Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/fvjZyQardWBWZZ1nP0PTa7XNH3U.roa
File: fvjZyQardWBWZZ1nP0PTa7XNH3U.roa (raw, json)
Hash identifier: 2cuow+NxlX9tCGPzcdIDJsLlic/qRAzRe56bMwZirSo=
Subject key identifier: 7E:F8:D9:C9:06:AB:75:60:56:65:9D:67:3F:43:D3:6B:B5:CD:1F:75
Certificate issuer: /CN=e4aba4da15f1d9af181e8a50448ff8bd1625c92a
Certificate serial: 018326EB6F3A9A7FD8D54473B614D2843416
Authority key identifier: E4:AB:A4:DA:15:F1:D9:AF:18:1E:8A:50:44:8F:F8:BD:16:25:C9:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kuk2hXx2a8YHopQRI_4vRYlySo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/fvjZyQardWBWZZ1nP0PTa7XNH3U.roa
Signing time: Sat 10 Sep 2022 10:21:47 +0000
ROA not before: Sat 10 Sep 2022 10:21:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 213.109.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:eb:6f:3a:9a:7f:d8:d5:44:73:b6:14:d2:84:34:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4aba4da15f1d9af181e8a50448ff8bd1625c92a
Validity
Not Before: Sep 10 10:21:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ef8d9c906ab756056659d673f43d36bb5cd1f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:a6:90:c5:b0:93:b8:e3:15:09:66:ca:66:
65:b9:f9:84:d1:c1:f3:ca:47:f8:13:92:99:c5:e1:
6b:f6:2e:8f:54:c6:bd:47:4d:9e:35:bb:54:61:b4:
1f:79:1a:f1:04:03:c2:f8:38:d6:d2:0a:77:7e:b5:
eb:45:85:e9:53:6e:c3:86:01:7b:36:62:a4:3e:d6:
f8:79:b6:83:85:98:c5:ec:eb:c1:fb:77:94:c4:38:
12:f0:ab:0b:3a:1e:0e:c8:5a:66:6b:89:b6:9f:4e:
03:f3:bc:7d:ed:f0:24:b7:f7:22:79:3a:e0:a6:27:
bf:dd:7a:4b:cc:cc:d2:f4:a2:50:3d:c9:d9:68:9a:
27:41:43:43:84:2a:c1:40:2e:c9:10:84:d4:79:e4:
9a:ea:37:1a:d7:09:c5:a3:5f:05:b9:d8:60:7c:06:
9f:7c:2d:21:8f:be:e2:b7:bc:e6:85:9b:b1:38:79:
c7:21:a4:1a:0a:92:26:f4:ae:b0:92:54:0e:30:69:
8a:4e:be:26:58:29:23:64:07:7f:24:92:75:8c:81:
fa:a8:d5:18:5a:c4:6b:a0:b5:f3:78:c1:13:91:5d:
7f:25:fc:a3:71:75:18:62:05:4a:6b:52:7c:9c:d8:
5b:14:f7:fb:89:8b:39:dc:93:3e:7e:58:19:29:4c:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:D9:C9:06:AB:75:60:56:65:9D:67:3F:43:D3:6B:B5:CD:1F:75
X509v3 Authority Key Identifier:
keyid:E4:AB:A4:DA:15:F1:D9:AF:18:1E:8A:50:44:8F:F8:BD:16:25:C9:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kuk2hXx2a8YHopQRI_4vRYlySo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/fvjZyQardWBWZZ1nP0PTa7XNH3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4c096-73db-4b6a-ac7f-f1189d25e943/1/5Kuk2hXx2a8YHopQRI_4vRYlySo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.152.0/24
Signature Algorithm: sha256WithRSAEncryption
92:bc:e8:f9:94:da:68:82:d8:43:e0:8c:4a:eb:95:2e:87:c6:
a3:ff:b3:ac:30:58:93:ba:75:c6:cc:c2:8e:6b:c7:53:fa:20:
68:11:7f:b1:2e:12:54:29:36:a6:ad:66:4b:94:67:96:17:1d:
03:dd:59:c2:fe:fd:9d:c8:63:5f:9b:5b:e4:d4:bb:78:e5:6e:
11:e2:d4:77:1d:ac:f0:cf:56:f3:2a:8f:48:7f:da:c7:f3:7b:
4e:24:ea:fe:c7:1b:88:28:17:b1:f3:7e:9d:4e:84:f8:29:97:
2e:bb:00:98:7d:08:c0:58:5e:28:70:17:be:7f:cf:7b:92:b6:
9d:81:99:83:7b:f7:a7:af:59:59:68:ca:d7:c2:aa:8a:e2:f2:
18:cf:c8:24:31:39:8f:cc:d0:cc:37:6a:33:39:d1:e9:fa:01:
1e:2b:0a:a0:ce:7a:cc:82:f7:4d:66:d6:6a:4d:71:a4:1a:54:
2c:2f:fe:0c:97:77:b2:22:46:d4:c0:95:0f:27:33:0c:7a:62:
a9:00:e6:65:51:bb:0f:a0:70:da:be:af:6a:a2:44:af:57:2f:
78:15:11:16:b6:48:a5:29:5f:e2:0b:5a:93:61:9f:aa:bd:49:
48:67:ac:e8:e3:d5:6e:06:17:ce:51:23:b3:2f:d5:a5:99:01:
cd:48:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:04 2023 by rpki-client on console-fra.rpki-client.org