Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fxkYMME87QOYaSplDWfGgtRwp1k.roa
File: fxkYMME87QOYaSplDWfGgtRwp1k.roa (raw, json)
Hash identifier: h2hbO/qFVlQP2D+d5Pg5QmadLqn26xk4qQCGmAibDyE=
Subject key identifier: 7F:19:18:30:C1:3C:ED:03:98:69:2A:65:0D:67:C6:82:D4:70:A7:59
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018412F5D9318213F7158C3CF29DCB631824
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fxkYMME87QOYaSplDWfGgtRwp1k.roa
Signing time: Wed 26 Oct 2022 06:23:32 +0000
ROA not before: Wed 26 Oct 2022 06:23:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51219
IP address blocks: 5.8.180.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:12:f5:d9:31:82:13:f7:15:8c:3c:f2:9d:cb:63:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 06:23:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f191830c13ced0398692a650d67c682d470a759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:ca:69:67:58:7b:da:7f:67:a3:07:55:4f:
43:48:81:18:be:b3:0d:e8:86:7a:7e:d8:8e:be:1f:
7d:70:78:06:a2:db:99:80:cc:c3:54:98:a8:8e:a6:
f8:21:7f:5e:cf:58:7b:5e:ec:90:dd:75:7e:d1:ce:
20:ee:d5:30:21:15:d1:93:18:7a:13:02:33:e0:19:
7c:5a:32:67:89:2f:81:5a:59:c7:6a:fa:14:94:f5:
3a:7b:9e:b0:ca:58:20:2b:8c:f8:55:f0:5c:26:ec:
7d:cb:e7:64:76:8e:ec:31:69:5f:63:0d:9b:80:35:
e0:f5:fd:83:65:8f:6a:bd:15:3e:59:f2:94:d2:3d:
49:f0:69:6f:a1:21:30:67:bc:d1:54:3d:c4:a0:74:
e6:f1:34:ae:08:ee:76:ca:ed:e6:44:94:2a:d4:e5:
45:95:dd:7f:ee:c5:e1:d6:ce:90:92:dd:41:65:eb:
94:dc:b2:ae:49:35:cf:be:8f:e5:f6:4d:80:aa:70:
e4:f0:c1:33:33:2d:72:70:5b:ad:b9:a9:79:38:2f:
83:f9:b3:65:89:e5:af:6d:e2:45:b1:c5:e4:48:e8:
41:7c:db:cf:c6:30:98:98:ff:86:51:03:a2:fb:d5:
42:10:e9:59:53:ad:e9:e6:6f:23:16:f2:3c:89:ae:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:19:18:30:C1:3C:ED:03:98:69:2A:65:0D:67:C6:82:D4:70:A7:59
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/fxkYMME87QOYaSplDWfGgtRwp1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.180.0/23
Signature Algorithm: sha256WithRSAEncryption
89:94:77:13:be:cf:47:3a:21:f8:e5:46:38:ab:5d:bf:d5:ce:
25:a5:f5:81:32:fe:2b:87:b3:a7:10:c0:aa:5c:1f:09:18:a9:
1c:f6:f8:cd:65:cb:db:1c:b5:6a:63:c5:75:56:12:b0:df:74:
26:03:a2:a6:78:04:5d:2e:eb:11:ca:d2:f6:be:c4:b8:12:09:
8f:62:4a:e5:3c:7d:53:3b:8f:8a:8b:f4:86:12:89:38:38:cf:
21:62:1e:75:81:61:4d:cf:c4:ec:8c:9b:5b:0d:85:6b:22:44:
46:d9:15:51:24:ca:c3:a4:ed:30:5a:db:8f:29:d0:15:27:f1:
ca:ab:5d:45:99:c3:d5:a7:86:17:13:25:b0:90:90:ac:87:55:
af:12:14:e5:f9:52:5c:f2:1d:61:39:b3:d4:6d:33:76:f1:36:
00:e5:77:c1:13:40:fd:e8:90:12:9c:25:d1:b7:86:9d:43:50:
85:b0:f8:39:0c:cb:89:9e:0c:86:b6:1b:29:2a:3d:55:2a:b3:
eb:62:c8:36:02:09:2d:5a:75:b2:0a:9e:f9:d1:58:96:78:fe:
ed:26:ff:96:0d:45:f6:ef:e3:8a:fe:d2:7d:90:88:0a:07:c5:
65:54:e9:6c:60:32:37:12:4d:b7:e4:da:28:38:e4:65:3a:a8:
39:49:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:26 2024 by rpki-client on console-fra.rpki-client.org