Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/FcSRCkfDA4aq4R1T-AiTClTL9lQ.roa
File: FcSRCkfDA4aq4R1T-AiTClTL9lQ.roa (raw, json)
Hash identifier: pnoi8cuoWj4XAcuYb10T1zWHPL6rLKV5guc/QZHGNQs=
Subject key identifier: 15:C4:91:0A:47:C3:03:86:AA:E1:1D:53:F8:08:93:0A:54:CB:F6:54
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 015E5C32
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/FcSRCkfDA4aq4R1T-AiTClTL9lQ.roa
Signing time: Sat 01 Jan 2022 14:58:05 +0000
ROA not before: Sat 01 Jan 2022 14:58:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15822
IP address blocks: 194.176.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22961202 (0x15e5c32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Jan 1 14:58:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15c4910a47c30386aae11d53f808930a54cbf654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fd:37:81:9b:2f:df:51:97:c7:be:a5:76:1a:
d1:95:f2:bc:a8:ca:69:03:48:ed:ba:f3:74:7b:c0:
b5:dc:0d:f2:0a:44:46:c9:20:a3:ef:6e:fa:dc:d1:
71:de:81:4f:a6:f1:de:4f:b7:a4:da:02:60:13:c5:
ae:9a:4c:c3:30:21:eb:1e:af:01:2e:13:a3:33:f8:
3f:59:73:af:dc:1d:c9:7b:a4:b9:ae:80:3d:e5:a9:
d7:9d:a8:be:3f:c9:1a:7c:9f:3b:28:4b:84:47:8f:
ea:05:13:d4:14:01:8a:47:69:1c:2c:1b:5c:bd:f5:
f2:be:f4:39:31:fa:14:f9:6b:a2:f4:5c:7f:26:e9:
43:c0:99:81:ca:69:06:b8:2e:0c:d7:87:fd:47:9f:
41:0a:4e:8b:b9:87:8a:6a:d1:c4:e8:36:e7:03:ab:
0f:08:ce:38:e4:56:8a:00:45:3f:74:e6:e1:d1:73:
0d:90:8f:88:eb:a5:e1:ea:50:a6:dc:1f:5e:91:eb:
96:8c:3a:3a:bf:fc:23:e4:5d:f4:79:ab:df:a1:1b:
d2:45:99:50:97:28:f1:cd:29:80:b6:86:ee:7e:d1:
bb:99:ca:1a:b5:23:66:5e:a8:ba:71:32:f9:36:0f:
a6:b4:65:4e:58:38:4c:f0:1c:50:b7:f1:2a:aa:f8:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:91:0A:47:C3:03:86:AA:E1:1D:53:F8:08:93:0A:54:CB:F6:54
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/FcSRCkfDA4aq4R1T-AiTClTL9lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.112.0/24
Signature Algorithm: sha256WithRSAEncryption
91:10:38:e3:6e:b1:8e:a2:6b:cf:88:fa:6d:3d:57:77:5f:43:
54:a4:03:fc:96:35:db:e4:82:e3:65:ca:a3:c8:db:23:e9:d2:
40:bc:8d:b7:3e:38:1b:42:28:27:e5:f7:1f:38:51:51:1c:1f:
02:17:93:4a:39:c0:30:40:00:6f:c8:73:39:20:b9:55:c4:2f:
1b:94:e9:08:a0:63:90:32:89:ef:4d:8c:7c:8a:63:82:fe:ac:
e2:d4:16:d3:63:c3:51:fd:00:28:0c:ab:37:61:37:1c:0c:92:
ee:46:a6:ce:00:a6:7d:dd:df:52:7a:07:ed:3a:df:9e:78:3a:
e2:30:26:54:60:3c:d1:c7:f5:4f:e9:0e:76:75:09:88:16:43:
ff:17:06:2a:48:ad:b5:05:d2:3b:51:3d:f9:21:22:10:ce:40:
f1:d6:b3:18:aa:d6:7b:0d:62:15:48:ae:35:43:36:22:50:ef:
ab:24:7f:71:a1:0a:0a:e3:86:ea:0d:98:b8:7b:a2:b4:16:dc:
00:3e:fb:33:80:b3:63:c6:e9:99:6f:08:20:18:d1:3b:31:a4:
0c:cc:0c:ea:21:9b:87:9f:07:f4:f5:71:c1:2c:3a:65:b6:f0:
1a:92:f2:c6:1b:13:32:68:01:27:e0:8a:61:8c:94:65:74:73:
27:59:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:25 2024 by rpki-client on console-ams.rpki-client.org