Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/fj_OkBAMh8wfD1s-dy9UcovA2SY.roa
File: fj_OkBAMh8wfD1s-dy9UcovA2SY.roa (raw, json)
Hash identifier: 7afAWlLe5nQyo9xAc0jtldJ4Tvb0/UNL87g7n/Ti2cw=
Subject key identifier: 7E:3F:CE:90:10:0C:87:CC:1F:0F:5B:3E:77:2F:54:72:8B:C0:D9:26
Certificate issuer: /CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Certificate serial: 05108C7F
Authority key identifier: 42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/fj_OkBAMh8wfD1s-dy9UcovA2SY.roa
Signing time: Sat 01 Jan 2022 10:59:42 +0000
ROA not before: Sat 01 Jan 2022 10:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202105
IP address blocks: 185.206.135.0/24 maxlen: 24
185.206.133.0/24 maxlen: 24
185.206.134.0/24 maxlen: 24
185.206.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84970623 (0x5108c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e4605bc566ed910cbfe28bc2273db99ae6a68d
Validity
Not Before: Jan 1 10:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e3fce90100c87cc1f0f5b3e772f54728bc0d926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:7d:6d:2d:5a:99:b5:bf:c5:73:9c:62:a4:
66:c6:e3:ab:c8:ab:b6:b7:87:bf:48:e8:67:34:a6:
58:d8:c8:14:40:c0:9d:df:cc:a0:5d:6d:d9:a0:9e:
6c:b6:aa:35:5a:8b:cd:ee:6e:82:fe:38:a8:6e:2d:
ad:f8:5b:cd:24:89:ea:25:db:e2:c6:a3:88:d1:f9:
2f:83:e6:74:ff:2e:9b:af:a8:c2:4d:1b:67:06:25:
e2:1d:ae:a8:94:dc:ca:30:6b:4e:9d:eb:f1:c8:14:
e1:ee:18:c7:f6:5e:ec:c7:5c:8f:0a:4e:21:32:88:
48:53:17:8e:a0:00:38:b9:a0:5b:f0:fd:fc:e7:9e:
d0:4e:91:22:53:1a:9e:27:03:a4:92:8b:49:04:af:
a3:23:3b:bc:57:51:af:65:e7:bf:c2:50:41:8c:d8:
af:61:fd:ae:90:55:fd:b5:b1:7c:55:53:8f:d9:cf:
ea:6c:ae:e7:13:01:32:83:f5:8b:47:36:ae:98:a6:
c0:8e:c8:c4:b3:e6:49:02:7a:c4:05:7d:36:3f:8a:
a4:20:1d:1a:d2:28:2e:dd:1f:ab:10:23:6a:d9:ed:
97:cc:77:20:d6:d4:9f:a9:c7:98:94:1e:01:39:7b:
9e:0c:45:1d:86:79:47:ef:97:54:c2:c5:ad:8d:30:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:CE:90:10:0C:87:CC:1F:0F:5B:3E:77:2F:54:72:8B:C0:D9:26
X509v3 Authority Key Identifier:
keyid:42:E4:60:5B:C5:66:ED:91:0C:BF:E2:8B:C2:27:3D:B9:9A:E6:A6:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/fj_OkBAMh8wfD1s-dy9UcovA2SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/511d83-7531-4430-a839-0ccc703fe471/1/QuRgW8Vm7ZEMv-KLwic9uZrmpo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:8a:5c:03:c6:04:18:92:b5:4c:97:73:a6:d0:85:00:75:1d:
1c:9e:f0:6a:d0:e7:f5:74:d5:83:8b:6a:63:18:d1:da:c8:d8:
41:f1:24:f7:fa:25:31:4a:6a:ee:de:2d:16:72:26:32:af:ed:
3b:e2:59:6e:ff:6a:f2:ab:b2:10:cd:68:29:8e:d1:80:2e:de:
65:e9:c4:26:5d:24:35:22:54:88:f4:b9:dc:1d:d7:e2:4a:fc:
7d:35:90:14:4b:40:a9:e4:6a:fa:f9:34:a4:aa:55:11:ec:7d:
c0:fa:e4:3a:78:a2:43:ec:12:88:ea:72:ae:8a:7f:be:fd:35:
ab:37:7d:40:fc:f7:13:b4:78:4d:79:8b:87:15:b9:9b:bf:4c:
30:da:41:22:35:49:30:bd:63:e7:f2:24:fb:30:74:eb:7e:5b:
de:3b:68:71:95:0b:0d:9c:bd:73:bb:37:2c:f6:f9:61:ea:7d:
d6:aa:c4:d2:d0:7d:91:1c:73:d7:3f:af:ff:64:73:6d:df:cf:
73:01:6f:bb:21:8d:b3:e7:41:ce:87:09:92:af:c5:17:57:f5:
a0:c4:ea:27:19:1e:39:f3:16:44:2d:e8:b6:24:5e:a8:0f:c4:
42:e9:91:ad:5d:c7:8b:d4:af:ba:a9:01:85:22:f7:3a:f7:1f:
8d:25:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:13 2024 by rpki-client on console-ams.rpki-client.org