Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/F3kBh_sl-uWFMot352ObOSfz3NQ.roa
File: F3kBh_sl-uWFMot352ObOSfz3NQ.roa (raw, json)
Hash identifier: B4EGJuQjLX0Ft6ass+NhQJrp4GOOI1GxCjwShinRFqI=
Subject key identifier: 17:79:01:87:FB:25:FA:E5:85:32:8B:77:E7:63:9B:39:27:F3:DC:D4
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 02FC50B3
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/F3kBh_sl-uWFMot352ObOSfz3NQ.roa
Signing time: Tue 05 Apr 2022 14:06:02 +0000
ROA not before: Tue 05 Apr 2022 14:06:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210166
IP address blocks: 194.61.33.0/24 maxlen: 24
194.61.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50090163 (0x2fc50b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Apr 5 14:06:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17790187fb25fae585328b77e7639b3927f3dcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:bc:02:17:99:98:b6:b7:ac:93:5a:e1:37:
ac:57:ed:a0:9a:99:62:be:71:23:44:65:64:09:0b:
ac:06:aa:2f:7d:92:8c:18:33:7a:b6:f5:bd:e7:ca:
75:fc:88:fe:12:be:e0:1d:59:e6:9a:57:c6:11:8b:
84:ba:03:26:a8:50:1d:1a:39:ce:e5:01:d0:e6:c3:
d0:63:80:14:54:1a:f0:05:0e:18:9a:47:08:42:2a:
da:89:40:a5:d5:65:ff:3f:e6:0d:61:2a:b2:63:2f:
96:0f:8d:c5:79:9c:c9:d8:2f:89:df:9d:82:1b:57:
51:80:40:b3:c6:b1:bd:8e:21:04:15:e6:a7:4e:a6:
b0:1b:77:7c:89:12:28:35:52:62:4b:93:15:fd:16:
d7:53:9e:f7:ec:82:f8:8c:dc:e8:ea:7f:8a:e6:62:
8f:5e:61:76:fe:0e:8a:fd:98:1d:b4:6b:72:18:de:
b7:5d:33:3e:59:f6:23:c9:3e:64:b6:a4:a8:93:f0:
38:23:83:90:6c:2f:49:1a:3a:e0:18:e6:cc:5e:fc:
b1:23:e3:12:35:4b:d7:8e:72:5e:de:aa:43:e3:e9:
0a:d6:f6:1e:20:37:41:6b:e3:3f:be:9a:2d:f5:b3:
81:5f:c7:12:58:51:7b:78:e2:c7:61:91:55:84:e4:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:01:87:FB:25:FA:E5:85:32:8B:77:E7:63:9B:39:27:F3:DC:D4
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/F3kBh_sl-uWFMot352ObOSfz3NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.32.0/23
Signature Algorithm: sha256WithRSAEncryption
30:4b:1a:e6:cd:85:41:28:26:24:c9:59:7f:af:a0:2b:39:a0:
e4:9c:b0:af:e8:74:20:9c:92:24:03:95:ba:23:0d:99:06:e6:
78:fc:52:dd:17:84:e9:fe:4b:0b:24:4e:67:0b:1c:1d:90:43:
5b:2d:e7:69:55:d3:eb:35:4d:ea:3a:e9:a2:ef:5d:85:49:bb:
7d:41:5f:f9:c5:f5:a1:25:a8:f0:90:d8:ce:e4:7b:39:70:98:
54:3a:81:7d:5e:ff:12:2a:e3:78:7a:79:0c:c7:4e:39:76:ef:
8d:a5:77:4b:0d:a0:b6:03:f9:02:e1:5c:b6:17:df:b5:cd:e9:
b0:fc:58:30:d8:15:62:db:ce:3a:56:95:3f:cd:41:d7:7c:2a:
8c:3b:da:27:ac:56:35:ec:8c:de:97:1d:48:ee:2d:1e:21:95:
96:43:ed:4b:ef:f4:17:78:d2:89:6b:2e:37:20:7d:11:01:f2:
f6:1e:dd:47:80:d0:28:6a:08:7f:b6:99:be:ac:9d:06:0c:56:
d8:54:e8:5b:79:52:52:23:87:73:ac:45:49:57:9e:37:c3:c8:
28:62:76:e7:db:f8:39:ca:83:cf:68:6d:c5:72:7d:57:86:89:
13:a2:a8:c3:e8:1e:e9:db:b1:ed:dc:5c:84:df:6f:bf:00:eb:
f1:b4:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:00 2023 by rpki-client on console-fra.rpki-client.org