Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/FLEBTCNE-bNryW2FRBCV-Mo9Idg.roa
File: FLEBTCNE-bNryW2FRBCV-Mo9Idg.roa (raw, json)
Hash identifier: YrGPS4/mJZjDTr9bcKe/84LLaHNw7Y/EdZnhCwxcsOw=
Subject key identifier: 14:B1:01:4C:23:44:F9:B3:6B:C9:6D:85:44:10:95:F8:CA:3D:21:D8
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 448D73B4
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/FLEBTCNE-bNryW2FRBCV-Mo9Idg.roa
Signing time: Sat 01 Jan 2022 03:58:37 +0000
ROA not before: Sat 01 Jan 2022 03:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47150
IP address blocks: 90.84.12.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150120884 (0x448d73b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14b1014c2344f9b36bc96d85441095f8ca3d21d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:5a:ed:33:b6:ab:02:57:3a:b4:8f:09:7b:
a3:40:6b:d8:5f:1c:be:f9:3e:3c:d9:be:55:68:e6:
58:94:f1:70:1a:ae:f4:b7:a0:4b:c2:aa:23:79:3a:
2f:2b:d2:5a:ae:96:45:42:b4:c5:c0:b3:88:a5:7c:
e6:a4:3c:83:c1:c8:01:2a:df:05:da:af:94:59:1b:
97:d3:60:c4:b4:2a:33:6d:9f:a2:ea:9f:c0:ff:bc:
e7:55:d1:ec:29:00:e5:67:2e:37:2b:78:af:80:8e:
ba:92:1d:14:dd:96:b4:9b:56:c9:2d:6a:f4:b6:97:
9a:59:ee:e0:70:bb:c5:3f:23:d1:35:7b:07:6e:5c:
9f:86:e7:7d:56:2d:c3:09:e9:01:e8:1d:90:90:92:
b3:d0:15:e2:72:bd:f2:44:63:7f:ea:e9:97:9b:73:
80:b0:2d:10:86:35:9c:99:5a:e1:91:1c:76:ed:f6:
bb:3b:55:9c:f2:3b:ae:10:23:f6:fd:7d:f5:a0:f9:
8c:37:74:16:aa:40:70:4b:13:6f:ec:60:ed:56:66:
48:be:06:68:a2:df:b8:7c:3c:36:73:0c:3f:d2:64:
71:0d:53:58:51:9a:17:cd:45:34:79:08:c4:f1:c5:
21:c9:76:30:71:d1:87:af:9c:92:77:08:67:bb:ee:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B1:01:4C:23:44:F9:B3:6B:C9:6D:85:44:10:95:F8:CA:3D:21:D8
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/FLEBTCNE-bNryW2FRBCV-Mo9Idg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.12.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b0:cb:f1:e0:98:3c:8a:4f:c6:2b:57:e3:83:17:23:09:71:
2c:c2:e2:fb:06:94:54:d2:4a:6c:11:40:c8:62:1b:1e:99:8c:
85:4f:16:b6:7a:21:0a:ea:9b:98:ca:21:c3:88:2d:e9:a5:aa:
05:93:c7:00:91:8c:c7:09:40:be:69:a5:6a:4e:76:a9:f3:44:
73:5c:cf:ec:71:8a:c1:8b:f0:09:1a:56:d3:e9:82:07:b8:f0:
c8:e3:5d:b1:91:9f:d8:7f:8c:d2:8b:4d:ee:d9:32:e7:59:1c:
2b:90:da:1a:08:6c:19:ce:ff:a0:09:46:16:be:3f:ee:fc:8d:
2a:82:b1:09:9a:72:f4:72:c1:10:d7:75:21:d7:cb:6c:c2:45:
ed:f2:79:96:33:94:91:08:6c:c0:43:b0:13:2d:a7:7f:e8:9b:
b9:66:e1:27:6a:7f:f4:4d:76:78:20:81:e6:2b:ac:37:29:c3:
28:25:63:fe:ef:c2:49:4a:31:d3:1a:b9:fd:ed:e8:c5:ca:75:
3a:38:a5:34:18:be:bb:db:7f:7b:ba:9e:89:02:39:82:88:9c:
15:07:3f:8d:f1:a1:3c:c2:ea:ee:1c:c6:52:b6:de:80:f8:de:
18:a9:0f:e7:4c:28:ac:1d:8c:66:ec:c9:2c:a0:8e:cd:bf:0b:
f8:9c:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org