Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FUztIKngfq_DmL2ZL30g9XnLZe8.roa
File: FUztIKngfq_DmL2ZL30g9XnLZe8.roa (raw, json)
Hash identifier: MT/sFCD7SZOXmsRwcL+JItrhtFkEMdW3KmfIcjcfTHQ=
Subject key identifier: 15:4C:ED:20:A9:E0:7E:AF:C3:98:BD:99:2F:7D:20:F5:79:CB:65:EF
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 3A033556
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FUztIKngfq_DmL2ZL30g9XnLZe8.roa
Signing time: Sat 01 Jan 2022 14:00:38 +0000
ROA not before: Sat 01 Jan 2022 14:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199410
IP address blocks: 217.153.154.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973288790 (0x3a033556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=154ced20a9e07eafc398bd992f7d20f579cb65ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:19:98:3b:ae:27:53:4c:38:ad:13:eb:b9:
87:78:e7:03:c4:78:95:cb:ab:e9:95:de:b5:a6:3d:
d0:3d:cd:e6:e4:86:da:17:b8:d8:c7:87:61:c8:d5:
fe:cd:ab:a9:f9:d2:93:04:b5:1e:83:3f:47:fa:5a:
1a:dc:37:ad:bc:c6:20:3f:12:e0:5b:80:1d:78:b9:
84:bd:44:d4:f9:eb:2e:b7:7f:05:2b:7c:57:4a:4b:
49:05:9b:22:5a:77:cf:83:6f:79:80:cc:92:9b:56:
3b:0c:53:ac:61:d2:d6:e2:a2:bc:2c:44:9f:6f:63:
13:63:26:82:d2:d9:1a:88:50:22:46:0d:77:5a:74:
a2:ed:1e:7e:62:51:c4:d1:54:bd:77:8e:c7:3d:81:
2a:b6:f7:3a:8d:2a:09:85:2f:4e:77:9c:10:b0:d2:
a1:fe:9e:40:d2:e9:52:5f:94:7b:a3:31:73:6a:a3:
a1:1f:65:46:b2:30:ff:46:80:2b:07:8d:80:bc:4b:
1c:55:bd:50:43:df:78:32:1d:e9:e8:b9:61:8d:ef:
1a:83:7d:fb:71:5f:d2:04:d7:db:d1:68:aa:9e:2a:
4c:fd:1d:ba:ff:66:85:e0:aa:e5:f5:c9:2d:4f:24:
bb:74:85:02:2c:ce:03:9e:b3:fc:57:41:d5:41:b9:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4C:ED:20:A9:E0:7E:AF:C3:98:BD:99:2F:7D:20:F5:79:CB:65:EF
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/FUztIKngfq_DmL2ZL30g9XnLZe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.153.154.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:e7:98:a3:c3:0f:c2:f6:5b:da:31:c7:16:65:24:07:76:18:
fb:b7:43:d2:86:fe:e8:4b:37:91:a0:90:2d:14:7e:70:1a:d4:
9b:d6:e0:0d:98:fb:3c:15:4f:3f:e1:72:5a:7a:37:78:ca:4b:
88:97:a5:8a:d7:97:b5:ca:d1:1c:0e:43:5c:69:a0:9a:1e:4a:
bf:00:fe:de:25:3e:71:05:9b:8f:f8:f6:fa:4f:11:2c:8f:be:
e1:42:5d:a0:f5:ea:ea:e7:a5:6f:44:62:7a:5a:21:ee:b4:0f:
de:93:fc:f7:dd:86:54:b1:6c:17:64:04:60:44:01:e2:ae:10:
08:3d:57:cc:93:17:99:f1:62:ec:d7:9a:3d:5c:a8:04:a8:fd:
11:25:64:ad:7c:10:2a:d8:7d:3b:1c:2c:e5:2c:23:24:2c:16:
05:84:b8:1d:a2:cc:69:0c:0d:8c:53:d6:21:b7:71:26:8e:53:
1b:31:2b:84:92:f8:80:e3:6d:39:d5:fd:76:a2:e6:91:e6:9b:
17:ca:2e:fc:d2:e5:5a:e5:fa:a6:e6:cb:3c:61:92:ee:f5:1d:
54:8e:18:e1:04:6f:9b:51:43:27:62:e3:22:fc:09:2f:1e:15:
f3:d5:55:5e:ee:51:1e:58:40:14:10:27:af:b2:88:5d:42:c5:
27:7a:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:01 2024 by rpki-client on console-fra.rpki-client.org