec:68:82:bc:ba:a6:5a:
1d:ba:e6:3c:c6:23:4a:b1:48:96:cc:af:21:52:d9:94:03:52:
1d:a7:bd:d6:78:4c:82:e8:a0:bb:8a:ca:a8:c5:ba:a3:00:d8:
af:90:51:0d:ab:1e:51:b9:00:60:01:00:ca:fe:28:d3:41:d6:
b8:37:4a:bc:10:ec:2e:6b:5a:c8:a9:4c:32:64:a8:ae:64:99:
14:c0:a0:45:99:17:e7:7a:79:ed:4b:68:7b:1e:85:20:ff:04:
ff:5e:8e:42:74:5b:52:1d:39:5f:03:2c:01:4b:7c:5f:68:8b:
2e:6f:5a:29:71:3b:43:2c:ca:c3:53:7a:6c:40:09:4b:b9:e5:
09:8d:a2:86:d6:b1:ff:db:f5:e3:bf:bb:20:0f:bb:e8:5f:19:
bd:3e:c0:31:9f:51:ad:27:04:06:2c:32:7b:fd:54:a8:db:e8:
f7:58:ba:05:71:49:e6:19:78:f0:ed:80:46:6f:19:d0:10:58:
7b:85:4f:76:8c:0a:2e:71:1c:cc:95:f1:1f:51:c8:41:3d:c2:
4d:29:67:fb:41:59:84:7c:26:e3:d8:58:11:b8:68:90:5f:a6:
26:7d:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:01 2024 by rpki-client on console-ams.rpki-client.org