Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/fZ6lE7x3IZxc2y8IR85a_rEpbuA.roa
File: fZ6lE7x3IZxc2y8IR85a_rEpbuA.roa (raw, json)
Hash identifier: VDuLHqLnaqUNUpjnFWqWMFp3OYGcL7HrQLCGIMNIDdU=
Subject key identifier: 7D:9E:A5:13:BC:77:21:9C:5C:DB:2F:08:47:CE:5A:FE:B1:29:6E:E0
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 03624047
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/fZ6lE7x3IZxc2y8IR85a_rEpbuA.roa
Signing time: Sat 01 Jan 2022 13:01:44 +0000
ROA not before: Sat 01 Jan 2022 13:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 185.1.109.0/24 maxlen: 24
2001:7f8:c3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56770631 (0x3624047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Jan 1 13:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d9ea513bc77219c5cdb2f0847ce5afeb1296ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:b0:26:85:1a:22:bb:c6:df:0f:47:fa:25:
96:0f:46:d7:40:b5:95:48:51:b0:6a:54:0d:8c:b7:
d5:29:79:b3:f7:92:0a:f4:63:72:e3:a4:14:7b:18:
cd:e9:f7:d9:63:c1:bc:ad:86:49:0b:23:92:ee:05:
6c:f2:67:0f:46:dc:90:cc:5f:23:a2:cb:a1:40:2b:
c0:0e:85:8b:ed:71:09:00:b1:50:fa:91:d2:2c:b9:
55:fe:5c:1e:3a:24:2a:ab:3f:22:af:36:ec:b4:a6:
4c:33:01:98:20:58:3b:3e:38:16:47:cf:d5:30:9a:
b0:1e:08:44:2f:0b:ee:d1:90:a0:fc:b1:76:9a:20:
fe:63:06:75:a0:68:f0:71:4a:a0:33:b2:ef:05:66:
ca:43:5c:18:32:dc:50:27:d1:c7:3b:1e:07:cc:e6:
01:e2:cd:c6:af:ad:82:7d:a4:db:37:b3:d5:0b:33:
c3:a1:da:ec:a2:54:56:e0:e1:2e:db:18:4f:53:27:
7c:34:6f:6f:78:18:54:b3:51:02:4d:01:b7:d0:05:
3b:81:35:4a:eb:23:90:b9:b6:d2:51:cc:8d:76:19:
03:3a:98:6f:98:d6:ca:2e:c4:6d:0e:35:05:20:28:
b7:60:a6:8d:af:c6:e2:b7:7e:f0:bf:99:80:d1:76:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9E:A5:13:BC:77:21:9C:5C:DB:2F:08:47:CE:5A:FE:B1:29:6E:E0
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/fZ6lE7x3IZxc2y8IR85a_rEpbuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.109.0/24
IPv6:
2001:7f8:c3::/48
Signature Algorithm: sha256WithRSAEncryption
b4:d9:c3:14:50:90:a2:ff:68:79:94:de:78:70:7c:43:28:13:
dc:f4:2d:2f:9f:c0:4f:d9:8f:29:70:90:a8:56:5f:67:39:8f:
c0:f0:e5:e1:d1:72:55:bc:66:72:e0:34:61:f2:c4:a4:74:0e:
3d:fb:35:e7:e3:8a:22:58:5b:45:fe:cf:56:78:1c:36:d0:d5:
96:3a:2d:61:ed:db:69:a5:9a:9b:c8:a0:d9:89:82:9c:d9:96:
4c:2d:20:63:a7:fe:a6:b4:88:6f:21:ef:b1:89:93:81:30:18:
f4:72:89:31:0d:68:ab:15:75:f8:d8:16:5c:db:bf:e3:02:ff:
7d:73:3c:bb:1c:e6:02:c3:9e:d8:b0:45:22:71:95:52:a1:f4:
f7:8c:7b:d7:1c:e1:d5:7e:30:1a:14:0c:46:fc:9e:0a:a6:01:
16:65:2f:db:6e:41:53:10:20:77:df:b5:c6:a7:cd:1c:98:45:
d9:d1:6a:63:78:e6:9f:35:89:e4:23:f4:2f:55:53:fb:5d:c0:
03:9e:c0:df:1e:62:e8:bc:35:5a:ce:e6:81:51:be:f9:bf:39:
cb:6e:a8:ca:de:34:e2:ef:18:4a:6d:30:96:37:db:19:e6:f8:
f9:80:d5:62:48:0c:99:64:75:3a:45:52:91:0e:41:3a:39:78:
31:0b:45:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:25 2024 by rpki-client on console-ams.rpki-client.org