Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/ecmFc0_zQFVZd9Gz7B3CWcSwXgc.roa
File: ecmFc0_zQFVZd9Gz7B3CWcSwXgc.roa (raw, json)
Hash identifier: IAHAfGQnctftSJ0/8R7xx/CwJVmb6hBs5vw9yDJBuTQ=
Subject key identifier: 79:C9:85:73:4F:F3:40:55:59:77:D1:B3:EC:1D:C2:59:C4:B0:5E:07
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 01848AF35E0E4012E2D8210D3415C5868EB4
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/ecmFc0_zQFVZd9Gz7B3CWcSwXgc.roa
Signing time: Fri 18 Nov 2022 13:35:15 +0000
ROA not before: Fri 18 Nov 2022 13:35:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 91.209.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:f3:5e:0e:40:12:e2:d8:21:0d:34:15:c5:86:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Nov 18 13:35:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79c985734ff340555977d1b3ec1dc259c4b05e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:79:03:9c:ce:29:ac:23:09:19:8a:fa:fd:26:
d7:89:62:36:fe:13:dc:d1:69:13:37:c7:d6:f6:4b:
dc:e0:fc:46:88:bd:3b:e3:35:6e:18:21:4b:cd:bc:
43:c7:ac:ed:96:02:33:2b:f6:13:3e:cd:fe:33:80:
fa:04:5c:8a:06:12:60:b5:00:76:fa:d6:94:8d:33:
b4:b0:fb:1f:8a:5a:33:46:cd:83:4c:e8:5f:9d:09:
2c:5e:86:f2:6b:7a:8d:bb:7d:03:86:17:ae:5f:49:
c9:93:c4:7e:dd:9b:3d:9b:4a:41:06:f3:e8:a3:9b:
88:79:8d:bf:dd:42:02:29:24:d8:c1:59:84:b5:69:
9e:c4:13:9d:78:d6:fc:d4:3e:96:0b:b1:f0:73:72:
03:55:3b:81:6a:51:ea:77:a7:4e:1b:39:0a:fe:75:
c2:52:ec:bd:e9:19:ce:fd:c9:5c:e2:72:a6:6f:ec:
b1:21:59:28:c0:4e:b0:88:d8:85:32:21:f9:65:78:
f4:aa:40:04:17:89:f6:9c:42:30:ec:dd:f9:79:be:
0a:53:17:95:98:0d:30:02:19:8f:7b:f2:06:83:07:
9f:c6:82:94:72:12:68:91:9e:0e:e0:bb:30:e4:04:
61:00:32:c5:93:96:03:cd:83:7f:c1:15:9f:b7:92:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C9:85:73:4F:F3:40:55:59:77:D1:B3:EC:1D:C2:59:C4:B0:5E:07
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/ecmFc0_zQFVZd9Gz7B3CWcSwXgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
62:db:ca:a1:a6:48:5a:28:53:a2:10:e9:e2:b9:15:12:07:2f:
4a:41:05:9b:04:ce:68:7d:11:cb:07:aa:d2:65:72:db:57:e4:
69:0c:85:da:8e:c9:0e:41:e5:d9:15:df:73:49:9b:f2:6e:c0:
76:0e:f0:36:79:7c:fa:bb:56:c0:03:b0:56:35:1c:72:f3:94:
53:cd:1d:75:ef:2f:63:54:a4:ca:39:b5:28:b9:44:ec:b6:9b:
18:f9:e1:0d:72:33:b8:61:a7:e1:ea:ad:1b:ed:c8:2c:a5:32:
02:2f:22:1e:00:7b:1f:bb:a7:61:35:24:8b:d8:c8:c0:68:f3:
d3:a4:8f:5b:3f:43:9c:87:7a:6a:3a:96:61:6c:40:2e:a1:bd:
9b:d6:07:3a:06:00:1f:59:9e:3b:7d:d2:46:4d:ec:84:b7:45:
f0:02:51:86:15:df:62:8f:3b:40:3d:fb:60:08:6b:fb:2e:38:
5b:8a:b7:f6:13:e4:af:ff:f1:01:2a:40:d8:b6:ce:18:0f:87:
83:9e:09:34:de:3f:5a:6e:a1:29:7f:72:4a:33:25:f5:f0:4e:
8e:34:ae:fc:a3:71:ac:8c:57:d7:ac:32:29:93:2f:2c:ab:f1:
34:ab:75:c1:6f:41:97:46:33:90:78:de:aa:c2:96:c9:ef:4a:
97:c5:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org