Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/_K1_fVPWbGyZcADDe52TVIodq_E.roa
File: _K1_fVPWbGyZcADDe52TVIodq_E.roa (raw, json)
Hash identifier: QuxU3NIhgsSZHQDAfRzUmD/GyVWSMfpkIhO39LA7q1Q=
Subject key identifier: FC:AD:7F:7D:53:D6:6C:6C:99:70:00:C3:7B:9D:93:54:8A:1D:AB:F1
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 01839D8F29B654B6BECED7CFD0A04F631F3E
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/_K1_fVPWbGyZcADDe52TVIodq_E.roa
Signing time: Mon 03 Oct 2022 11:15:48 +0000
ROA not before: Mon 03 Oct 2022 11:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50304
IP address blocks: 86.111.48.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:8f:29:b6:54:b6:be:ce:d7:cf:d0:a0:4f:63:1f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Oct 3 11:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcad7f7d53d66c6c997000c37b9d93548a1dabf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:79:d9:10:72:85:6a:37:f9:93:da:fb:cd:
1f:2a:37:33:37:d6:22:e2:b4:49:83:a5:01:4e:eb:
8a:cc:11:47:b2:06:02:50:82:ae:7c:b6:3f:14:60:
c9:83:45:b3:c4:ee:f7:c2:32:12:92:8d:53:e0:87:
cd:33:4a:fb:75:85:03:98:ed:6b:b1:09:ea:39:61:
9e:5e:99:75:46:cc:81:80:ef:30:aa:b8:79:53:da:
7f:fd:3e:7a:a8:48:ed:96:c2:35:59:79:ee:b3:77:
de:81:99:0d:5e:12:de:e6:e7:57:c6:ab:41:fd:f2:
55:18:8c:42:54:f6:e6:46:6e:98:dd:2e:16:3f:7d:
f6:bf:4f:42:e4:cb:dc:eb:6f:be:63:76:0b:d6:7d:
03:8d:ed:7e:92:11:6d:f5:e7:9f:59:f7:14:ef:c5:
19:ab:94:84:f4:82:96:a4:84:c4:51:71:11:af:12:
26:25:02:82:b6:d4:5b:da:ad:b8:26:c6:c0:80:b2:
69:b2:1f:5d:6c:e6:23:43:1c:fc:b1:c5:3d:1d:4f:
76:9a:83:d5:39:34:4d:8d:0d:01:f3:13:bc:ca:f5:
5a:e0:73:5d:97:38:10:bd:86:59:71:2a:32:4e:c7:
97:e6:7a:28:df:ab:61:81:68:55:27:27:fc:d1:32:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AD:7F:7D:53:D6:6C:6C:99:70:00:C3:7B:9D:93:54:8A:1D:AB:F1
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/_K1_fVPWbGyZcADDe52TVIodq_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:23:0a:bd:4f:ca:85:52:b6:61:fa:0b:9d:20:09:8c:af:a9:
af:be:4c:8d:f9:49:25:77:9b:b5:be:78:91:80:7f:32:a8:76:
7f:ce:eb:93:cb:63:f5:2f:f6:e1:fe:84:96:c7:11:f2:d6:fa:
8b:bd:11:09:0e:f1:6b:14:74:9d:a7:ef:5e:0f:80:a5:5c:d2:
7a:87:08:42:81:b0:65:2a:0a:85:23:bd:ec:f5:7d:eb:ed:00:
63:0f:28:92:17:92:06:0d:6f:7e:4b:49:3c:d8:c2:f9:c9:04:
24:4a:38:2a:9c:5a:7e:ff:80:43:48:fe:0a:9e:ae:b8:8e:cd:
d3:9f:a5:04:65:ef:d0:09:b0:d5:0c:97:bb:0e:71:6f:ab:3d:
0c:85:ba:1d:45:e7:ed:06:3a:36:ec:ff:ff:3f:5b:af:44:af:
c8:2c:b1:d0:1a:70:2f:82:8d:92:ee:b3:de:58:32:7b:93:66:
d2:ca:73:2e:af:f1:6b:f0:ef:0f:4f:62:c4:c9:d4:b8:6a:45:
96:12:a5:16:95:23:89:91:eb:c8:89:b8:f3:a5:97:ae:b3:f7:
83:dc:6f:73:0d:9d:8b:b6:3c:07:81:14:4f:1c:dc:7d:88:ca:
21:08:7f:aa:51:b4:7f:82:7f:a4:c1:57:b1:d3:0c:dc:0a:89:
64:09:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:54 2024 by rpki-client on console-ams.rpki-client.org