Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/fpshbI7l09dkggVpbI2NXZZZ_oY.roa
File: fpshbI7l09dkggVpbI2NXZZZ_oY.roa (raw, json)
Hash identifier: ml5a6MXdmhpIrHcZ7aykjdl5x+dY0LmvgOgp/Sk1RIc=
Subject key identifier: 7E:9B:21:6C:8E:E5:D3:D7:64:82:05:69:6C:8D:8D:5D:96:59:FE:86
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 0B7E9C48
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/fpshbI7l09dkggVpbI2NXZZZ_oY.roa
Signing time: Sat 01 Jan 2022 12:05:53 +0000
ROA not before: Sat 01 Jan 2022 12:05:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25478
IP address blocks: 85.112.96.0/19 maxlen: 24
2a00:1b30:8000::/33 maxlen: 33
2a00:1b30::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192846920 (0xb7e9c48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Jan 1 12:05:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e9b216c8ee5d3d7648205696c8d8d5d9659fe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:48:d5:2d:12:a3:df:7e:eb:c3:c0:5b:37:
ed:5f:99:bb:07:bd:2b:7f:a6:2b:e6:e2:85:14:45:
41:d1:8c:54:fb:ce:02:7e:72:35:86:fc:5d:61:02:
c7:f7:8b:85:53:b9:37:1d:f9:9f:37:b0:a8:73:e0:
e3:de:fd:85:04:a2:b2:12:d6:f0:dd:a4:a4:ed:72:
48:6c:c7:5a:b2:48:de:8b:9a:9f:a2:ed:94:07:73:
67:78:5a:37:6b:14:f2:04:c3:bb:83:65:7d:ff:02:
07:c8:85:0f:89:f8:03:2e:2d:b4:6a:45:25:37:7b:
60:94:af:be:e0:1a:c2:36:8c:ba:b1:18:03:7a:3c:
de:de:99:b6:fb:4a:b1:7f:5b:f7:8d:74:59:25:71:
6b:4f:36:3f:63:bb:27:19:a7:75:59:5f:70:93:1f:
c7:81:0f:4c:25:90:c9:75:94:87:96:b7:54:3d:a3:
7c:74:2b:13:e4:8d:e4:73:11:4a:f8:90:82:de:f6:
ff:bd:de:8d:5d:fc:6c:af:2e:9a:dd:f2:16:1d:f2:
3c:ff:8f:65:e9:55:60:30:d3:af:4d:73:79:2c:e7:
5f:da:25:22:e1:0e:df:93:f3:87:b1:0b:40:69:30:
fc:a7:28:de:4b:20:7f:0d:e2:61:69:24:5d:fd:09:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:21:6C:8E:E5:D3:D7:64:82:05:69:6C:8D:8D:5D:96:59:FE:86
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/fpshbI7l09dkggVpbI2NXZZZ_oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.96.0/19
IPv6:
2a00:1b30::/32
Signature Algorithm: sha256WithRSAEncryption
03:fc:9e:5e:2a:96:b2:e9:e5:b3:d5:a9:a7:4e:5c:8e:52:68:
c4:5a:29:f0:84:9a:4d:fb:4b:61:a1:10:e4:01:c1:b4:0a:f0:
2f:ee:0f:59:7a:24:db:d3:7f:0c:f6:21:d2:5c:55:c8:bd:b3:
27:92:9f:90:5b:6e:3f:a5:e4:fd:27:b4:76:96:12:67:d1:dc:
b2:d7:02:a3:1e:43:dd:f5:e4:26:6c:1c:79:66:3b:02:2c:b9:
59:f8:21:61:b9:51:f4:45:23:f8:4d:28:dd:86:a9:b9:c8:52:
e9:af:55:d0:aa:60:46:94:c1:2b:89:af:47:92:64:02:11:fb:
dd:50:7c:a9:aa:99:4d:f1:30:9d:62:14:66:55:f0:af:6f:36:
e1:c6:f3:8c:dd:e8:ea:d7:30:15:7c:d8:c9:fb:6d:0d:ca:a3:
20:05:4a:17:96:ad:c2:e1:a5:19:3f:cb:1d:f5:43:30:cf:51:
47:a8:9a:e2:95:9c:b0:3b:23:41:0c:5e:58:4c:20:a7:86:ef:
62:5d:84:29:02:05:05:68:a1:e9:94:29:7b:9e:78:e5:83:c1:
2d:48:ed:3a:69:10:b0:91:47:cb:21:96:e0:4c:a0:b5:9c:67:
13:74:e8:d7:a1:5e:2a:fc:20:71:0f:10:d5:65:98:0d:97:4e:
52:0a:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:33 2024 by rpki-client on console-fra.rpki-client.org