Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/FUKJFtBJSpKSYPAwnaQyoMXsBrY.roa
File: FUKJFtBJSpKSYPAwnaQyoMXsBrY.roa (raw, json)
Hash identifier: g1lEmwQ09mNWIro4a7YFK2eVzvF0SE0MVuyPxWOUTl4=
Subject key identifier: 15:42:89:16:D0:49:4A:92:92:60:F0:30:9D:A4:32:A0:C5:EC:06:B6
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 07AC086C
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/FUKJFtBJSpKSYPAwnaQyoMXsBrY.roa
Signing time: Sat 01 Jan 2022 14:02:45 +0000
ROA not before: Sat 01 Jan 2022 14:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31244
IP address blocks: 45.129.64.0/23 maxlen: 23
45.129.66.0/23 maxlen: 23
194.117.236.0/23 maxlen: 23
193.25.112.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128714860 (0x7ac086c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jan 1 14:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15428916d0494a929260f0309da432a0c5ec06b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9b:e2:99:ac:d4:29:69:c5:f5:f0:5b:06:b6:
b8:33:e9:0a:6b:67:08:22:f7:06:a5:77:e2:ff:05:
86:8f:ee:da:b4:04:dc:9f:ed:d7:dd:ce:85:e6:8d:
b1:e6:5b:99:31:ff:e8:7f:da:d6:a5:5b:fb:30:6d:
c9:a2:e6:63:db:a5:a0:83:88:f9:45:98:df:67:37:
e3:75:c8:fb:41:c1:80:f9:60:62:8b:a6:e9:10:27:
99:71:bb:b6:e6:4f:24:ea:cc:6d:bb:0d:bd:70:1b:
a3:40:4d:97:e2:fb:1a:98:bd:a5:d8:6f:ff:fd:67:
45:24:49:7d:ee:dc:aa:20:41:ae:61:92:ca:d9:b7:
9b:a9:0c:25:07:62:10:c3:85:c5:f6:13:f4:cb:00:
8a:19:34:18:4b:3e:24:3e:8f:a3:78:d0:4a:f2:65:
42:9b:0d:6d:3c:4d:7e:fc:e1:5a:41:ca:8b:ac:e3:
f2:22:fc:c7:05:38:1b:32:d9:7b:78:60:da:48:d0:
61:00:2f:df:31:43:68:e9:6c:da:57:17:e6:a7:0f:
b0:f5:d1:7a:71:55:b5:df:33:12:9e:2d:5d:83:51:
a0:45:06:32:6f:eb:35:fd:2f:77:e4:6e:35:5e:1c:
b9:7e:d9:0c:57:28:cc:84:95:1d:27:cb:ef:ff:55:
b9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:42:89:16:D0:49:4A:92:92:60:F0:30:9D:A4:32:A0:C5:EC:06:B6
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/FUKJFtBJSpKSYPAwnaQyoMXsBrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.64.0/22
193.25.112.0/23
194.117.236.0/23
Signature Algorithm: sha256WithRSAEncryption
05:fe:9c:84:a9:59:5d:06:70:7c:34:fb:b4:0e:0a:60:5c:a2:
0c:85:09:07:50:5f:06:c7:fc:5d:da:b4:fc:bb:a6:fd:5e:f7:
ac:37:8b:3e:8d:dc:c5:81:80:4a:30:6c:11:80:5b:51:70:72:
25:78:c7:42:1e:de:98:a0:a0:e6:fb:ba:ae:54:d8:dc:82:a3:
1c:83:48:89:d0:b7:57:8d:7f:66:37:30:05:1e:43:b7:ff:97:
8c:cf:1c:5d:65:bf:9f:cb:9b:e9:e3:cd:5c:1e:48:b5:f2:15:
77:b1:dc:af:7e:ef:78:15:54:aa:87:4f:e9:5d:dc:cd:d7:fe:
54:e5:7b:33:13:54:43:c1:66:31:ab:9f:5c:15:95:0b:70:90:
92:86:3e:85:f2:cc:87:b4:4c:f5:51:d7:3b:4e:f4:ee:9f:b6:
74:a0:73:67:1e:0a:55:98:88:40:a3:db:3a:8e:7e:e1:32:06:
89:99:c5:61:c3:c6:0e:54:7a:25:45:5d:46:6c:6f:6a:61:dc:
74:24:37:83:29:53:41:c7:a7:b0:c9:a5:6d:bb:ec:ad:68:28:
af:6b:8c:fa:36:47:8f:84:a3:21:a4:96:41:9e:f0:9f:ce:1d:
26:1f:c8:61:4a:9d:1c:ff:a1:87:d7:8f:03:08:f1:77:e6:da:
08:8c:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:27 2024 by rpki-client on console-ams.rpki-client.org