Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/FYAnCvWQZXVsVyn34pVqEMFVI8w.roa
File: FYAnCvWQZXVsVyn34pVqEMFVI8w.roa (raw, json)
Hash identifier: OoBrzogRDtsjVBXdZe4+0wcnIbcfRDQH0R0RQqcSlRI=
Subject key identifier: 15:80:27:0A:F5:90:65:75:6C:57:29:F7:E2:95:6A:10:C1:55:23:CC
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 079CFDF9
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/FYAnCvWQZXVsVyn34pVqEMFVI8w.roa
Signing time: Sat 01 Jan 2022 10:05:02 +0000
ROA not before: Sat 01 Jan 2022 10:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139646
IP address blocks: 178.236.44.0/22 maxlen: 22
178.236.42.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127729145 (0x79cfdf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Jan 1 10:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1580270af59065756c5729f7e2956a10c15523cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:65:58:c4:f1:31:96:bd:61:a8:ff:d8:db:53:
94:0f:dc:ef:5e:39:7a:42:9a:c9:b3:40:44:cf:6f:
77:e9:7e:b2:22:d3:e0:3e:53:46:df:df:f2:b5:73:
90:cc:42:a7:a3:f5:a9:de:5d:5f:46:91:b1:24:a9:
6b:a0:e1:f0:c8:92:e2:31:dd:07:aa:1a:3b:87:36:
f3:0e:d6:dd:9f:3e:e4:27:bc:d6:b7:1a:c6:2d:0f:
48:a9:3b:61:19:82:b6:f7:ff:7f:6c:c2:75:ae:36:
82:a0:39:2d:40:be:1d:26:8b:7e:2a:4d:27:90:66:
09:57:58:bd:ec:df:08:5f:20:a2:3b:85:de:0f:75:
ac:f4:42:56:0b:9a:e1:83:05:07:26:31:b9:ea:5b:
f5:67:7f:4c:55:77:2f:26:af:ac:3f:b5:e5:ea:9b:
c3:83:a4:29:3f:f2:b3:38:ba:eb:99:66:b9:7a:cd:
10:5d:b8:89:ee:ba:57:99:eb:86:8e:fa:b5:be:64:
78:7b:fe:7a:00:b4:49:af:24:65:28:00:ef:b9:0e:
2c:62:17:f4:fb:f1:fe:ec:92:d6:17:52:28:c1:16:
d9:27:d0:40:ed:0f:c6:83:75:cf:00:d7:a2:51:18:
c1:14:2f:65:d6:ed:29:a2:3a:55:80:da:6f:99:7e:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:27:0A:F5:90:65:75:6C:57:29:F7:E2:95:6A:10:C1:55:23:CC
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/FYAnCvWQZXVsVyn34pVqEMFVI8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.42.0-178.236.47.255
Signature Algorithm: sha256WithRSAEncryption
2d:e5:51:5d:6c:48:b7:aa:0a:d7:5e:74:52:62:f3:81:10:9e:
51:b4:1f:8f:2f:4b:0c:eb:ca:3f:de:06:fd:8c:23:ba:2e:8b:
65:be:5d:4b:b2:00:34:43:4c:68:51:50:58:1d:dd:98:ea:02:
35:f4:09:f9:4b:45:1e:ad:0f:72:11:88:5f:cd:13:07:2f:ef:
7a:a1:cd:e5:a9:0c:ee:7c:ff:09:83:13:6d:c4:b4:1e:67:50:
3a:8f:c9:2f:eb:2c:e9:d4:e4:6d:64:03:33:05:bd:3f:eb:a5:
b0:27:1f:a5:ae:71:52:7a:46:66:f1:2c:40:7e:99:35:d6:33:
96:38:5f:89:37:23:14:f5:37:c6:30:53:6c:7e:1b:1c:5a:a5:
b0:45:e5:5f:5f:e2:16:ac:f3:49:ce:99:cb:5a:cf:b1:b4:57:
b7:46:4b:c2:53:3f:98:ec:02:d2:4b:f3:8d:e1:db:f8:e4:ff:
b3:53:a2:73:db:85:9b:51:08:33:d1:60:94:bc:5e:64:62:88:
f0:b2:9e:2b:35:a9:cb:95:d4:8b:a9:b7:d0:12:81:4b:49:ff:
dd:3c:73:b8:49:46:a9:32:89:7e:ad:42:32:28:d7:00:67:e6:
12:a1:51:7e:a7:16:ba:15:d7:57:e2:f5:e1:ee:93:be:39:28:
08:b0:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-fra.rpki-client.org