Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/fsbpFW8-Qil65wykVTxgw3ywdPk.roa
File: fsbpFW8-Qil65wykVTxgw3ywdPk.roa (raw, json)
Hash identifier: 6yAKddhfDJh7NxroX1hEqHAUHZzaySbXbRVGbcCX7oo=
Subject key identifier: 7E:C6:E9:15:6F:3E:42:29:7A:E7:0C:A4:55:3C:60:C3:7C:B0:74:F9
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 01849A1D34FA4D20F91C8D06598DD0955184
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/fsbpFW8-Qil65wykVTxgw3ywdPk.roa
Signing time: Mon 21 Nov 2022 12:15:16 +0000
ROA not before: Mon 21 Nov 2022 12:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12657
IP address blocks: 212.72.64.0/19 maxlen: 19
212.102.160.0/19 maxlen: 19
213.131.192.0/19 maxlen: 19
2001:1579:2::/48 maxlen: 48
2001:1579::/32 maxlen: 48
2001:1578:ff::/48 maxlen: 48
2001:1579::/48 maxlen: 48
2001:1578::/29 maxlen: 40
2001:1579:1::/48 maxlen: 48
2001:1578::/32 maxlen: 40
2001:1578::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:1d:34:fa:4d:20:f9:1c:8d:06:59:8d:d0:95:51:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Nov 21 12:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ec6e9156f3e42297ae70ca4553c60c37cb074f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:e1:1c:80:9e:97:8f:ce:14:b8:76:71:8b:
7e:47:9b:e9:79:d5:f5:76:6f:5f:11:c9:1f:ec:e6:
42:10:94:ab:dc:24:49:d1:3f:2f:54:2b:e4:77:71:
ef:c4:26:44:f5:c0:09:91:9d:7b:d6:19:d9:99:e3:
bd:32:59:94:79:8f:a6:8a:1b:67:64:cc:5e:48:01:
0e:b0:de:b7:e7:37:b1:a5:e2:ab:9e:45:df:33:f8:
5e:57:6a:19:f7:61:00:fb:9c:bc:72:f8:8d:62:bc:
2c:f7:c2:ce:65:d3:a6:f6:63:83:15:9f:64:38:a3:
ab:09:4b:ac:a4:d8:50:1c:58:11:d3:46:77:96:c8:
f2:49:dd:bd:52:3f:cb:de:c9:9d:fc:25:a2:b7:f5:
ec:9c:8a:d8:9c:2d:9f:5b:6d:20:88:eb:9c:5e:b3:
62:76:ed:ed:10:12:68:51:96:df:b0:41:0f:90:75:
12:fb:17:30:17:d4:d4:76:b6:0a:f6:df:77:d9:3b:
65:cf:f7:a9:5b:35:01:82:7d:14:9b:28:e7:9b:a4:
d9:7d:c0:2b:de:da:8c:1c:e4:9f:f2:01:39:3b:dd:
b5:59:0a:ac:a3:c4:d4:37:74:f4:58:56:14:47:aa:
f8:b9:70:bc:11:9b:27:07:f0:11:65:22:18:e8:ce:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:E9:15:6F:3E:42:29:7A:E7:0C:A4:55:3C:60:C3:7C:B0:74:F9
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/fsbpFW8-Qil65wykVTxgw3ywdPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.64.0/19
212.102.160.0/19
213.131.192.0/19
IPv6:
2001:1578::/29
Signature Algorithm: sha256WithRSAEncryption
17:93:91:45:fa:e3:c4:32:66:59:18:a7:12:c4:75:d6:b5:5f:
96:f1:65:19:ad:84:ec:82:f6:94:90:8e:5a:3b:bb:3e:0e:7f:
87:b0:ec:b7:ed:cd:95:15:4b:65:80:e9:f3:ac:ff:47:4b:71:
c2:44:cb:76:21:0b:9a:b0:c2:6a:ae:9b:60:2b:01:64:8d:bd:
0b:d2:68:10:35:41:2d:53:49:3e:fb:cb:99:16:c9:96:67:39:
58:25:43:ce:40:dd:fb:c8:dd:02:a0:e8:de:82:e4:08:da:df:
4c:96:f6:a4:4b:9d:17:82:9a:16:88:34:ee:00:67:be:2c:b7:
bd:b9:0d:be:31:b2:51:fc:94:29:28:d6:50:20:56:36:6c:75:
91:d1:19:e3:cc:fb:4d:8c:96:38:85:0a:fc:b5:35:29:73:7b:
b4:00:d5:94:a9:a1:8c:55:14:9b:d3:21:6b:d8:fb:5e:ba:4b:
d6:3d:ad:8e:3c:da:e8:d9:6b:a1:38:3b:57:85:f0:64:88:23:
36:ec:9a:58:20:82:26:a2:a2:22:56:9e:f7:54:38:7a:a7:c4:
eb:9b:09:8c:23:43:41:2d:23:7e:90:a5:4d:2a:6d:26:0a:3f:
f2:d1:69:89:63:d8:98:33:f2:f2:9a:7c:25:0d:bb:4e:8f:5f:
be:81:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:48 2024 by rpki-client on console-fra.rpki-client.org