Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d0c809-a95b-4f61-8ca7-f03f9686d206/1/FLSF2ukeFUe1UTQD6KNjOhTMvZU.roa
File: FLSF2ukeFUe1UTQD6KNjOhTMvZU.roa (raw, json)
Hash identifier: PbzMekd8Z2k9aXWuvhTSPRLUUFuTY2y98/VgWzXRsKA=
Subject key identifier: 14:B4:85:DA:E9:1E:15:47:B5:51:34:03:E8:A3:63:3A:14:CC:BD:95
Certificate issuer: /CN=bb32d3e2da170835e4df9bc35dd64658e349796d
Certificate serial: 06CAF5B8
Authority key identifier: BB:32:D3:E2:DA:17:08:35:E4:DF:9B:C3:5D:D6:46:58:E3:49:79:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzLT4toXCDXk35vDXdZGWONJeW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d0c809-a95b-4f61-8ca7-f03f9686d206/1/FLSF2ukeFUe1UTQD6KNjOhTMvZU.roa
Signing time: Sat 01 Jan 2022 07:02:09 +0000
ROA not before: Sat 01 Jan 2022 07:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24904
IP address blocks: 45.15.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113964472 (0x6caf5b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb32d3e2da170835e4df9bc35dd64658e349796d
Validity
Not Before: Jan 1 07:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14b485dae91e1547b5513403e8a3633a14ccbd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:cd:f9:99:68:6d:5d:ee:4a:83:07:58:9a:
6f:c7:9c:b1:7d:54:7e:7a:b2:b7:8a:7f:bc:e2:a0:
70:d6:21:f3:83:c0:99:e6:9c:82:45:db:38:c0:f4:
0a:d1:e0:5a:b3:b8:e1:82:bc:82:b8:4f:18:13:34:
45:db:10:35:25:a3:8b:a0:38:99:93:b6:07:ac:27:
6f:9f:fd:a1:ed:c5:8e:d9:7a:a0:56:a6:ff:74:70:
4b:2d:2d:85:fd:84:1c:12:dd:c0:db:38:f9:97:bd:
ae:72:2c:45:63:2d:94:87:63:d4:6b:b5:64:a4:92:
23:65:f8:1a:3a:d3:2b:f6:d2:4c:5b:08:46:4c:52:
8b:39:3e:b6:b5:94:df:36:b9:e4:9c:60:14:1f:9a:
9f:91:26:0d:61:01:69:74:bf:59:49:d4:41:19:27:
c9:41:08:0c:9c:c1:a0:3a:54:9f:45:9e:3d:30:d3:
29:73:09:9e:90:85:e9:39:86:2a:7c:2c:5d:4b:a2:
e5:08:be:e3:cc:9a:d9:12:c1:dc:46:88:79:0d:68:
f4:88:b1:92:ac:66:68:5a:33:1b:63:81:a9:2a:11:
f9:ee:c3:59:78:93:dd:27:ea:cf:2d:55:d5:0a:5e:
92:c0:30:2e:26:b2:6d:0e:70:c2:38:8a:3e:68:5f:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B4:85:DA:E9:1E:15:47:B5:51:34:03:E8:A3:63:3A:14:CC:BD:95
X509v3 Authority Key Identifier:
keyid:BB:32:D3:E2:DA:17:08:35:E4:DF:9B:C3:5D:D6:46:58:E3:49:79:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzLT4toXCDXk35vDXdZGWONJeW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d0c809-a95b-4f61-8ca7-f03f9686d206/1/FLSF2ukeFUe1UTQD6KNjOhTMvZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d0c809-a95b-4f61-8ca7-f03f9686d206/1/uzLT4toXCDXk35vDXdZGWONJeW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:08:f7:e8:77:2c:32:06:e6:cd:83:15:1d:4a:c3:aa:00:c5:
5d:21:df:76:e4:0f:89:8a:93:12:2a:91:3c:af:ef:18:da:ca:
37:20:d9:e5:1f:b3:12:31:24:6b:ac:4a:de:c9:1f:f9:84:6a:
7d:ab:87:bb:b0:82:f3:1d:df:75:52:34:6e:b1:e3:ec:21:d0:
c2:71:d2:2e:15:d6:e9:67:7f:e1:c4:44:22:02:4e:2e:1c:a6:
ac:7f:3b:b1:7e:8d:5d:55:01:d1:b6:59:83:e0:76:95:c2:a4:
a1:98:5f:e7:5e:79:91:c9:ed:9d:f3:2c:8f:a7:ad:15:f0:96:
0d:f8:0f:a0:27:a1:6c:07:8e:c5:95:0c:58:2c:13:09:28:8a:
1f:24:a2:08:80:9f:77:5a:a8:3f:dc:25:61:a5:e5:80:f9:75:
75:91:c4:2f:89:d7:40:4a:d7:14:df:b3:8f:9b:25:b8:80:21:
1d:45:a2:5a:b4:01:20:d1:ab:25:32:4d:f6:a9:2d:9c:76:b5:
27:28:6b:a8:db:09:f0:8d:ba:e8:21:18:b1:7a:37:03:40:12:
70:40:4a:54:f1:d2:ac:a3:0e:60:f7:03:75:07:c5:0f:cf:34:
d5:75:98:c7:12:f1:cd:b1:4c:64:5e:4f:4a:23:60:b2:04:c5:
f7:f3:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:43 2024 by rpki-client on console-ams.rpki-client.org