Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/FWi-b7Qgy70LZOeAEXe6setXh0M.roa
File: FWi-b7Qgy70LZOeAEXe6setXh0M.roa (raw, json)
Hash identifier: GCS0cuaso01wBFup20fMKRyGNKvbuiMOSHz9t3Kyv20=
Subject key identifier: 15:68:BE:6F:B4:20:CB:BD:0B:64:E7:80:11:77:BA:B1:EB:57:87:43
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 0716C156
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/FWi-b7Qgy70LZOeAEXe6setXh0M.roa
Signing time: Sat 01 Jan 2022 08:02:02 +0000
ROA not before: Sat 01 Jan 2022 08:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57626
IP address blocks: 37.9.216.0/21 maxlen: 24
37.9.216.0/22 maxlen: 24
45.158.240.0/22 maxlen: 23
37.9.220.0/22 maxlen: 24
2a07:b700::/29 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118931798 (0x716c156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Jan 1 08:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1568be6fb420cbbd0b64e7801177bab1eb578743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3c:43:4d:7c:3b:6a:44:35:0a:f5:85:5a:36:
6f:1c:0d:3d:07:e5:fc:55:86:3d:57:4c:95:54:8a:
f0:fc:b9:ea:6a:fb:34:9c:e3:85:71:05:9f:2b:45:
43:2b:3b:e9:2b:2a:31:7c:28:46:b5:6a:b6:2b:b8:
21:4c:ed:f3:12:96:5f:a0:80:1c:9d:5c:63:99:69:
fe:d7:1c:d7:4f:e8:a6:5e:c2:51:b3:62:be:73:14:
c7:71:70:ed:39:16:d5:b6:c5:51:78:ab:c2:85:c8:
1f:71:86:e1:8d:ef:77:dc:a2:c5:1a:60:70:e3:60:
f7:ef:f4:9b:af:78:6a:ec:50:11:7a:70:16:1f:88:
32:57:e6:33:54:19:f1:80:b5:eb:10:4d:ab:61:49:
55:44:96:73:41:96:53:49:be:da:6b:03:7a:a5:6a:
a8:b4:84:e5:85:06:68:a4:37:65:d9:d4:26:6a:86:
11:32:ca:12:3a:b1:aa:7e:10:9a:c1:98:a4:71:56:
03:d2:9a:3c:59:4b:ef:f6:8b:8d:d4:47:84:de:3f:
d0:d6:c0:7f:8b:d2:4b:f1:55:43:f3:c2:4c:99:ed:
37:84:e1:0b:e3:e0:2e:95:33:84:d0:11:cb:1d:dd:
5d:de:ae:5f:87:55:30:37:ed:dc:5e:01:fa:d2:41:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:68:BE:6F:B4:20:CB:BD:0B:64:E7:80:11:77:BA:B1:EB:57:87:43
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/FWi-b7Qgy70LZOeAEXe6setXh0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.216.0/21
45.158.240.0/22
IPv6:
2a07:b700::/29
Signature Algorithm: sha256WithRSAEncryption
a7:b1:e9:63:c9:c4:cd:4a:b4:78:f1:01:57:bd:e1:8c:b6:bf:
89:da:cf:03:14:6d:36:4b:44:1e:99:21:c5:dd:dd:c3:12:2d:
84:5b:be:24:f0:6e:e2:ad:ab:b2:7d:66:1c:a9:e4:b6:4e:01:
77:a0:32:c0:9f:fd:1b:a1:4c:04:c8:7b:72:11:cd:34:c3:cd:
75:bf:34:db:8b:7f:8a:c2:0b:63:d8:b0:fd:08:b5:a8:d6:f8:
4f:a6:1b:df:22:6d:34:ea:60:a8:c2:c1:86:c1:96:68:cb:ba:
af:6b:9e:a8:da:ae:27:48:47:41:b9:87:cb:c5:44:8c:1e:68:
5f:d1:c9:db:b7:33:1f:bf:a3:fd:da:d7:9d:e2:6d:4e:dc:f0:
8f:a2:de:56:40:cc:aa:23:88:29:35:0a:23:26:da:23:13:73:
d8:22:01:65:ec:e0:07:fb:ff:d7:39:44:30:21:c3:71:62:e1:
64:5d:67:9a:6e:c8:9b:97:11:45:d3:e7:c6:b9:85:b3:79:fb:
ff:11:68:3f:63:a0:34:27:87:aa:23:e4:c2:c6:d5:82:96:6a:
07:7f:c3:4a:d3:99:a3:7a:7d:16:27:3d:ab:3c:d5:19:31:76:
97:2b:3c:88:48:ea:6f:1e:51:ff:af:79:90:47:dc:af:14:1f:
b8:c9:f8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:03 2024 by rpki-client on console-fra.rpki-client.org