Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/FPJJ8Zw5AeRCdSdPaj_QcKtkXqc.roa
File: FPJJ8Zw5AeRCdSdPaj_QcKtkXqc.roa (raw, json)
Hash identifier: iNCy7lvd5WywvIQK23iUGYmty2qOH9aiC00QuysYtBA=
Subject key identifier: 14:F2:49:F1:9C:39:01:E4:42:75:27:4F:6A:3F:D0:70:AB:64:5E:A7
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 017DDF08
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/FPJJ8Zw5AeRCdSdPaj_QcKtkXqc.roa
Signing time: Sun 03 Apr 2022 23:36:19 +0000
ROA not before: Sun 03 Apr 2022 23:36:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.85.240.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25026312 (0x17ddf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Apr 3 23:36:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14f249f19c3901e44275274f6a3fd070ab645ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:2c:16:19:31:8f:11:f7:c4:eb:ab:9c:e8:
a7:1b:bc:56:12:c7:70:dd:bb:cc:4b:3b:dd:17:41:
8c:d0:7e:39:70:63:f0:da:bb:98:61:63:10:3b:84:
cf:6b:89:e6:25:2b:73:49:6e:6a:aa:ec:78:d3:16:
4f:16:32:f4:9d:df:d8:1c:42:e7:60:42:10:79:4e:
a7:3c:0e:b2:0d:57:f4:1e:6d:8c:fa:16:78:9d:b0:
f2:7e:ab:da:e8:98:3a:20:3d:ea:de:c5:52:b3:f4:
24:6e:5b:36:59:eb:0f:07:e3:4f:c0:23:4d:30:6d:
b5:eb:e8:3f:85:50:c5:13:65:42:8a:56:63:2a:97:
31:51:28:67:3a:b2:f7:7a:70:cc:ca:e2:48:96:9a:
99:6e:31:45:1b:2d:b7:65:8e:68:54:cf:43:f1:17:
7f:8a:f7:5e:c9:43:d6:35:56:5d:3a:c6:d1:ef:42:
c6:13:5b:a0:73:a2:c1:5a:25:c3:59:db:af:1b:00:
b3:1d:20:b6:46:a4:cd:bc:68:21:e9:12:f9:78:71:
a2:fc:e6:5c:ce:4a:d6:67:32:03:04:2d:fb:f0:53:
03:e5:64:ef:59:33:70:b3:c7:8b:65:d3:d6:95:55:
39:eb:14:9b:03:2d:a0:1f:de:72:63:ac:67:46:42:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F2:49:F1:9C:39:01:E4:42:75:27:4F:6A:3F:D0:70:AB:64:5E:A7
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/FPJJ8Zw5AeRCdSdPaj_QcKtkXqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.240.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:17:db:1d:d7:5d:29:04:f8:aa:d5:f0:dc:7d:f5:4b:d5:f6:
94:84:37:39:c1:02:b9:30:f9:bf:ad:04:a6:96:47:10:67:78:
5c:cf:5b:97:23:e6:bb:59:5e:ac:eb:08:97:3c:2a:d4:96:77:
9b:3d:68:89:cd:11:18:0d:a4:6f:1b:f5:45:e2:d5:31:60:68:
e9:60:43:6f:0f:df:3f:36:79:a2:16:21:76:98:5f:b2:fc:f8:
29:68:2f:48:0a:4f:74:9a:c5:58:fb:fc:82:3a:33:d0:72:8a:
58:d9:46:b3:ff:83:2d:13:4d:19:9b:0a:a0:6c:e4:20:33:51:
b9:52:2c:73:7c:2c:10:cf:c5:7b:7a:55:25:02:43:32:0e:dd:
58:4a:62:ca:47:aa:50:e0:74:1c:89:b0:2d:45:5c:19:ee:38:
8f:15:45:23:1d:42:cc:38:1c:d7:28:79:2d:8d:a0:15:73:51:
23:ef:cc:17:85:04:d4:37:87:57:17:84:8f:ce:4b:be:ad:66:
94:a2:f2:d7:d1:cd:ef:95:1a:b0:2d:9d:2b:fd:3c:88:06:bd:
7f:26:4a:cc:7c:23:2c:d6:17:8a:4a:86:a7:ba:70:7b:1c:b0:
9f:1b:0b:2a:1a:8f:84:68:f3:3a:39:3d:b4:39:d6:f2:a4:00:
5f:f9:40:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:59 2024 by rpki-client on console-fra.rpki-client.org