Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FCZ5xaickQMX8Pxd-7QIef2xd6c.roa
File: FCZ5xaickQMX8Pxd-7QIef2xd6c.roa (raw, json)
Hash identifier: MGvfl+w9CZTuZzQi/YaiyV0B/mhBmsw86Nu9JGjPWO8=
Subject key identifier: 14:26:79:C5:A8:9C:91:03:17:F0:FC:5D:FB:B4:08:79:FD:B1:77:A7
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 16D0464A
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FCZ5xaickQMX8Pxd-7QIef2xd6c.roa
Signing time: Sat 01 Jan 2022 02:51:23 +0000
ROA not before: Sat 01 Jan 2022 02:51:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202689
IP address blocks: 82.179.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382748234 (0x16d0464a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 02:51:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=142679c5a89c910317f0fc5dfbb40879fdb177a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e4:83:d2:b8:3c:d1:47:80:4d:2e:bd:78:83:
98:53:5d:a4:b3:a8:2c:15:09:a4:83:2a:b8:62:f9:
86:49:4c:59:64:5c:fc:8f:f7:13:ec:04:b4:8d:df:
2a:19:c1:5e:9e:eb:ff:fa:99:a8:b9:76:f4:32:9c:
46:ec:2b:c3:f5:6e:62:f0:e0:d5:fb:c0:00:e0:52:
c2:30:57:91:20:97:0a:81:30:18:dd:66:05:db:25:
7e:53:a8:51:fe:4a:0c:64:e8:08:71:29:1a:cb:29:
5b:38:30:af:88:db:d2:f1:8f:ca:59:81:76:a3:2f:
f6:2e:4d:a0:c8:61:da:f1:92:ba:ce:b4:6b:90:2e:
07:e8:69:a7:f7:51:f9:ff:7e:9a:1a:db:ba:d3:34:
74:76:41:b2:21:20:74:84:a2:f2:29:24:82:4f:28:
65:25:91:d5:74:58:3a:97:77:d5:08:7f:9c:79:55:
00:a6:da:63:17:56:39:f2:07:cb:96:9c:4a:24:f6:
2e:bf:ba:20:33:e7:29:17:79:4d:e7:bd:1c:f4:8e:
4f:0a:4c:10:68:6e:73:29:4d:e9:ee:b9:01:76:f5:
c9:e8:0b:7d:2c:eb:f4:03:79:8b:5c:c1:ca:18:29:
2c:ee:ac:5d:15:33:90:af:66:60:7c:20:6b:b6:09:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:26:79:C5:A8:9C:91:03:17:F0:FC:5D:FB:B4:08:79:FD:B1:77:A7
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FCZ5xaickQMX8Pxd-7QIef2xd6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.179.247.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cb:a8:75:eb:5e:e2:83:6e:a8:1d:9a:c9:7a:65:09:30:14:
ca:57:a4:9b:05:6d:5f:e6:b7:76:92:a4:bb:c4:db:08:7b:80:
4d:47:c4:71:22:03:08:aa:2f:e0:11:c6:a1:04:d2:7e:30:fe:
8f:f6:a2:64:ad:38:9c:55:42:fe:30:ce:eb:cc:a0:5f:60:4e:
85:3a:4d:6c:5d:a0:7b:4e:62:d6:01:d8:e8:7b:48:fb:7a:b2:
c4:96:06:2b:e5:d8:f9:8e:a9:ec:5c:77:c0:54:13:e9:a1:73:
7a:c6:1f:10:d1:fc:f7:56:b8:f4:e0:0d:77:fa:14:f1:56:00:
ba:4e:34:e0:a0:d6:56:b2:cb:15:f9:01:b8:43:b0:e4:a9:c7:
3e:1f:bb:e1:ae:5a:46:eb:e9:e2:71:ab:61:55:a5:ef:4f:f2:
ca:42:74:43:d9:a4:fc:b5:43:6a:c3:4a:cc:d2:ef:3e:a5:4b:
a1:21:97:00:12:60:49:d9:3a:c8:22:cb:4c:df:2d:89:e4:ae:
54:13:71:da:7b:9f:07:95:f5:92:d0:7b:3f:94:51:e4:5d:62:
30:a9:93:7a:d6:43:70:02:17:04:67:e7:2e:4c:9e:da:83:35:
dc:ae:a0:63:5f:f2:f5:56:a1:d7:7c:77:f2:4e:36:27:1f:24:
9a:d6:83:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org