Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/kFsnncEH29_P_wu0_5PWa110Y3Y.roa
File: kFsnncEH29_P_wu0_5PWa110Y3Y.roa (raw, json)
Hash identifier: OWPGTOUqEi2E6UdpLcwUE5WQEd01XYswLRAT42GC9xk=
Subject key identifier: 90:5B:27:9D:C1:07:DB:DF:CF:FF:0B:B4:FF:93:D6:6B:5D:74:63:76
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 05535697
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/kFsnncEH29_P_wu0_5PWa110Y3Y.roa
Signing time: Sat 01 Jan 2022 09:02:35 +0000
ROA not before: Sat 01 Jan 2022 09:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 158.162.192.0/18 maxlen: 18
158.162.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89347735 (0x5535697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Jan 1 09:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=905b279dc107dbdfcfff0bb4ff93d66b5d746376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:a8:50:2c:a2:38:fe:b2:8f:94:f7:54:fc:
5b:e4:ef:65:ed:09:a4:a6:1b:d9:b5:2b:f7:c0:cc:
67:e2:d6:e2:48:19:a1:1d:65:85:cf:51:f2:23:59:
86:ea:fe:ba:79:b6:bd:5b:1b:48:11:60:1e:f0:29:
fc:39:be:63:4c:1b:91:3f:8a:1f:53:da:46:bd:b8:
78:58:ab:18:91:6c:44:0f:69:ab:8d:44:03:c3:59:
40:34:aa:02:4c:f2:91:90:b4:8a:86:7d:0d:3d:26:
7c:4b:e2:71:15:ff:32:cd:06:68:d9:5b:36:84:af:
d6:36:10:c3:be:89:71:63:32:91:c0:5f:70:2e:38:
2a:ab:53:b5:21:4b:46:bf:07:6b:1d:b8:4a:45:1f:
fc:24:0c:ec:90:b5:2a:96:b3:88:d8:06:22:39:36:
79:fe:b7:ab:4f:10:10:2c:14:bb:b2:9a:d3:55:85:
df:80:5e:32:9b:50:2a:28:c7:e0:9c:5c:f1:42:b0:
c4:4e:36:fc:a1:70:37:04:fb:21:dc:98:9f:30:28:
35:ab:61:ad:2d:61:c2:27:c0:de:4d:0b:ce:2d:b4:
d8:51:5e:8f:9a:ec:67:3c:d5:a7:4e:cc:e4:ff:82:
13:38:32:09:08:b5:0c:cf:b1:47:3e:7e:75:2d:6b:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:27:9D:C1:07:DB:DF:CF:FF:0B:B4:FF:93:D6:6B:5D:74:63:76
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/kFsnncEH29_P_wu0_5PWa110Y3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.162.32.0/19
158.162.192.0/18
Signature Algorithm: sha256WithRSAEncryption
13:ab:a3:5b:0a:81:09:4f:a0:f0:37:39:37:93:b7:da:0e:e4:
06:2a:fc:53:3f:0c:d9:8f:ab:23:a1:17:4f:17:2a:21:d5:8f:
b0:c0:e2:cc:20:0e:18:de:c2:34:5d:68:95:b5:0c:45:b2:1b:
cf:21:ea:c6:17:4f:33:bb:b4:86:1e:42:cb:74:70:0e:40:c3:
4e:c5:fa:80:50:7a:4f:bc:4d:1d:f0:b9:63:8d:e1:86:d9:98:
3b:15:5b:cd:b1:24:ad:13:46:01:a0:d0:8a:be:ad:bf:1a:e4:
aa:17:be:05:65:1d:28:1c:1e:81:24:39:a2:bb:4e:5a:e1:10:
f3:06:64:c0:0b:73:43:36:41:f9:7c:d3:be:7f:29:f5:98:54:
c7:74:e1:5f:14:17:32:af:6f:c0:32:0a:69:86:e3:70:fe:4f:
93:56:3a:0a:18:f5:6a:d1:05:03:21:23:ed:cd:36:e6:19:4f:
68:fd:cc:87:37:a4:84:42:4b:dc:ff:92:55:03:1b:7c:62:c9:
c6:c2:7d:31:d2:d8:16:2d:a4:0a:8d:0d:c9:99:3a:aa:02:96:
28:68:8d:eb:d5:22:ec:84:c0:62:48:a2:ba:37:82:c1:f0:21:
84:7a:5b:c6:9c:eb:1b:c6:1e:7f:a7:77:19:bc:40:b6:d6:c9:
33:b4:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:50 2024 by rpki-client on console-fra.rpki-client.org