Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/FCGF-r_V6OeAalIfHM2ZhWLY0m8.roa
File: FCGF-r_V6OeAalIfHM2ZhWLY0m8.roa (raw, json)
Hash identifier: VEZjA7kyPgn94+9Oh0N1RQNOVFQ8bzDW6NnmcL1V0/c=
Subject key identifier: 14:21:85:FA:BF:D5:E8:E7:80:6A:52:1F:1C:CD:99:85:62:D8:D2:6F
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0182E9EC7C7137B37B574407B84F91EB81FA
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/FCGF-r_V6OeAalIfHM2ZhWLY0m8.roa
Signing time: Mon 29 Aug 2022 14:06:05 +0000
ROA not before: Mon 29 Aug 2022 14:06:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50463
IP address blocks: 5.144.55.0/24 maxlen: 24
5.144.57.0/24 maxlen: 24
5.144.61.0/24 maxlen: 24
5.144.48.0/24 maxlen: 24
5.144.48.0/20 maxlen: 20
5.144.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:ec:7c:71:37:b3:7b:57:44:07:b8:4f:91:eb:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Aug 29 14:06:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=142185fabfd5e8e7806a521f1ccd998562d8d26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b4:ba:86:37:e5:d2:13:ee:88:ba:8d:c5:16:
db:4b:2b:0e:62:42:a7:28:64:da:c1:0f:78:f2:f9:
1b:61:d8:d9:4d:ec:a7:dc:08:98:45:1a:80:fc:99:
27:9b:63:fa:e8:10:61:55:18:c5:dc:a7:32:ef:43:
0b:b0:47:d7:38:70:82:1d:38:f8:87:bf:fb:0c:30:
ce:13:18:b7:da:cb:1b:b7:9a:c1:c1:fe:63:3d:e5:
7b:45:4b:49:f0:ac:4b:57:cd:7d:21:3d:06:ee:0d:
ce:37:35:ba:2f:a1:99:fc:63:af:98:68:4d:99:b2:
4b:3d:2f:d5:28:cf:cd:8b:c7:d6:90:7d:17:f0:1c:
80:fe:f0:13:31:17:3f:4c:a3:09:9b:90:fb:7d:e2:
e1:e2:56:e5:7c:a2:5e:00:f5:cf:09:c5:20:34:d5:
bd:ad:16:20:53:d3:96:30:7a:29:04:ae:b6:80:88:
ac:80:0b:1a:37:e8:63:7d:c9:b4:d4:6b:c8:d2:20:
94:14:eb:28:0a:ff:5f:e5:d4:01:59:b1:a6:35:58:
70:6b:7c:37:e7:c6:13:8d:d3:3e:3f:bf:6f:8c:97:
d1:d5:cd:91:0c:a2:14:0b:ab:e8:a4:4f:ae:30:79:
32:53:61:49:90:1a:e7:7d:d0:5d:02:e6:ee:70:40:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:21:85:FA:BF:D5:E8:E7:80:6A:52:1F:1C:CD:99:85:62:D8:D2:6F
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/FCGF-r_V6OeAalIfHM2ZhWLY0m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.48.0/20
Signature Algorithm: sha256WithRSAEncryption
28:20:76:f4:4a:4f:30:d7:47:99:b5:47:a2:44:b8:4f:ae:37:
66:01:8c:0d:7f:57:6d:63:c1:d9:94:63:74:86:b9:20:02:d2:
c7:22:d3:92:67:d4:f9:86:73:81:cf:e5:9d:e5:61:27:f0:41:
55:79:23:93:82:9a:f8:99:40:95:9e:de:06:ec:1d:28:76:c7:
3b:54:17:64:e9:ec:c7:84:20:b4:d7:3f:d2:77:97:eb:ca:09:
fe:53:4b:28:f9:30:92:68:37:bd:ac:ba:4e:35:de:21:82:ae:
0a:09:b6:ed:4c:06:d7:d4:0f:a9:6a:8e:87:18:a6:59:12:54:
55:52:01:67:27:92:da:89:1d:1f:f7:f4:d4:c4:d1:86:a1:01:
94:02:68:d6:49:f9:bf:a9:4f:1f:60:7d:df:55:3e:90:ed:d2:
4d:b7:e2:b3:fb:c1:00:96:03:1b:fa:b6:67:d5:ff:76:8f:23:
be:b8:4f:55:1a:ff:1c:a6:da:b2:e6:72:c2:d1:28:f1:c3:f4:
bf:2b:c4:37:1b:bb:6e:b7:de:99:55:5f:ac:ff:9e:29:4d:43:
bc:bb:60:15:ac:ae:1e:fd:cc:a0:eb:dd:f5:27:c8:55:38:1e:
1c:f0:9a:20:ef:3f:bd:87:ac:55:c0:29:12:5d:a7:b2:06:18:
ec:98:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org