Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/FXFPSoBTOz2wF7938S5cvoz0yuA.roa
File: FXFPSoBTOz2wF7938S5cvoz0yuA.roa (raw, json)
Hash identifier: 9+MVinga/z2smBQk/Brz/3tnHpCab4y2JRzEkQ6OtrU=
Subject key identifier: 15:71:4F:4A:80:53:3B:3D:B0:17:BF:77:F1:2E:5C:BE:8C:F4:CA:E0
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 0183229DFE9544EE7D9DB64BC1CD10C3AA38
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/FXFPSoBTOz2wF7938S5cvoz0yuA.roa
Signing time: Fri 09 Sep 2022 14:18:43 +0000
ROA not before: Fri 09 Sep 2022 14:18:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62429
IP address blocks: 185.18.90.0/24 maxlen: 24
80.87.144.0/20 maxlen: 20
185.35.116.0/22 maxlen: 22
91.195.16.0/23 maxlen: 23
91.197.160.0/22 maxlen: 22
2a00:db20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:9d:fe:95:44:ee:7d:9d:b6:4b:c1:cd:10:c3:aa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Sep 9 14:18:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15714f4a80533b3db017bf77f12e5cbe8cf4cae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:3a:b5:85:9b:3a:2b:08:9b:85:0f:20:c2:
75:f8:e4:2f:17:d8:f5:a7:55:36:39:26:8d:1a:4f:
10:64:53:79:9e:cb:8f:4c:87:5c:89:8f:7a:39:4c:
e6:08:64:82:94:f3:dc:65:f6:1f:dd:63:af:dc:bb:
65:cd:b8:9c:d7:b2:32:bd:5f:73:3a:99:65:51:99:
86:b1:d5:01:83:e4:8d:57:46:9e:e6:9c:b3:c8:ef:
b1:f3:e2:ab:b2:33:f8:d8:65:23:1d:20:f0:58:d4:
50:f5:18:2f:2d:f1:22:fb:7f:9c:0c:89:10:89:a7:
73:a4:0d:e5:0f:f5:d5:b5:99:f1:b0:34:aa:80:36:
a7:ea:57:ff:9e:1e:ff:f9:70:90:b1:ab:4c:75:7f:
24:4b:9a:85:53:a3:c9:45:3e:f2:9d:0e:6a:22:06:
8a:3c:66:92:df:99:7c:27:d6:7a:f6:87:90:bd:f7:
04:1d:95:3f:c7:fa:6b:38:d3:ab:72:93:2e:f2:91:
74:38:bb:78:a8:1f:fa:97:ca:d6:8d:93:9f:70:2b:
60:23:5c:28:52:f7:7e:33:18:8c:b8:f1:3d:d8:99:
2d:6c:00:71:fa:26:c4:37:08:72:eb:6b:10:92:28:
a8:ce:8e:01:17:9e:a4:87:06:1c:ec:96:a1:32:b9:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:4F:4A:80:53:3B:3D:B0:17:BF:77:F1:2E:5C:BE:8C:F4:CA:E0
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/FXFPSoBTOz2wF7938S5cvoz0yuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.144.0/20
91.195.16.0/23
91.197.160.0/22
185.18.90.0/24
185.35.116.0/22
IPv6:
2a00:db20::/32
Signature Algorithm: sha256WithRSAEncryption
40:62:c7:ea:74:9b:b3:e1:3e:59:85:12:c4:4d:c8:32:7a:0d:
e8:97:c7:42:20:60:fd:de:d2:f1:ce:95:6a:a0:51:32:06:8b:
eb:c7:f1:ef:d5:ea:01:cc:9a:82:58:ad:d2:3c:35:0b:1b:4b:
2c:2a:d6:f0:77:a3:c7:b4:18:60:1d:f7:1a:30:8d:48:3e:47:
cd:93:bf:5e:28:89:eb:92:d6:31:59:75:ad:4e:d4:84:ca:bd:
83:42:13:24:0f:3b:a6:ce:52:c8:09:b5:55:82:7e:a0:6e:23:
f5:56:34:6d:8a:ff:dd:aa:c3:37:fa:79:fb:e9:29:86:e1:e6:
a0:43:fa:5e:9f:e0:13:91:59:87:09:e0:41:8b:32:b1:ad:4d:
ec:d5:80:8f:21:4e:be:f9:c1:66:14:47:8a:82:71:ba:19:6d:
89:9f:92:66:51:a9:54:3d:a3:3e:ef:02:33:4e:05:49:d9:4a:
72:e7:be:5d:d1:d8:1a:62:f6:8c:a5:46:14:1b:fb:d0:86:3c:
f2:bf:af:cd:0d:7c:6c:45:8b:70:09:74:72:58:bb:f0:8b:50:
71:88:54:41:3c:33:30:85:e0:c4:61:08:81:5e:d9:a3:db:53:
fd:00:6f:f0:ce:f7:ab:37:41:79:88:00:42:fa:10:c3:02:29:
d9:c3:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:53 2024 by rpki-client on console-ams.rpki-client.org