Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FlRviUSU6PLraTPinVkX-KCYqzA.roa
File: FlRviUSU6PLraTPinVkX-KCYqzA.roa (raw, json)
Hash identifier: bMNIcgjARZrRze/kNQq4PrHr+iB4PQ12PBh6I7RDjZs=
Subject key identifier: 16:54:6F:89:44:94:E8:F2:EB:69:33:E2:9D:59:17:F8:A0:98:AB:30
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A9304B4
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FlRviUSU6PLraTPinVkX-KCYqzA.roa
Signing time: Sat 01 Jan 2022 16:07:20 +0000
ROA not before: Sat 01 Jan 2022 16:07:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209518
IP address blocks: 85.187.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177407156 (0xa9304b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16546f894494e8f2eb6933e29d5917f8a098ab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:32:24:05:3e:b6:fb:3d:61:af:46:c1:ee:
48:46:d2:78:cb:d6:1c:da:38:c9:3b:bd:d3:3d:46:
57:92:f4:2e:e5:21:3d:d8:76:b4:90:0e:4f:63:7a:
0d:f8:fd:0c:d0:01:9d:c2:b9:d7:f7:75:3d:fd:92:
6f:7d:91:c1:6f:3f:b8:0f:15:72:1e:1d:9f:b7:8a:
2a:9b:a6:10:f7:df:a8:01:4b:85:e6:3e:c1:9f:ee:
60:ab:a6:a8:8f:ed:fc:56:56:31:26:1f:72:22:66:
2b:38:bc:b5:9d:90:28:1e:f1:e6:09:bf:08:70:c1:
93:4f:77:35:c5:29:6d:2d:70:d9:b0:65:5c:fd:1c:
93:4d:a7:bd:da:21:c9:a1:03:7d:0d:38:bb:cd:9a:
ca:5b:71:70:7b:46:28:7f:42:b3:b8:e7:6e:14:fb:
0f:38:ce:3a:3d:75:cc:5b:57:1f:52:f6:07:7e:1e:
fa:24:8e:cd:37:b7:50:df:82:0c:a8:54:a8:15:c0:
0a:4b:3e:28:e6:3e:96:c6:53:6f:0f:c8:d1:70:3f:
8a:0d:91:a5:4f:1c:6d:16:0c:1d:ef:3b:ef:84:66:
0b:a7:70:01:67:d0:c5:4b:d3:b1:9c:d2:e4:ac:3f:
9c:56:d6:fd:71:96:fb:a9:0e:96:5e:29:91:46:8f:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:6F:89:44:94:E8:F2:EB:69:33:E2:9D:59:17:F8:A0:98:AB:30
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FlRviUSU6PLraTPinVkX-KCYqzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.2.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:4b:38:91:e9:fa:10:15:5e:82:b5:fc:c0:a9:59:87:fc:01:
1d:9a:b7:72:7a:5d:75:58:52:e7:1d:8c:7e:91:ee:4b:e6:3d:
17:8c:2d:88:96:b2:ee:11:30:9c:41:69:b5:63:12:25:0c:e9:
b9:c9:10:ef:4d:f6:fb:cf:70:54:0a:76:92:9d:6b:c8:99:5a:
58:8c:f9:90:bb:de:39:e9:2f:a8:e8:ac:eb:3b:f7:81:f4:75:
aa:17:ec:5d:9d:f3:16:c8:7f:70:48:cf:07:3b:9a:dd:97:38:
41:fc:32:b8:d8:c4:1e:1c:7e:10:77:3a:53:5c:97:61:1e:40:
56:eb:4b:16:d9:5f:4c:2f:4c:5d:d2:0d:99:17:b0:9a:00:5a:
f7:ff:97:ee:9d:4b:e0:bd:cc:04:54:0d:e5:70:2d:40:4e:2d:
8d:10:53:7c:36:c8:92:17:2a:f0:08:bb:60:c8:65:68:8e:80:
b4:cb:d4:42:60:32:67:f9:9b:da:44:34:6f:0b:c4:69:4d:b6:
df:88:54:20:ca:0c:ee:52:c3:f9:ad:99:60:99:7f:30:e6:fe:
04:cb:38:91:4f:42:48:27:58:f1:68:c1:03:67:ec:20:45:34:
5b:e9:a5:ce:30:2d:16:fd:b3:51:c1:e8:b0:c5:35:40:93:08:
f8:45:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org