Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/FVJnSYDcoa0KN5Nw757IOSQIttE.roa
File: FVJnSYDcoa0KN5Nw757IOSQIttE.roa (raw, json)
Hash identifier: 5FWPyztsJHQ6wLPVlp7F92CWqcNnybYMOT+DEYTb0JU=
Subject key identifier: 15:52:67:49:80:DC:A1:AD:0A:37:93:70:EF:9E:C8:39:24:08:B6:D1
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 0184B51A9DD8704E20B781FA69AB8FF71D00
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/FVJnSYDcoa0KN5Nw757IOSQIttE.roa
Signing time: Sat 26 Nov 2022 18:02:11 +0000
ROA not before: Sat 26 Nov 2022 18:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209273
IP address blocks: 212.15.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b5:1a:9d:d8:70:4e:20:b7:81:fa:69:ab:8f:f7:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Nov 26 18:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1552674980dca1ad0a379370ef9ec8392408b6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:23:1b:c7:c3:56:43:9d:5b:fa:01:47:70:
d5:a6:7e:bd:62:0d:20:3e:3a:24:42:ba:e1:f2:2e:
28:4d:e6:ba:5b:bc:ef:61:6c:dc:6a:8e:78:b0:4e:
f7:5f:71:f2:d9:36:a3:0a:e5:5c:ab:86:68:83:26:
22:36:f4:98:7e:ef:ee:d4:5d:9c:4e:81:c2:87:da:
e0:c8:c7:09:c9:52:61:d1:e8:43:60:bc:d1:31:90:
7f:e1:8c:c8:a8:79:41:06:2f:04:c3:74:0f:be:f4:
a2:80:49:73:01:c7:6e:49:9b:38:a8:28:63:3b:2c:
24:c9:6f:53:b3:10:cd:5b:7e:41:fe:13:72:89:0d:
5a:ae:db:de:d2:84:ad:f6:e4:cd:16:c4:1a:aa:fc:
a9:7f:3e:95:33:65:f7:99:a0:15:e1:27:32:de:25:
73:bc:61:4c:f3:02:cc:a5:9c:8e:a6:c6:bf:34:6e:
21:b4:99:94:8f:8c:94:1f:e1:31:31:4a:3b:9c:11:
57:ec:94:0b:07:2a:4b:54:92:fa:32:2c:1a:ad:e6:
8e:65:ac:75:07:c3:0e:69:7f:0c:7a:73:8d:da:19:
20:64:08:34:7b:08:ff:8b:de:91:59:ca:a6:5d:f7:
e2:f4:93:db:5f:ff:1a:e0:22:22:ee:9e:d2:a6:c7:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:67:49:80:DC:A1:AD:0A:37:93:70:EF:9E:C8:39:24:08:B6:D1
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/FVJnSYDcoa0KN5Nw757IOSQIttE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e2:ec:2d:b5:be:ee:33:51:6c:ed:8d:02:24:aa:93:b6:b3:
91:cf:89:28:36:13:63:07:26:a0:13:f9:11:d4:a4:cd:af:c5:
69:da:ae:ad:32:90:e9:aa:a6:2e:c7:3c:94:97:22:08:4d:a9:
35:ad:12:ca:ec:03:1d:ec:19:a8:ae:78:3f:00:74:c8:73:dd:
c5:8f:4d:27:e1:be:27:26:d4:6f:88:92:76:4d:e2:33:64:9b:
40:04:63:71:cc:fa:79:bb:b4:d5:d4:ed:2f:2a:e5:b3:58:b6:
09:1b:99:b6:b3:19:d3:45:f0:13:cb:2d:1e:28:2d:a2:9b:e3:
55:d1:f6:b9:77:4c:a0:a1:01:51:ff:09:2b:15:a7:10:8c:90:
5e:e3:ed:b1:ec:83:8f:04:ef:db:3c:2a:d6:e4:8b:58:00:ed:
43:ff:1c:11:a6:3d:18:de:b2:9d:88:fc:df:08:4c:08:fb:f9:
23:dc:a1:c8:df:63:2b:79:59:be:44:e8:ae:3b:8a:cd:eb:97:
35:e0:6b:6e:df:53:e0:a6:96:0d:12:c8:13:69:64:cc:65:0e:
5b:ed:2f:82:4a:2a:2c:17:19:b7:92:a6:08:8d:72:d1:ef:39:
a8:58:ce:53:b5:1a:82:ca:3e:6d:f4:75:fd:a1:1d:10:dd:e8:
7a:fd:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:57 2024 by rpki-client on console-fra.rpki-client.org