Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/FWfz85AvqzVTjqkPqecMFz7pz5I.roa
File: FWfz85AvqzVTjqkPqecMFz7pz5I.roa (raw, json)
Hash identifier: IuNwP0PCNwdRkw4zV1t6wjXJ6xGNLZNSWJRQpREjy9E=
Subject key identifier: 15:67:F3:F3:90:2F:AB:35:53:8E:A9:0F:A9:E7:0C:17:3E:E9:CF:92
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 12EA420B
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/FWfz85AvqzVTjqkPqecMFz7pz5I.roa
Signing time: Sat 01 Jan 2022 13:00:49 +0000
ROA not before: Sat 01 Jan 2022 13:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 680
IP address blocks: 193.16.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317342219 (0x12ea420b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Jan 1 13:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1567f3f3902fab35538ea90fa9e70c173ee9cf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:b3:b4:8b:a4:b2:a8:fc:39:37:1e:fa:65:
e9:e4:fb:46:d8:75:01:0d:d2:2b:7b:e0:b9:67:28:
24:8e:c9:df:4d:92:ba:95:8b:c9:98:88:23:93:81:
36:26:8b:9f:8f:1e:d9:cb:d3:85:eb:d1:14:b8:d9:
35:d6:58:5c:1f:f0:ee:8e:2a:dd:13:19:06:5c:d9:
c3:6c:f1:86:f7:17:c7:9a:10:1a:ac:73:25:a2:a8:
c0:7d:a9:61:23:34:3d:f9:20:6d:ae:ab:9d:af:c4:
16:51:f0:17:7c:db:9d:b7:74:79:f2:2e:e0:ad:b0:
99:8d:87:5f:b2:dd:c5:6f:6a:ab:7e:9a:3a:0b:8c:
00:f8:ec:e7:b6:a9:79:55:71:98:15:c4:f4:94:5e:
e4:38:14:54:f9:7c:d8:a7:2d:15:f3:65:91:f1:d0:
2d:1d:82:66:e9:71:1c:82:42:35:40:ca:ff:d9:d2:
c0:fd:7f:01:2a:42:17:74:4a:16:d8:df:e3:86:81:
ff:13:86:a7:02:2a:30:24:68:2f:20:b2:59:73:00:
a7:d6:87:c3:65:93:f8:9f:24:d5:b6:e9:99:6e:df:
bb:49:f1:40:4e:9f:de:9c:7d:c2:9d:27:a3:c2:e8:
50:e5:fa:6d:91:0a:e3:5c:0b:99:3c:d1:bc:60:43:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:F3:F3:90:2F:AB:35:53:8E:A9:0F:A9:E7:0C:17:3E:E9:CF:92
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/FWfz85AvqzVTjqkPqecMFz7pz5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.4.0/22
Signature Algorithm: sha256WithRSAEncryption
18:98:ab:a6:f8:30:62:e6:b3:c4:6a:4c:d1:3f:1a:4e:b0:32:
1a:1b:ff:85:f7:63:1f:01:65:99:d5:10:1a:8c:9b:42:a4:57:
ba:7a:97:cc:fc:69:3a:de:71:fe:20:30:33:53:94:42:fb:78:
0f:7c:66:18:e7:73:dc:87:e1:51:bb:53:fe:40:5f:7d:9d:4a:
83:8f:16:ed:8d:bd:1d:2e:a1:f1:d9:14:db:51:e7:e0:c6:2a:
58:07:2f:8c:1e:41:39:5f:f4:28:7f:86:41:ce:ef:0b:d5:60:
8e:0a:e8:9f:1f:36:5e:81:fd:70:d8:a1:e0:ac:e4:8e:c8:94:
af:32:54:91:18:82:4a:d0:0c:73:88:08:31:da:1a:93:d4:1d:
9c:56:57:1c:70:f7:b1:b0:28:c5:d0:c8:3d:00:95:cd:15:55:
a2:53:7b:10:db:9c:1e:ea:e2:5c:58:40:78:73:0a:5d:ba:27:
86:13:31:f0:cc:fa:c5:19:23:1e:5a:80:c8:54:d9:65:6e:20:
2c:37:aa:21:63:dc:78:63:85:6c:a8:61:ad:ba:41:e8:dd:55:
14:0a:c7:83:47:f1:8e:6b:0f:13:9f:42:e2:48:47:b4:bb:f1:
68:f2:f8:1d:e9:8f:97:44:c2:9d:19:95:8d:25:b9:69:83:42:
38:ca:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:24 2024 by rpki-client on console-ams.rpki-client.org