Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/FWA-I1HJTJyR7zdsZyLkbm37YFI.roa
File: FWA-I1HJTJyR7zdsZyLkbm37YFI.roa (raw, json)
Hash identifier: zU4069f5fV3BROpTASedUNKH6NpKYJx4nDkxxgXgbmc=
Subject key identifier: 15:60:3E:23:51:C9:4C:9C:91:EF:37:6C:67:22:E4:6E:6D:FB:60:52
Certificate issuer: /CN=1ed9bcc69ab6cf4cc61a4f4470120bcdbf355951
Certificate serial: 01023EB5
Authority key identifier: 1E:D9:BC:C6:9A:B6:CF:4C:C6:1A:4F:44:70:12:0B:CD:BF:35:59:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Htm8xpq2z0zGGk9EcBILzb81WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/FWA-I1HJTJyR7zdsZyLkbm37YFI.roa
Signing time: Mon 07 Mar 2022 17:31:15 +0000
ROA not before: Mon 07 Mar 2022 17:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16924341 (0x1023eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed9bcc69ab6cf4cc61a4f4470120bcdbf355951
Validity
Not Before: Mar 7 17:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15603e2351c94c9c91ef376c6722e46e6dfb6052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:e0:19:b7:18:8d:72:7a:7f:ab:02:d5:c0:
d0:60:ae:57:6d:7d:e6:80:45:72:75:46:d5:4a:be:
bb:a8:6e:2e:59:0c:f5:e9:1c:fc:af:dd:ad:73:bf:
25:2a:bc:b8:0d:62:3c:f4:cb:68:66:38:0c:c0:1e:
8e:12:7c:77:21:63:30:cd:68:79:e3:98:32:bf:6b:
42:3c:49:66:b2:20:73:36:b7:75:cb:a1:55:10:f0:
11:b1:3a:93:77:6e:70:77:08:e6:b4:98:56:ef:4b:
14:43:bc:27:4c:04:e3:3a:42:35:35:d3:66:5c:d0:
34:72:c7:da:47:be:d5:8c:7a:56:b4:61:b5:25:93:
ca:a1:36:41:0c:28:b3:65:fa:20:11:74:cd:49:61:
e6:77:5f:63:aa:a0:95:d7:77:1e:e6:46:e1:65:2f:
f5:8b:23:91:ca:7c:eb:7e:2e:e7:0d:01:12:f0:78:
cb:b1:23:15:61:1a:9e:2c:83:2e:fb:8f:e1:fb:dc:
41:a9:6f:69:b7:09:c3:f3:9f:a0:34:c9:0b:10:f4:
18:d9:6b:28:43:b4:2e:b3:0f:a4:84:9c:23:6d:fe:
56:fc:81:b4:0a:71:b2:db:fa:e4:3b:24:3c:6f:46:
6b:85:2b:4d:5c:cf:49:1c:6f:f1:45:b7:5e:fa:c6:
84:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:3E:23:51:C9:4C:9C:91:EF:37:6C:67:22:E4:6E:6D:FB:60:52
X509v3 Authority Key Identifier:
keyid:1E:D9:BC:C6:9A:B6:CF:4C:C6:1A:4F:44:70:12:0B:CD:BF:35:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Htm8xpq2z0zGGk9EcBILzb81WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/FWA-I1HJTJyR7zdsZyLkbm37YFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/044e45-bd14-4e0c-b4ad-b067b13402e5/1/Htm8xpq2z0zGGk9EcBILzb81WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e4:37:3d:74:6a:58:ed:71:1f:db:2b:32:5c:3e:92:fc:da:
17:eb:4c:cd:e4:1b:98:fb:81:e0:f7:f8:28:dc:a2:7d:a8:81:
88:d0:07:24:ed:2a:f0:7d:bd:b2:11:35:21:48:3e:7a:ff:5c:
fd:d5:c5:ae:22:5f:6c:d5:b3:27:8f:b5:69:3e:6a:9f:02:3d:
b5:7a:2e:a4:11:3e:2f:6c:c8:f7:b1:30:17:fd:b3:37:9a:e2:
08:da:a4:5e:6f:c7:96:35:3e:93:d0:7e:ba:77:9d:d5:52:69:
4f:06:29:f1:d5:fc:0c:ce:99:a6:4b:df:05:b8:65:2f:f6:6d:
46:13:26:3d:da:3a:d7:10:7e:97:51:ad:0d:0f:17:75:b3:65:
f8:25:c8:9d:af:60:f3:17:68:ca:8a:04:8a:bc:5b:a7:4c:d4:
a5:31:06:00:f2:02:aa:d8:5f:bb:03:a3:52:b7:25:e3:79:d3:
f6:ef:67:d9:22:c9:8d:70:e4:ed:6b:24:58:77:5d:24:68:a1:
7b:71:12:01:6c:75:7a:45:c7:1b:31:bf:57:73:5e:77:96:64:
4c:3f:11:ab:c4:0c:a4:e4:f3:20:a9:e9:46:54:bf:de:5e:40:
99:d2:bf:4c:26:de:21:5e:e8:26:90:62:58:2a:14:d1:35:c1:
fc:5a:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:23 2023 by rpki-client on console-fra.rpki-client.org