Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0e1391-0678-4b7e-b3e9-5a71bcd27ad2/1/F-ENJBjwBIYM1qquTkb51AbRIV8.roa
File: F-ENJBjwBIYM1qquTkb51AbRIV8.roa (raw, json)
Hash identifier: aQ7by7cEtgfJBkwBF8W542t36rVMpgD+lXkURnV34/c=
Subject key identifier: 17:E1:0D:24:18:F0:04:86:0C:D6:AA:AE:4E:46:F9:D4:06:D1:21:5F
Certificate issuer: /CN=f9565cd231e1881c3f14638c5b744a287f1ec208
Certificate serial: 043A6D55
Authority key identifier: F9:56:5C:D2:31:E1:88:1C:3F:14:63:8C:5B:74:4A:28:7F:1E:C2:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VZc0jHhiBw_FGOMW3RKKH8ewgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0e1391-0678-4b7e-b3e9-5a71bcd27ad2/1/F-ENJBjwBIYM1qquTkb51AbRIV8.roa
Signing time: Sat 01 Jan 2022 03:56:10 +0000
ROA not before: Sat 01 Jan 2022 03:56:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51688
IP address blocks: 91.220.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70937941 (0x43a6d55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9565cd231e1881c3f14638c5b744a287f1ec208
Validity
Not Before: Jan 1 03:56:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17e10d2418f004860cd6aaae4e46f9d406d1215f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:78:69:95:be:c8:be:5d:16:83:14:35:90:
df:a2:a9:2a:af:3f:97:bd:3e:35:35:71:58:79:3c:
99:bd:a7:77:a4:ee:a7:19:40:f3:27:cd:74:19:5a:
7e:43:3c:d6:02:c2:36:08:2c:f5:47:6e:5d:fb:93:
88:4d:1f:dd:de:1d:c6:fa:34:4d:66:0b:e6:d6:7c:
3e:8c:3a:41:39:c6:57:c4:5f:9f:9a:ff:c7:93:05:
db:63:6f:3a:38:86:7a:a4:fe:5d:9d:e2:69:6a:38:
54:1e:ad:bf:db:61:69:e4:89:54:ab:35:13:59:23:
59:c7:ea:3b:5a:60:fc:a9:34:8e:ff:93:d2:f5:6a:
90:28:69:3f:3f:f7:48:d8:85:3b:35:00:7a:2f:d1:
6b:da:07:b3:7e:0e:4f:e3:2e:c7:85:bb:f4:30:71:
cc:b8:48:3d:5f:02:18:ed:43:dc:f9:69:69:10:cc:
63:65:92:a0:1c:32:a0:80:b5:1d:28:85:51:c1:19:
73:79:2b:4e:95:13:be:58:35:39:c6:bd:21:22:c1:
c3:3e:cb:80:56:b9:bd:ed:6a:e4:cf:2d:f0:a1:39:
a1:8a:22:4b:71:5b:f9:a0:04:10:a9:d0:09:02:c7:
74:f7:ac:92:7b:ec:9d:cb:fe:4b:95:89:69:e1:39:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:0D:24:18:F0:04:86:0C:D6:AA:AE:4E:46:F9:D4:06:D1:21:5F
X509v3 Authority Key Identifier:
keyid:F9:56:5C:D2:31:E1:88:1C:3F:14:63:8C:5B:74:4A:28:7F:1E:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VZc0jHhiBw_FGOMW3RKKH8ewgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0e1391-0678-4b7e-b3e9-5a71bcd27ad2/1/F-ENJBjwBIYM1qquTkb51AbRIV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0e1391-0678-4b7e-b3e9-5a71bcd27ad2/1/1-VZc0jHhiBw_FGOMW3RKKH8ewgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.40.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6c:ca:a5:1a:dd:c3:4e:29:c7:ec:58:58:99:97:48:62:09:
46:ed:fe:4f:43:32:f7:72:eb:ef:f5:66:38:f0:42:e1:6a:31:
89:2f:c9:c0:1c:b4:58:c6:e4:f2:03:a1:b4:8b:6d:26:b9:3b:
4e:1b:42:80:ff:43:eb:c4:b5:68:1b:dd:b6:8c:b9:bb:65:f3:
ab:52:c1:4e:e2:72:60:a6:9e:db:50:b2:f9:c0:31:a5:6f:5d:
0c:96:b5:0b:85:f5:71:33:e7:ad:2a:cd:46:2c:cb:c6:d0:f3:
69:9f:81:ce:ae:3e:10:aa:5e:de:0e:e2:2c:ea:3c:19:56:fa:
51:ff:07:fa:27:52:3e:bb:4e:39:d6:85:22:1f:02:9e:46:a3:
4d:4e:58:57:bc:ad:dc:80:0b:3b:27:37:b5:4d:6e:71:6e:3c:
1d:08:cb:73:24:77:4a:9e:b6:27:9c:d6:c7:eb:fd:20:be:91:
3a:db:a0:02:53:80:78:37:aa:42:24:12:40:6b:66:ed:fb:51:
cd:5b:02:27:bc:a2:f6:94:77:e4:b9:e4:13:f5:db:a3:17:c2:
ef:f2:ea:34:04:be:66:62:2e:d8:b5:8b:30:71:99:29:27:40:
bf:f9:78:80:9c:6c:9c:dc:4e:cd:c3:c2:e5:9c:b4:6b:b0:0c:
83:aa:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:12 2023 by rpki-client on console-fra.rpki-client.org