Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/nFLEGeomJ4vPKyzSbiiiQiAov0o.roa
File: nFLEGeomJ4vPKyzSbiiiQiAov0o.roa (raw, json)
Hash identifier: zmouaNMKHBH3lKRM+fHHmnG7EVFpRYYKIoNGE6bkDIo=
Subject key identifier: 9C:52:C4:19:EA:26:27:8B:CF:2B:2C:D2:6E:28:A2:42:20:28:BF:4A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018493A32ECE75562945E9EE3A120776EFCE
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/nFLEGeomJ4vPKyzSbiiiQiAov0o.roa
Signing time: Sun 20 Nov 2022 06:04:15 +0000
ROA not before: Sun 20 Nov 2022 06:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 91.226.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:93:a3:2e:ce:75:56:29:45:e9:ee:3a:12:07:76:ef:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 20 06:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c52c419ea26278bcf2b2cd26e28a2422028bf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7c:2b:84:61:a5:21:a6:19:c3:75:1a:fe:7b:
78:56:be:24:d5:86:a6:18:c4:bd:f1:f2:f9:76:d9:
e7:00:9f:14:01:5c:11:48:0b:f5:6d:34:03:8c:90:
ec:62:9a:b3:a5:5e:90:e2:b8:c6:e7:fc:e0:ec:17:
02:66:2c:a5:85:0b:45:df:8a:4a:17:15:cd:b3:b4:
4d:ee:c1:0a:99:75:cf:d9:e1:53:c1:51:db:10:4a:
f6:51:a6:cc:55:46:a5:4a:37:f6:fa:fe:2e:e8:8c:
20:8d:23:9c:de:b0:ad:9a:c4:77:8b:27:00:05:10:
f0:93:2d:b5:33:03:79:2b:7f:7c:15:fd:a3:c5:85:
7b:3f:73:4f:54:c5:c5:06:e8:e5:d9:c7:41:c7:c9:
17:8c:22:19:b0:2d:b8:e9:c8:06:b0:49:10:ee:08:
b1:6c:ed:2b:45:0d:88:70:f7:ce:9a:27:b0:13:ef:
fb:57:2b:e5:54:1f:0d:4a:66:3e:a5:41:22:e7:f5:
3c:b8:a3:1c:a3:ea:2c:16:75:b0:e6:90:c5:07:4c:
bd:23:89:6a:23:d8:26:ff:91:65:a2:44:f4:7b:06:
b2:f6:37:91:08:24:09:18:3c:af:c5:48:45:2c:d2:
92:b5:82:33:f2:41:47:d2:93:d1:8a:04:13:55:ae:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:52:C4:19:EA:26:27:8B:CF:2B:2C:D2:6E:28:A2:42:20:28:BF:4A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/nFLEGeomJ4vPKyzSbiiiQiAov0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.57.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c5:81:fb:0a:1a:fc:94:f3:d3:be:3b:da:53:49:29:d8:34:
9c:59:36:08:b5:e4:50:68:00:27:73:8a:df:71:e1:37:69:06:
eb:d1:b2:c1:a3:dd:85:38:a7:23:18:35:0b:8a:79:ba:c2:b1:
7b:42:34:47:52:de:df:03:d3:fa:26:5a:f4:86:f3:32:8e:92:
f9:30:b3:06:e8:d5:ad:46:5f:f4:37:39:f4:9f:56:7b:fc:53:
6a:a4:25:ae:9e:0c:fc:2c:0e:11:a2:03:45:eb:b6:5d:e9:b5:
be:a3:a4:0b:7d:17:d2:6d:66:1a:6f:29:c5:68:e2:20:14:bd:
c3:a8:bf:53:43:56:b3:38:c1:72:31:c1:ea:11:a3:2f:23:f5:
e7:2d:22:ba:63:a3:f9:1b:a0:8a:47:d0:10:64:25:ec:05:41:
ea:a7:bf:78:34:aa:a6:76:d7:38:71:d9:02:80:03:81:56:6a:
19:7e:e9:41:fc:1f:88:c0:de:6f:c9:51:c1:0d:48:66:c0:db:
db:a7:38:f3:04:34:f0:9c:52:28:29:8e:1b:d8:bc:98:c2:8a:
6c:84:38:61:39:c8:a0:1b:69:b8:b5:9a:00:58:bf:7c:ab:93:
6a:f0:e1:cd:59:ff:90:af:7b:d6:6e:b5:ef:47:62:fe:68:71:
a0:81:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org