Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FbkWaRoRsUkjuNVVMn5KzDKR_2c.roa
File: FbkWaRoRsUkjuNVVMn5KzDKR_2c.roa (raw, json)
Hash identifier: DlbFodwvJZaqxS+Q0zHnWAIkV3Q5I6pXkaXGcv/zCEc=
Subject key identifier: 15:B9:16:69:1A:11:B1:49:23:B8:D5:55:32:7E:4A:CC:32:91:FF:67
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185346E2197289ADE4A0EBB47C20197783C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FbkWaRoRsUkjuNVVMn5KzDKR_2c.roa
Signing time: Wed 21 Dec 2022 11:25:10 +0000
ROA not before: Wed 21 Dec 2022 11:25:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14315
IP address blocks: 45.80.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:6e:21:97:28:9a:de:4a:0e:bb:47:c2:01:97:78:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 21 11:25:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15b916691a11b14923b8d555327e4acc3291ff67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:70:b8:df:9b:ba:00:87:6b:d1:9f:b4:e9:
a9:8c:cb:fa:10:83:8c:ff:68:d9:61:03:6e:bd:99:
ca:2f:91:1a:40:e7:06:e4:d7:d4:ca:5a:54:77:a7:
96:87:20:b3:a2:db:8a:b8:e7:4c:2c:7f:b3:48:a1:
cb:1b:12:7c:87:33:d4:f8:82:17:04:80:b6:25:e3:
7d:88:cb:a3:fb:ee:28:79:2e:0e:49:46:86:7c:15:
3f:29:50:6d:1e:3b:6e:a2:0e:fb:4f:61:64:96:53:
1c:5f:d2:2e:59:a6:61:b4:72:40:f4:dc:e9:d0:b0:
1a:40:7d:4b:4b:f3:67:b0:76:e0:92:08:3b:82:99:
79:44:b5:e9:69:fd:9e:ae:d6:67:11:8b:f1:9a:83:
37:0f:ec:10:02:e5:2f:93:2f:d8:80:eb:77:a3:1f:
10:dd:87:0f:ca:70:a7:99:62:8f:48:ca:63:7a:82:
92:af:1b:5d:ca:eb:b9:d5:8e:96:a4:39:59:48:4a:
d6:a2:ef:90:ea:b5:5c:07:72:fc:b3:6c:1f:b2:11:
14:95:ff:a0:57:94:40:60:e1:95:8d:fc:81:55:df:
cd:88:bc:74:76:43:d6:da:4a:bf:f6:6c:34:d3:08:
03:41:a3:70:bd:09:27:6a:47:d4:40:5c:63:ce:5d:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B9:16:69:1A:11:B1:49:23:B8:D5:55:32:7E:4A:CC:32:91:FF:67
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FbkWaRoRsUkjuNVVMn5KzDKR_2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:40:2c:26:c2:c0:15:0c:b0:ed:10:75:6f:22:0d:c8:21:41:
e5:0d:40:98:0e:a9:ea:e2:5f:cb:38:dd:13:2b:5f:c8:6d:65:
e5:1d:d2:41:16:cd:d5:c4:16:68:23:95:61:e2:27:ad:64:18:
ef:08:64:65:be:0d:d4:fb:eb:03:1a:05:b1:78:24:0e:98:7a:
61:a2:09:6d:35:24:2f:fe:56:9b:db:bf:1d:23:8d:c9:e0:a8:
ec:98:60:9c:ba:f6:fb:65:f1:aa:9b:25:a6:d7:2f:f7:0d:a2:
d5:d1:50:e3:88:83:52:a0:c3:88:bb:07:5c:e8:70:86:8c:2d:
fa:a0:a0:af:c0:45:c5:bc:41:a6:86:23:c3:66:37:11:41:83:
8a:1f:cd:38:9f:91:3e:7b:c9:81:52:cd:a5:44:92:7d:26:b0:
a6:fe:d2:64:74:ed:c6:53:1b:79:ef:2c:13:f0:df:02:79:83:
42:7e:21:8e:0c:2b:25:5e:86:85:6b:c3:19:af:30:7b:0e:b4:
9d:b8:ed:39:30:80:99:9b:3f:df:89:c9:c8:22:97:b9:fb:4d:
2f:40:fa:75:a9:3c:65:70:37:83:b9:0c:37:e4:1c:fe:cd:e0:
6f:3d:6a:a6:b6:0c:c8:8b:8d:74:71:33:ae:eb:61:7d:30:ff:
e7:56:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org