Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/in6UAiH1Nagn7Vk8amygetVBTgo.roa
File: in6UAiH1Nagn7Vk8amygetVBTgo.roa (raw, json)
Hash identifier: 79VxFhOssY+N5GaK941/+PYYezZOWqGurZgHPIA1mvc=
Subject key identifier: 8A:7E:94:02:21:F5:35:A8:27:ED:59:3C:6A:6C:A0:7A:D5:41:4E:0A
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 08253E78
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/in6UAiH1Nagn7Vk8amygetVBTgo.roa
Signing time: Sat 01 Jan 2022 01:57:11 +0000
ROA not before: Sat 01 Jan 2022 01:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208662
IP address blocks: 45.86.105.0/24 maxlen: 24
2a0f:95c0:4000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136658552 (0x8253e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jan 1 01:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a7e940221f535a827ed593c6a6ca07ad5414e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:42:2b:78:88:8f:b6:61:35:93:6d:30:2a:
b9:bd:35:1d:05:a0:10:e8:1e:f3:be:09:38:cd:58:
ba:d2:e3:af:98:c8:2d:1f:50:b8:d3:c4:f3:42:8a:
a6:db:86:4e:4e:22:f1:3b:c4:e6:ca:0b:39:bd:06:
40:05:f2:c0:7f:30:c2:d9:53:94:a2:46:80:d2:4a:
47:0d:64:29:50:eb:25:55:a2:2f:88:b7:d3:7d:09:
20:19:28:0e:3f:22:4a:44:07:da:e9:26:ce:d6:70:
0f:67:95:09:41:ed:50:d7:1b:a9:d3:f3:d2:8d:5a:
aa:a8:ba:77:34:5f:19:71:86:c3:83:a5:98:de:f9:
56:8b:6b:55:a0:79:f8:f4:63:0a:99:10:a1:19:38:
61:43:ba:30:61:69:6d:c6:82:af:fa:be:e5:90:96:
39:15:87:ce:2d:22:5a:3a:66:9f:72:38:ab:ba:95:
01:a8:94:62:62:e5:8b:fc:ee:54:96:3f:63:16:cd:
13:96:22:df:8f:fc:f4:dc:d4:ae:56:66:11:cd:43:
3a:9e:14:0c:3d:fb:13:49:eb:74:dc:26:dd:cc:1c:
0b:96:00:55:7a:6d:10:e5:c2:7c:04:00:3f:94:22:
47:83:c7:7c:1d:e3:df:51:7f:b3:b6:2a:af:0a:93:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:94:02:21:F5:35:A8:27:ED:59:3C:6A:6C:A0:7A:D5:41:4E:0A
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/in6UAiH1Nagn7Vk8amygetVBTgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.105.0/24
IPv6:
2a0f:95c0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
86:00:01:2c:c9:1f:00:8a:ef:7f:19:ff:cc:ba:39:06:a4:c7:
6c:b2:ca:a9:4e:d7:ca:07:b7:c5:38:ab:4a:f6:7f:b4:84:60:
44:f5:ba:0d:ed:c1:86:2c:d7:58:aa:b1:4f:9e:f1:32:fa:be:
e4:a8:bf:c5:e7:7b:fc:27:90:e5:03:7b:32:ff:5d:ec:53:78:
d5:bb:f7:7e:45:15:fb:e3:4e:96:8c:b1:ae:bc:aa:01:c1:ac:
7f:0c:e7:bc:33:71:1d:13:ae:04:ad:0e:eb:d4:dd:98:69:34:
8b:25:19:59:a9:30:ee:4b:c2:0b:31:60:ca:92:c2:d2:6f:59:
2e:b3:d7:01:61:91:d0:3d:b1:4a:96:65:94:83:5c:0a:33:bc:
d5:9b:98:93:3b:6b:6f:93:22:1a:1c:94:ab:62:d0:ee:4c:eb:
04:fa:e5:23:7b:62:26:3a:42:21:26:82:cc:12:27:5b:d6:13:
dc:d5:e4:2c:5a:55:9a:6d:7e:db:4a:e4:db:d6:f7:ec:a7:34:
d8:57:09:76:35:d7:44:f1:76:29:f0:57:7b:30:5a:a0:c0:1e:
72:85:d2:72:39:fa:95:e9:dc:dc:b8:fc:34:ed:aa:4f:2c:40:
13:fc:e1:16:f7:fb:88:05:10:e1:11:cc:40:8f:77:60:b9:70:
60:2e:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:53 2024 by rpki-client on console-ams.rpki-client.org