Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/FEBOrFec0eLk9o4G9B7xylKVrP4.roa
File: FEBOrFec0eLk9o4G9B7xylKVrP4.roa (raw, json)
Hash identifier: mEQIby8eXBpJOhK2h7bpiMzBi6fl8OMYOTIzQMBr31k=
Subject key identifier: 14:40:4E:AC:57:9C:D1:E2:E4:F6:8E:06:F4:1E:F1:CA:52:95:AC:FE
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0184A61CCCC6823E6DB354CA0595138AB987
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/FEBOrFec0eLk9o4G9B7xylKVrP4.roa
Signing time: Wed 23 Nov 2022 20:10:15 +0000
ROA not before: Wed 23 Nov 2022 20:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 194.33.58.0/24 maxlen: 24
91.224.109.0/24 maxlen: 24
91.224.108.0/23 maxlen: 23
91.224.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a6:1c:cc:c6:82:3e:6d:b3:54:ca:05:95:13:8a:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Nov 23 20:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14404eac579cd1e2e4f68e06f41ef1ca5295acfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:66:bb:67:55:5f:4f:e3:de:04:9f:9e:2c:
be:22:cf:ca:61:ad:82:da:9b:87:5f:ca:24:7d:e4:
36:bb:4b:3e:6b:0f:11:28:f0:68:1d:fd:8d:b3:3b:
d6:92:f4:07:dc:71:21:9b:f4:f9:7f:37:46:b7:47:
fe:cb:9a:67:6d:71:02:d9:c9:31:11:b8:c4:05:23:
f9:4e:7f:7f:31:8d:7b:df:8e:22:52:64:66:68:e8:
04:f2:37:9e:eb:d7:c6:ee:82:dd:fb:56:dc:58:c1:
b9:97:82:9d:71:21:25:35:0c:71:9c:76:d9:ba:aa:
8b:73:5d:21:df:3f:79:99:d3:27:57:af:56:c2:76:
64:ad:a0:89:ff:2d:12:ce:85:0e:1b:31:2f:1a:ff:
7f:18:94:03:b5:87:94:89:7c:76:d0:1c:a4:dd:cd:
08:42:fc:dc:ca:76:d8:35:dd:a1:d0:f2:f6:09:55:
ef:65:34:d1:2d:80:5d:6c:a2:93:fc:5b:79:07:aa:
20:fc:cb:6d:4b:ae:b2:23:9f:26:d3:ca:c3:85:cf:
2e:6d:bb:a7:be:cc:94:0e:ad:d9:15:18:0b:98:8e:
50:bf:72:97:81:54:c4:c5:03:c2:4f:de:9a:5a:35:
52:08:8a:e6:88:60:60:55:c8:e5:41:ef:e2:c9:eb:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:40:4E:AC:57:9C:D1:E2:E4:F6:8E:06:F4:1E:F1:CA:52:95:AC:FE
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/FEBOrFec0eLk9o4G9B7xylKVrP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.108.0/23
194.33.58.0/24
Signature Algorithm: sha256WithRSAEncryption
30:42:3f:65:9a:40:56:4f:34:71:31:5c:4a:09:91:bd:e1:f5:
8a:47:f9:c4:26:94:c5:d0:e7:2c:1d:a7:17:34:53:25:0b:79:
a3:64:2c:6a:1f:5f:d7:1a:1a:8a:0d:d2:34:ee:e7:08:cb:d2:
c6:e5:91:28:8b:6c:bd:55:b4:0a:d1:c9:e9:a7:6b:b0:12:7f:
07:bd:eb:5b:82:34:2a:27:e9:2a:72:e9:24:ae:bd:ca:07:04:
58:1b:bf:4d:a7:c3:cb:78:0d:e4:6c:dd:73:19:5a:60:7f:7a:
2a:6a:b3:31:51:e6:b9:9d:46:7f:d6:38:10:fe:6e:80:82:47:
3e:7b:ca:42:26:68:a4:9b:5e:d0:92:79:4c:d3:fd:4d:b2:89:
ab:fe:93:13:93:7e:a7:21:1f:f6:ff:b7:de:c2:a7:de:03:88:
10:8f:18:2d:f3:17:2c:f4:a2:0e:c0:18:19:a5:5f:34:91:ff:
d7:9e:e0:96:8b:99:54:de:67:8d:2d:bd:a3:ba:45:0b:30:11:
55:0d:f6:70:a7:74:ee:cf:14:1d:0f:b8:93:c2:9e:23:fc:97:
94:a7:86:01:ab:05:09:86:56:e5:b1:f4:0e:dd:67:f2:7b:16:
4f:88:bd:fc:c4:28:fd:86:be:2d:2f:69:aa:b1:30:b4:30:61:
39:53:94:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org