Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/FOCPMajgUXUjkSnAI_vh44eo0TA.roa
File: FOCPMajgUXUjkSnAI_vh44eo0TA.roa (raw, json)
Hash identifier: PXROaG9gxXyLhDgR+gu4/ibUuT93+uU2S7RDZ2Grt5Y=
Subject key identifier: 14:E0:8F:31:A8:E0:51:75:23:91:29:C0:23:FB:E1:E3:87:A8:D1:30
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 01823EE1D2A1EAE349D3780D1917232EFDD7
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/FOCPMajgUXUjkSnAI_vh44eo0TA.roa
Signing time: Wed 27 Jul 2022 08:59:23 +0000
ROA not before: Wed 27 Jul 2022 08:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15623
IP address blocks: 185.241.85.0/24 maxlen: 24
185.241.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3e:e1:d2:a1:ea:e3:49:d3:78:0d:19:17:23:2e:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Jul 27 08:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14e08f31a8e05175239129c023fbe1e387a8d130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:2f:e0:4a:12:57:cb:2e:eb:f1:0b:6c:ba:
de:75:3b:83:69:95:03:5f:04:f8:bd:61:8c:90:db:
90:c8:6e:f3:db:4c:47:7f:dd:90:ff:10:45:75:cc:
d1:9b:b3:d4:0e:e6:31:48:8b:55:7b:c5:99:9e:7f:
d7:59:bc:48:ee:6f:ea:e1:2d:63:7d:92:63:ce:25:
13:69:5d:2f:95:6b:ae:6c:ea:fc:e3:ee:d7:a3:68:
76:9e:af:88:41:97:b8:9d:0b:16:d1:3f:76:64:80:
d3:2f:ed:3d:8d:5f:ab:06:27:8c:15:c9:a4:98:5d:
9f:56:04:27:19:f0:fd:8c:1f:c7:04:43:e9:31:0d:
95:66:f2:f8:1b:04:ef:6a:14:a5:4a:f3:04:6e:7e:
a6:a7:36:9b:d6:84:e3:3b:dc:41:fd:44:58:d2:aa:
d0:6e:c2:f2:6a:11:aa:36:61:e3:f8:09:5c:b0:26:
7b:81:e8:22:51:8a:60:a3:1f:2f:a9:2b:2c:a6:33:
25:25:c1:c0:c0:62:cb:89:37:13:81:7b:0d:71:c4:
27:20:ec:df:de:76:62:5d:e5:35:ea:f8:56:b7:68:
c0:0f:56:a7:fe:22:8d:60:b2:99:34:11:47:27:7a:
05:ea:9a:86:8e:62:f3:a8:02:dc:5c:83:d5:74:10:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E0:8F:31:A8:E0:51:75:23:91:29:C0:23:FB:E1:E3:87:A8:D1:30
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/FOCPMajgUXUjkSnAI_vh44eo0TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.84.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:6f:47:68:d5:5f:5c:4c:97:60:a7:9b:1c:eb:cf:1a:51:45:
f3:f1:98:38:31:28:82:57:45:04:fc:6d:14:bd:b0:71:f6:1d:
0e:52:7e:78:ee:e6:59:f7:bc:c1:bd:75:03:03:18:d9:f4:00:
21:24:bc:03:55:37:9d:4c:6c:7b:b3:31:6d:91:a8:70:a8:f5:
6b:6c:6f:39:c0:cc:ce:62:9f:65:19:4b:02:c7:47:e0:4f:6c:
39:bd:22:e9:43:05:69:ec:c4:8c:fa:18:ea:b3:4a:d0:86:b4:
7e:38:76:da:51:4d:50:50:19:24:83:12:9e:4c:cc:85:0d:29:
38:6f:36:84:f2:4d:2c:27:67:e8:49:de:42:17:7c:50:93:8d:
1e:81:73:3e:cb:59:7d:b6:ba:cb:79:d9:d3:fb:86:f2:4e:06:
5a:e0:54:07:a2:2e:96:12:c9:dd:44:bb:25:a8:78:fa:df:f0:
b7:68:1d:97:c8:95:eb:75:ab:8e:ba:12:21:71:c9:90:f7:28:
30:ee:1d:41:81:44:77:5a:1c:68:4a:5a:44:b6:93:27:c6:91:
09:65:d1:56:cc:2d:0a:4a:2a:dd:c1:c6:42:7a:02:a2:77:65:
fe:12:bf:10:3f:53:16:f0:30:d9:5e:1a:37:9d:15:7d:fc:58:
2e:1b:c8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org