Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/SkTMnHkMW4Ul9p4QHX5UGGMFNfk.roa
File: SkTMnHkMW4Ul9p4QHX5UGGMFNfk.roa (raw, json)
Hash identifier: rllAVDPseXrSH5HU2jV1ugkzNcMbdS0Y6ba+ekczXRU=
Subject key identifier: 4A:44:CC:9C:79:0C:5B:85:25:F6:9E:10:1D:7E:54:18:63:05:35:F9
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 03E26B40
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/SkTMnHkMW4Ul9p4QHX5UGGMFNfk.roa
Signing time: Sat 01 Jan 2022 08:02:46 +0000
ROA not before: Sat 01 Jan 2022 08:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15669
IP address blocks: 91.237.102.0/23 maxlen: 23
2a03:4ba0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65170240 (0x3e26b40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Jan 1 08:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a44cc9c790c5b8525f69e101d7e5418630535f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:d4:71:60:f2:47:d4:07:90:3b:5a:ae:a9:
83:3f:47:ad:28:ee:55:86:13:b4:bb:d9:7e:0b:55:
77:93:90:58:df:31:87:6f:84:9b:e2:7c:3f:58:91:
88:08:12:73:3c:01:f9:18:de:1a:cc:4b:12:42:2e:
d2:1e:f1:ec:bc:e1:74:4f:34:20:65:47:6b:12:53:
f4:9a:88:ad:2a:3a:1e:7a:28:10:42:7e:c5:ce:2a:
75:a7:a7:03:25:c4:5a:17:66:66:bf:66:84:4c:6d:
16:0d:81:d6:cd:7a:87:76:27:6c:20:4f:35:de:80:
49:e5:52:d4:fe:7a:16:22:4f:f2:74:7e:e0:bf:5c:
fb:5c:de:da:d9:c3:ab:cb:c2:c9:c5:c0:e3:16:85:
4e:48:6f:49:68:3b:fb:6c:00:92:f1:2f:1b:fd:96:
e4:50:85:30:3a:89:96:83:e9:3a:c0:c2:16:c5:56:
98:65:6c:bd:d3:8b:6c:e0:50:01:2c:85:91:4e:70:
d4:5a:4c:21:80:0b:9a:9a:8f:f4:aa:a7:40:48:17:
82:00:a0:a3:d5:36:24:fb:57:5e:57:1c:88:ea:9f:
b4:cb:c5:d0:12:c7:9d:58:e6:87:df:03:ef:3d:a5:
4b:6d:ce:b8:69:c5:10:2a:64:c9:3d:2f:e0:3f:21:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:CC:9C:79:0C:5B:85:25:F6:9E:10:1D:7E:54:18:63:05:35:F9
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/SkTMnHkMW4Ul9p4QHX5UGGMFNfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.102.0/23
IPv6:
2a03:4ba0::/48
Signature Algorithm: sha256WithRSAEncryption
97:0e:09:a1:97:1a:02:1a:67:dc:1b:6a:c7:1e:0c:fa:93:aa:
f7:1f:95:6e:e2:74:7b:34:7f:1e:ef:c5:2c:e9:dc:fa:fa:8d:
41:50:9e:ec:55:4f:63:90:f6:ef:fc:fe:48:39:6e:0c:42:7b:
f3:b5:c2:f2:95:a2:a6:9a:8e:61:14:2f:12:a9:38:ab:99:3c:
5e:7f:b4:29:7a:17:c1:2c:b0:9c:85:7d:d1:da:a1:bc:1d:77:
2f:61:e1:f9:41:90:02:dc:b4:d1:ab:13:f3:3b:aa:d5:fa:10:
c6:48:73:4f:96:ca:43:79:03:ba:2f:d1:92:99:3e:a8:b3:4d:
81:7d:60:0b:f8:e4:5b:d2:5f:66:f5:17:26:b9:0c:63:ca:c3:
6d:29:9f:89:70:f4:0f:4a:0e:f3:a0:29:84:33:17:09:ac:94:
ef:fa:54:27:24:13:8b:c7:b8:62:4e:e0:fa:4d:da:ba:af:94:
7c:54:33:03:88:8a:af:a2:a2:bb:e1:8b:16:ca:5c:12:cf:25:
10:e9:75:a0:0e:02:5c:fd:8a:ea:a2:3b:5f:a5:a8:79:8a:42:
6e:cd:aa:59:e1:cd:8d:4a:cb:c4:46:9c:b3:bb:6e:4b:f3:3a:
24:33:fc:b5:48:4c:4d:8a:19:82:88:e9:c4:48:74:78:b9:74:
b0:0e:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:46 2024 by rpki-client on console-fra.rpki-client.org