Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/F--IvKjU2IFqh4fD7-B7EZnCwRI.roa
File: F--IvKjU2IFqh4fD7-B7EZnCwRI.roa (raw, json)
Hash identifier: kLWaKIS2Y+TjXKUd0a5gIYpH6x5QfC0HlTC07KgnQsY=
Subject key identifier: 17:EF:88:BC:A8:D4:D8:81:6A:87:87:C3:EF:E0:7B:11:99:C2:C1:12
Certificate issuer: /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial: 0187A2EB4A198D0CE73015638C714B0E3E65
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/F--IvKjU2IFqh4fD7-B7EZnCwRI.roa
Signing time: Fri 21 Apr 2023 08:25:41 +0000
ROA not before: Fri 21 Apr 2023 08:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 91.236.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:eb:4a:19:8d:0c:e7:30:15:63:8c:71:4b:0e:3e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Validity
Not Before: Apr 21 08:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17ef88bca8d4d8816a8787c3efe07b1199c2c112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8e:a1:f5:50:13:85:e5:6d:47:22:08:db:97:
1f:75:a8:f4:07:37:76:00:dc:c4:56:f3:50:56:cd:
1b:0c:18:9c:83:46:52:fa:b6:7e:16:4b:1f:65:c6:
f8:2d:9c:9a:53:7f:8e:45:c9:bc:87:a3:6f:4b:d9:
34:e3:8c:aa:d2:ec:19:76:eb:09:aa:65:31:08:03:
1d:18:3c:29:dc:37:22:35:8e:54:0d:c6:85:6e:8f:
c6:33:f0:67:a3:3b:3e:6a:9a:a9:0e:0d:e3:4d:5a:
c8:34:32:c4:7b:bd:ad:b9:02:0a:ed:09:fc:75:73:
c2:7a:39:6c:b9:22:08:b8:e8:5b:d5:40:df:8f:df:
44:2e:d7:84:f9:06:a3:e3:d8:01:f0:f9:be:a3:ce:
ad:d5:de:c9:30:eb:1a:f6:4f:c5:29:08:e4:95:8b:
00:c9:50:41:55:12:3a:ff:89:96:87:32:da:f3:69:
36:bc:98:f4:49:c2:b7:47:f5:2c:3e:c3:9d:76:39:
79:d1:63:28:0c:3b:8e:79:2a:a7:a2:49:53:05:67:
5e:02:38:99:a5:5e:51:9e:9c:22:87:af:03:55:3f:
d1:06:ad:ba:2c:0d:91:be:3b:a9:a4:38:d8:a7:0f:
b0:9a:cf:00:ed:c9:a8:c1:be:ad:f4:5c:8b:c2:d4:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:88:BC:A8:D4:D8:81:6A:87:87:C3:EF:E0:7B:11:99:C2:C1:12
X509v3 Authority Key Identifier:
keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/F--IvKjU2IFqh4fD7-B7EZnCwRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:dc:ca:9a:37:72:93:05:1a:eb:86:18:e3:10:59:e5:3a:03:
e0:6e:9f:e9:52:ca:16:df:fd:de:31:0e:cb:29:65:8d:96:a0:
95:e8:de:b7:0d:05:0a:45:19:03:06:dc:c0:0a:e4:5c:3a:5a:
b3:2e:70:22:c0:f4:d1:69:f9:ff:e7:ec:d2:27:dc:b7:93:fa:
39:6a:45:69:82:d3:0b:48:1a:7f:6f:8a:2f:ad:8f:e1:0c:6e:
d6:4b:28:f8:f9:81:f6:f0:0c:52:d5:f5:16:74:a4:c4:7d:f3:
13:09:63:62:cc:18:91:53:21:0d:44:c7:07:02:6e:70:7e:c0:
d9:cb:77:42:32:00:b8:29:53:7c:14:8b:32:4c:48:38:52:7c:
9d:b2:19:d5:22:0b:e9:16:aa:c4:22:37:d1:a6:c6:d7:a4:78:
15:fb:d6:28:71:d5:bd:f1:56:9c:14:a0:02:3f:45:51:af:dd:
58:20:e2:10:ac:52:68:79:91:8c:e6:08:69:8b:e9:e9:13:ec:
cc:2c:6e:07:35:26:5a:59:92:5b:47:d0:36:4f:98:57:69:7e:
4b:42:c4:88:81:d6:4a:ca:eb:0b:a1:c3:d0:b8:a2:b9:08:46:
8c:f8:f4:db:bb:7c:13:b1:5b:99:6e:95:a2:a8:4f:a9:34:ca:
b3:43:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:53 2025 by rpki-client