Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/fyjg6xdPy5DvXAsiXdHA9sekqNs.roa
File: fyjg6xdPy5DvXAsiXdHA9sekqNs.roa (raw, json)
Hash identifier: lf1llS/hBuvjF9S77f+7qjK1Eq7FT8WyVxdOBSsfDA4=
Subject key identifier: 7F:28:E0:EB:17:4F:CB:90:EF:5C:0B:22:5D:D1:C0:F6:C7:A4:A8:DB
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 04FD45F5
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/fyjg6xdPy5DvXAsiXdHA9sekqNs.roa
Signing time: Sat 01 Jan 2022 15:05:19 +0000
ROA not before: Sat 01 Jan 2022 15:05:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1836
IP address blocks: 193.8.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83707381 (0x4fd45f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: Jan 1 15:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f28e0eb174fcb90ef5c0b225dd1c0f6c7a4a8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:f0:0d:9b:9f:a9:ce:1c:7b:e2:3a:b0:cc:
f8:f9:62:72:72:87:9f:cb:5b:17:8a:6a:25:fa:6e:
9c:5a:05:3a:1f:e6:ec:d3:41:fb:fb:b9:f4:ec:e1:
e7:d4:46:73:47:0e:df:b5:ec:54:d0:17:af:67:e6:
57:ed:5d:eb:41:11:c7:2d:1f:99:30:7a:b8:c1:ac:
6f:58:6c:34:94:1f:21:99:54:6d:05:79:bc:cc:a6:
20:f3:71:0c:41:c8:86:e9:a4:94:ea:f4:78:fa:da:
5a:fc:46:80:8a:81:35:69:bf:83:86:a4:a8:7a:20:
5b:f8:0c:42:54:72:77:93:85:65:c0:3c:8e:4d:f3:
87:78:1b:ec:80:42:51:cf:44:8c:ca:9f:37:66:ee:
2d:76:f9:93:f4:9f:1c:28:11:d6:9b:bf:3c:e3:1a:
bb:ee:f8:a7:66:6b:a8:e4:30:1d:2d:bc:86:37:ab:
32:ba:87:24:88:cc:50:26:4e:21:ba:01:d0:82:34:
6c:6d:12:07:0b:9d:d9:d8:9e:b0:5b:13:c8:f1:38:
12:c5:e4:c6:0b:9a:5d:31:76:ee:78:a0:87:df:ae:
ab:69:a1:5c:93:f9:a1:26:47:4d:e9:c7:9c:55:7d:
a4:b9:c5:1e:a1:42:eb:60:09:b9:54:ea:d7:9e:0f:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:28:E0:EB:17:4F:CB:90:EF:5C:0B:22:5D:D1:C0:F6:C7:A4:A8:DB
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/fyjg6xdPy5DvXAsiXdHA9sekqNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.252.0/24
Signature Algorithm: sha256WithRSAEncryption
31:12:2d:5f:02:67:f6:1c:40:b4:6e:ec:c8:cd:96:60:82:d2:
52:7e:8f:1c:6a:46:e2:fd:cb:eb:fd:89:e2:fe:40:d9:56:9d:
a4:9e:7b:b3:5b:3b:50:2c:82:44:78:88:07:4e:6f:98:00:3a:
72:ef:95:71:52:6d:13:7f:5d:bb:56:db:53:0b:7e:6a:18:7f:
3d:9d:cb:df:64:e3:ad:26:8c:f0:32:a7:e6:4a:d8:2d:06:99:
0d:66:49:df:66:5a:ab:ed:c9:9d:b1:ba:a3:cc:49:4a:7f:ac:
94:81:8d:c5:49:21:86:28:0a:05:09:cf:6d:8b:da:fc:2d:21:
0e:0f:3a:a6:47:82:1a:31:5a:eb:af:66:f1:10:b1:4f:b7:24:
cc:8c:ae:45:52:d4:13:bf:c0:ed:bc:91:04:92:30:22:17:70:
a8:64:d4:1b:7f:39:6f:09:f5:3f:9a:bb:cc:06:60:43:56:97:
5b:3e:be:d2:bb:b7:7f:77:55:dc:da:44:ba:ad:49:73:65:b1:
84:bb:96:7c:11:2d:95:e5:6b:76:93:4f:e3:db:c8:ab:c6:2d:
c3:b0:f7:57:15:bb:ab:43:7b:9a:24:4e:34:b5:bd:ed:bb:71:
4f:cd:af:b7:2f:a6:c6:f6:52:20:2b:c8:80:2d:a1:69:6c:d4:
36:43:08:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:14 2024 by rpki-client on console-fra.rpki-client.org