Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/Fns-rVlJURRkkzG-L-2gxnV-8eQ.roa
File: Fns-rVlJURRkkzG-L-2gxnV-8eQ.roa (raw, json)
Hash identifier: VFR3vwqxvajQW45p6EAFhZmjHu3eQ6+8iwE5XDhBO2k=
Subject key identifier: 16:7B:3E:AD:59:49:51:14:64:93:31:BE:2F:ED:A0:C6:75:7E:F1:E4
Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Certificate serial: 07B2E665
Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/Fns-rVlJURRkkzG-L-2gxnV-8eQ.roa
Signing time: Sat 01 Jan 2022 11:58:52 +0000
ROA not before: Sat 01 Jan 2022 11:58:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198551
IP address blocks: 130.93.184.0/22 maxlen: 22
130.93.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129164901 (0x7b2e665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208
Validity
Not Before: Jan 1 11:58:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=167b3ead59495114649331be2feda0c6757ef1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d4:73:ed:fa:2e:b0:18:b6:16:20:70:2c:16:
5a:d1:b7:87:a6:a4:39:7c:1a:75:b2:4e:05:d4:ef:
33:4d:c9:7c:3b:a6:57:dd:64:ec:10:94:b7:ce:81:
0c:e7:28:08:86:bb:e6:bd:3b:72:c7:b3:14:d1:a2:
0e:42:bf:e9:4a:de:f9:a2:59:4f:1f:fc:d0:79:48:
2f:2d:8d:2a:c4:20:81:59:d1:f2:a4:73:a7:7c:a4:
85:be:66:32:40:9e:55:56:a3:95:c1:54:24:a4:6c:
1d:96:f3:b3:dc:92:2e:62:05:74:30:70:11:65:2f:
14:dd:71:9f:fa:40:a8:83:89:11:64:a5:3e:cc:ea:
46:05:c0:0e:05:14:54:28:b2:7f:2e:58:e0:a6:0a:
81:55:0a:5c:94:a7:1c:ef:d7:82:37:9b:23:6b:3d:
d7:ba:60:fe:e1:71:e9:ea:77:6e:51:da:6a:30:85:
f5:0d:20:4b:36:f9:b6:12:81:50:de:89:eb:32:3f:
9c:98:11:db:89:0d:3c:8b:1c:ab:16:cd:19:ad:2b:
28:3d:8f:af:32:c1:34:31:f2:a3:87:27:ab:32:eb:
f8:0b:70:24:f4:3f:a5:9e:80:9f:cd:5d:86:e6:31:
cb:13:70:fa:f2:29:07:e1:72:31:de:f9:5b:98:d7:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:3E:AD:59:49:51:14:64:93:31:BE:2F:ED:A0:C6:75:7E:F1:E4
X509v3 Authority Key Identifier:
keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/Fns-rVlJURRkkzG-L-2gxnV-8eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.93.184.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:57:b0:59:8a:62:76:ee:df:9f:a8:51:6c:24:da:1a:41:59:
b0:16:2e:07:30:78:af:0e:86:da:de:9c:40:4a:77:9f:b8:4d:
06:94:2c:f1:3c:f5:6f:4b:06:37:3c:c1:3c:a9:b0:e6:21:6c:
7a:75:cf:28:62:ca:a0:4b:7d:c6:ed:4d:24:79:fd:4a:b9:5e:
16:4b:5b:33:32:27:93:91:b0:0e:2a:cc:04:46:16:d3:92:98:
ad:52:c2:5a:84:5f:e1:52:90:1f:5f:1a:e4:2c:56:ad:d1:29:
e1:d3:0e:f8:ed:5e:57:10:21:08:f4:55:cb:12:f4:97:06:31:
33:0e:3c:77:42:8d:33:5c:bf:9a:83:cf:78:c6:6d:1b:a7:7d:
46:be:5b:18:a2:da:83:2a:19:8a:3a:6f:eb:92:0d:6c:36:70:
3f:1d:49:61:c3:17:98:2f:69:ee:ec:47:e5:d5:48:cd:89:b6:
01:84:e4:81:99:18:d1:b7:a7:f4:c4:70:f6:76:a9:45:70:ac:
c7:47:ff:90:8e:f9:e1:2f:58:95:d0:58:86:96:58:15:85:ff:
7a:98:34:c5:05:a8:ec:a2:42:a8:36:ff:cd:de:94:28:52:d0:
cf:c3:e6:b1:ad:30:ea:cc:42:e8:7a:66:e1:9c:f3:15:e8:ef:
ea:ce:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org