Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FAFPVrIl7GnKT9rLnrH1IGON-6I.roa
File: FAFPVrIl7GnKT9rLnrH1IGON-6I.roa (raw, json)
Hash identifier: drFqmSA42cng/Cj2aYNXEQ5IZ64p1cTFSRndwDItcjI=
Subject key identifier: 14:01:4F:56:B2:25:EC:69:CA:4F:DA:CB:9E:B1:F5:20:63:8D:FB:A2
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 03B1862B
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FAFPVrIl7GnKT9rLnrH1IGON-6I.roa
Signing time: Sat 01 Jan 2022 08:57:00 +0000
ROA not before: Sat 01 Jan 2022 08:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31400
IP address blocks: 5.183.95.0/24 maxlen: 24
45.86.163.0/24 maxlen: 24
46.30.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61965867 (0x3b1862b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 08:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14014f56b225ec69ca4fdacb9eb1f520638dfba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:11:88:d4:82:a6:34:ca:a7:c0:83:4f:30:
61:fc:8e:20:df:40:52:d6:c5:c1:31:7f:21:84:a9:
e3:aa:1e:68:a0:e5:32:a6:ba:ba:f5:3f:1f:06:2b:
50:fa:8c:04:8e:6c:21:66:84:11:ea:45:92:66:2c:
7a:a6:de:f3:76:d8:bc:f3:76:82:a9:6b:3b:c8:4a:
5e:be:a6:a9:8f:57:e3:5f:4d:40:3b:a5:63:60:c3:
3a:d5:6b:5c:e5:cf:3f:ff:7b:21:01:e7:64:b0:e7:
ea:2f:50:8d:b7:f3:49:37:0e:e9:7b:34:b3:66:df:
33:73:bd:0b:a7:47:c2:4e:a3:19:e2:99:3c:e2:50:
f8:bd:50:93:80:b5:e6:0b:29:88:a5:9f:cf:ac:b3:
5a:f5:b2:8b:d4:3e:70:60:ad:0c:cf:15:32:9b:66:
47:40:58:3c:2c:4c:f2:7a:d3:8b:dc:92:58:09:24:
35:b7:2a:bd:e4:89:70:d7:cf:51:cf:2a:b5:5b:a7:
ba:7b:1a:d9:fd:db:4c:65:b1:35:83:42:d0:8f:19:
bd:14:5d:ba:48:76:95:b1:d9:26:50:47:66:91:c7:
51:5e:14:46:a5:95:fa:94:c5:7e:b4:a1:7e:e7:1a:
20:72:85:b1:80:92:a8:67:7b:d3:8f:5c:43:7e:4b:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:01:4F:56:B2:25:EC:69:CA:4F:DA:CB:9E:B1:F5:20:63:8D:FB:A2
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/FAFPVrIl7GnKT9rLnrH1IGON-6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.95.0/24
45.86.163.0/24
46.30.189.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b7:bc:72:76:a9:49:55:36:f7:fc:15:9c:fa:58:87:c7:13:
01:e4:c9:25:cd:1c:2e:71:ce:88:da:63:72:90:d0:6a:6b:25:
da:00:3c:f2:1c:1a:c0:1d:80:45:f8:06:85:3e:21:14:c2:9e:
15:9c:b5:4a:70:25:a1:88:23:f4:c0:ca:88:58:30:0d:84:58:
7c:bf:c3:63:3f:90:bf:f3:fd:b1:d8:18:1c:92:98:96:5e:e9:
91:ee:a5:70:46:a8:22:51:1e:2e:d1:d7:bf:c0:27:5d:21:68:
9f:c2:0c:89:9d:7e:7e:05:18:32:e7:94:1a:8e:f8:75:1f:a8:
e1:3b:4e:d2:c9:86:ea:4f:d0:5d:aa:95:b2:01:eb:b4:d7:ed:
31:db:af:ec:49:d7:08:e8:98:78:b6:77:66:3c:02:04:a9:3e:
a3:95:51:b6:a2:a1:5d:ab:2b:e1:a3:88:78:40:3a:bf:6b:52:
31:4f:09:04:5e:d3:d5:28:6d:41:66:4a:4f:67:fb:bc:b4:70:
00:ff:1c:28:b2:ae:e5:16:1c:ef:e5:e3:23:d3:42:9f:d6:ae:
86:a1:12:7f:31:7c:70:92:3c:e6:54:c2:cc:93:bb:e1:f8:28:
27:74:d3:3d:6d:80:77:4d:89:9f:13:db:3e:47:df:4a:1c:db:
d1:58:61:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-ams.rpki-client.org