Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/FanpKy9Fv0-_XI5gJM-ZRbxDrXU.roa
File: FanpKy9Fv0-_XI5gJM-ZRbxDrXU.roa (raw, json)
Hash identifier: cuIGO9LGB/sJ6YfmglhPEgWWwUarprpKD+NuX8NOj+I=
Subject key identifier: 15:A9:E9:2B:2F:45:BF:4F:BF:5C:8E:60:24:CF:99:45:BC:43:AD:75
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 01AC3269
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/FanpKy9Fv0-_XI5gJM-ZRbxDrXU.roa
Signing time: Sat 01 Jan 2022 07:59:27 +0000
ROA not before: Sat 01 Jan 2022 07:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8399
IP address blocks: 87.247.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28062313 (0x1ac3269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Jan 1 07:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15a9e92b2f45bf4fbf5c8e6024cf9945bc43ad75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:9b:92:33:e5:d2:ad:31:a7:2f:55:01:ba:
69:9a:f6:86:86:c8:ab:af:7c:97:55:89:8d:92:af:
94:f3:40:ff:a6:cb:f3:97:9c:82:27:6b:c5:dc:cd:
5b:df:40:2c:fd:92:18:92:ea:7f:5b:1c:de:25:09:
6c:bb:0a:8e:77:79:cc:2f:1b:71:d6:25:dc:a3:63:
5c:79:36:3b:d8:1a:a5:b3:e9:18:3f:76:78:4e:29:
ea:8f:c6:b8:37:bc:b8:28:34:20:e2:23:37:46:6e:
72:d5:fe:db:98:33:52:d4:a6:77:ce:76:28:88:00:
0c:cb:c5:ca:1c:20:e3:3d:d6:3e:bf:90:9f:92:c4:
36:29:c5:05:a0:f4:1e:34:cc:9a:08:06:ff:21:4c:
30:ec:d1:b9:ff:ef:aa:41:ed:80:75:18:58:f7:5b:
e9:b3:eb:80:24:fd:c0:4a:cd:73:45:45:eb:64:f2:
23:df:93:f6:96:cb:31:2f:4a:b5:16:40:c6:41:1a:
fe:3c:11:a4:98:a8:14:4e:0d:fe:2d:b9:eb:4d:97:
7f:65:67:42:2e:08:94:6b:5e:a9:3a:2f:cb:bd:43:
a0:fc:8a:72:56:64:19:b5:f5:cc:0f:b5:8a:54:12:
84:89:7b:76:b5:81:e6:27:aa:b6:aa:b8:26:97:79:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:E9:2B:2F:45:BF:4F:BF:5C:8E:60:24:CF:99:45:BC:43:AD:75
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/FanpKy9Fv0-_XI5gJM-ZRbxDrXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.224.0/24
Signature Algorithm: sha256WithRSAEncryption
57:54:ff:c7:a3:54:a9:47:86:d8:5e:67:fd:83:84:67:bf:13:
db:4a:62:05:2d:bc:a2:88:78:b7:f8:b8:c5:fd:fb:ab:85:10:
fc:2e:a7:75:18:b6:1d:c1:64:de:b1:25:50:4a:c0:c0:c7:e6:
16:26:88:22:41:c7:3b:06:3f:6e:44:17:82:92:a1:2b:12:48:
dc:8d:94:d6:f4:c2:1f:a6:56:2a:ed:01:f0:b2:45:86:10:bf:
bc:8f:58:a4:2e:e4:54:02:f0:de:1e:d0:1c:98:9a:0a:15:64:
ff:a3:e8:80:48:fa:47:57:62:2b:d3:f0:16:2c:42:65:6f:bf:
b0:d5:05:9e:68:36:6d:81:b1:23:ef:5b:ba:2d:ae:bb:e7:44:
da:b2:21:c8:00:60:be:9d:48:bb:37:27:32:4b:12:46:3c:e7:
4a:10:5a:29:24:8a:84:de:3b:d3:ea:6e:93:35:2e:9b:39:f2:
ce:37:e1:11:47:ae:73:3f:e3:d6:3e:ab:f5:fe:a5:a3:e5:c6:
c2:57:88:65:36:2c:59:2f:6f:29:5e:cd:36:be:1b:30:a8:1c:
3a:0e:dc:96:ab:c2:14:36:f7:ae:9f:9e:67:38:2c:ca:da:13:
d6:09:d4:21:86:6c:69:ad:22:e1:18:1c:36:3c:92:49:43:01:
c5:43:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-fra.rpki-client.org