Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/FkKRSFeKBOC8Qw86Nq36bStYdFI.roa
File: FkKRSFeKBOC8Qw86Nq36bStYdFI.roa (raw, json)
Hash identifier: fotkNha9NjaRKGp6Qk0Hbcx9RR3p14rzRRXPZ9tNnhI=
Subject key identifier: 16:42:91:48:57:8A:04:E0:BC:43:0F:3A:36:AD:FA:6D:2B:58:74:52
Certificate issuer: /CN=057c6f47bc3099a4ec86bec29605269140ad7319
Certificate serial: 010C126C
Authority key identifier: 05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXxvR7wwmaTshr7ClgUmkUCtcxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/FkKRSFeKBOC8Qw86Nq36bStYdFI.roa
Signing time: Sat 01 Jan 2022 02:59:03 +0000
ROA not before: Sat 01 Jan 2022 02:59:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 194.99.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17568364 (0x10c126c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057c6f47bc3099a4ec86bec29605269140ad7319
Validity
Not Before: Jan 1 02:59:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16429148578a04e0bc430f3a36adfa6d2b587452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:ef:a7:39:89:09:90:98:78:92:aa:66:dc:
75:b4:f9:bd:8a:a7:0b:a0:6b:8a:10:69:c9:9f:67:
69:ef:42:67:07:85:40:2c:2a:42:18:0d:5f:9b:1d:
f7:47:d8:65:8a:14:75:2a:2a:60:be:5e:b3:20:dd:
af:dd:22:7d:96:f3:60:d1:8f:72:74:4f:59:64:6e:
cd:d0:b4:cd:53:af:0a:e5:70:a6:26:d3:2c:6d:93:
8f:19:b1:b2:59:37:77:0e:6e:08:50:64:3c:c4:03:
79:35:9a:aa:16:25:4e:91:2f:5b:ad:b0:10:28:11:
d1:70:75:af:2e:03:af:e8:2a:30:9d:20:a3:5b:b0:
90:30:d0:da:da:36:95:99:b3:bb:dd:45:e5:f4:90:
2a:b7:be:44:ca:3f:c5:5b:3a:da:2a:21:63:94:f6:
af:7e:c1:03:6e:81:4e:2b:e5:b4:82:99:6b:5f:23:
73:48:8c:e1:44:59:79:ea:94:36:66:c1:d7:70:a0:
42:e0:2f:20:88:04:be:97:ac:7d:e2:fd:e7:d1:e1:
d4:1c:a8:97:cd:ad:f9:a3:52:e4:ba:6c:c1:2c:0a:
70:46:05:e3:94:01:86:fa:5c:c0:71:8c:2e:5d:36:
ce:1d:af:77:31:1c:92:78:b5:1e:84:50:a6:05:96:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:42:91:48:57:8A:04:E0:BC:43:0F:3A:36:AD:FA:6D:2B:58:74:52
X509v3 Authority Key Identifier:
keyid:05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXxvR7wwmaTshr7ClgUmkUCtcxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/FkKRSFeKBOC8Qw86Nq36bStYdFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/BXxvR7wwmaTshr7ClgUmkUCtcxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.158.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c9:dc:32:01:da:34:e5:c5:e3:e9:e0:9e:1e:12:e1:cc:cf:
c5:74:25:65:70:c1:2f:f5:2f:44:41:d6:fb:10:16:38:b3:2a:
be:64:fb:e6:32:26:01:a4:12:13:52:7c:65:db:dc:b3:70:cd:
0f:a3:80:fb:c1:0e:28:6a:da:89:fd:29:25:dc:bb:96:ba:3a:
1b:8d:85:a7:4d:17:ae:d3:cd:26:b8:84:7c:5b:a7:27:c9:d5:
dd:c0:9b:ea:73:1f:d4:ef:77:3c:29:b8:aa:53:6a:b9:12:e8:
25:a2:56:48:83:b0:79:f3:a3:40:e9:f3:ff:54:f3:5e:9a:2d:
e2:c2:39:23:c6:9a:4f:b7:34:a2:83:44:ea:16:4e:3c:e7:fe:
a8:98:d9:82:8d:36:3b:8b:95:8f:ad:92:3b:9b:82:67:e0:f1:
f0:62:53:49:d4:03:fa:fd:e3:06:f3:3b:7e:59:7d:e1:e3:99:
2d:e0:57:1c:75:27:8a:94:a4:5f:ff:b3:6f:ab:ff:4e:d4:52:
9f:54:6a:0b:3a:c8:a9:c2:11:d0:37:64:28:6d:98:52:db:d8:
c8:9d:12:87:5f:81:5c:5e:54:9a:19:55:e2:b6:73:c2:82:45:
19:66:ec:48:4e:70:ca:0a:1e:bb:59:3f:38:23:2f:75:6c:e8:
c9:05:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:19 2023 by rpki-client on console-ams.rpki-client.org