Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/FX90vxGfJq-Blk43MMO4H14-EAI.roa
File: FX90vxGfJq-Blk43MMO4H14-EAI.roa (raw, json)
Hash identifier: uDBiFudSGnzuUODJHLUggoFphh2bysDQf9uAt3IwsFc=
Subject key identifier: 15:7F:74:BF:11:9F:26:AF:81:96:4E:37:30:C3:B8:1F:5E:3E:10:02
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0185353876ECB489BEB9F48FAAEF6C9A9A43
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/FX90vxGfJq-Blk43MMO4H14-EAI.roa
Signing time: Wed 21 Dec 2022 15:06:10 +0000
ROA not before: Wed 21 Dec 2022 15:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205537
IP address blocks: 185.214.204.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:35:38:76:ec:b4:89:be:b9:f4:8f:aa:ef:6c:9a:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 21 15:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=157f74bf119f26af81964e3730c3b81f5e3e1002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c1:76:d6:1c:3f:72:73:94:15:84:5d:36:52:
0d:7a:0f:d5:79:8e:bd:bd:cd:c7:e8:a5:4a:77:c8:
a4:d9:44:45:dc:79:aa:d5:33:30:5e:b6:81:9d:f2:
75:90:09:a2:44:95:bc:43:e1:ed:46:31:88:54:14:
73:9f:2a:ea:06:18:a7:53:b6:9a:35:b2:8b:db:a2:
fc:af:c2:f3:ca:69:63:6f:4e:50:48:ab:6b:7d:dc:
c7:d7:73:08:37:ff:52:31:0b:f5:d7:67:b4:cb:9d:
c2:2e:c7:28:be:d4:5e:a8:67:75:00:86:54:88:9d:
85:41:ef:25:46:00:de:ef:c6:6e:e3:41:63:47:8e:
3d:7d:ae:40:1f:9f:31:e4:1c:92:05:26:a9:b1:c9:
03:a2:ec:9e:b2:17:01:5a:48:84:9e:7f:13:8e:41:
fa:e1:04:13:bc:2a:81:97:d3:ab:fc:14:5a:b2:1a:
05:ba:dc:45:10:f8:36:49:c2:ae:ca:e8:d4:c7:23:
72:5b:92:ae:68:4f:0b:73:03:15:84:94:83:66:59:
1e:16:3f:fc:cb:43:d3:7d:1a:61:8d:21:05:5f:cb:
07:69:27:7d:dc:04:77:b8:b3:93:0e:b3:fa:ce:6b:
96:3f:eb:4f:80:e6:80:81:f2:92:ef:5d:1c:9c:21:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7F:74:BF:11:9F:26:AF:81:96:4E:37:30:C3:B8:1F:5E:3E:10:02
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/FX90vxGfJq-Blk43MMO4H14-EAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:11:f3:56:be:b0:c4:0c:e0:d7:f5:31:46:7c:85:7f:37:13:
1e:88:f2:a7:d5:3a:2a:9a:9d:30:b2:39:0b:7a:60:f6:c0:be:
ed:4d:90:53:5d:fe:ab:4e:e1:67:de:96:d1:6d:70:0e:2d:cf:
67:9b:ca:ea:ec:7b:cf:ac:75:02:f3:35:c5:14:38:d4:0b:c7:
d3:79:0d:0b:07:bf:9d:59:57:6e:c5:a0:1a:52:6b:78:b6:cf:
75:f4:27:4b:7b:75:e7:25:c1:64:d9:64:30:44:f7:79:5f:7d:
15:77:65:7f:c4:c1:f6:e4:1b:19:78:a3:dc:00:b4:6f:98:a5:
80:38:d9:2e:1c:08:27:43:b2:8b:5a:e6:9a:64:5f:99:e3:62:
d4:43:f6:df:9e:e4:7b:fc:75:ef:bf:14:07:38:78:42:41:db:
62:1b:c5:f5:1d:3c:88:84:be:d6:7a:ef:2c:1b:1c:75:35:e0:
20:0c:ef:ba:eb:da:4f:a8:9d:74:5d:60:c3:c4:d7:4e:53:25:
f8:94:30:1e:39:67:8b:4b:48:c3:02:c1:c7:54:61:0f:bd:d7:
90:07:2c:4d:73:e4:12:b5:47:52:eb:34:85:dd:a9:59:d5:4d:
91:5e:0d:fb:f9:7d:eb:01:f7:2b:b7:15:8a:52:e4:6f:2b:a2:
46:85:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org