Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/fbOHuF-rJ5jXD7uTcnflwt0upvg.roa
File: fbOHuF-rJ5jXD7uTcnflwt0upvg.roa (raw, json)
Hash identifier: y2ztPb4ix65naeJvykWxLJt1TtJXJBd7k6MD+/+Td1Y=
Subject key identifier: 7D:B3:87:B8:5F:AB:27:98:D7:0F:BB:93:72:77:E5:C2:DD:2E:A6:F8
Certificate issuer: /CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Certificate serial: 0B5FA497
Authority key identifier: 63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/fbOHuF-rJ5jXD7uTcnflwt0upvg.roa
Signing time: Sat 01 Jan 2022 14:04:57 +0000
ROA not before: Sat 01 Jan 2022 14:04:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198876
IP address blocks: 91.240.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190817431 (0xb5fa497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6378140dbd4e6ef17020d89b0d4250dffb04811c
Validity
Not Before: Jan 1 14:04:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7db387b85fab2798d70fbb937277e5c2dd2ea6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:d1:f4:f2:0a:63:32:c2:ab:a0:fd:67:20:
ad:75:3c:96:ba:82:c5:e3:5e:da:98:eb:c9:0a:0c:
cf:10:bc:1a:e1:54:84:75:1c:c7:6c:1e:f7:97:ac:
77:83:c6:ba:ee:53:2b:b9:a5:ea:d0:62:38:b8:d7:
62:80:b7:f0:6f:36:59:15:6e:80:5e:e1:b6:0a:e7:
bc:56:42:d4:ae:12:6f:5b:40:10:ad:6a:e4:60:0c:
a8:25:4b:75:3a:7e:d5:de:f9:01:7b:f6:d6:f9:8a:
5e:7f:58:c9:2e:e4:06:ad:38:9d:49:67:6c:99:4c:
ab:7b:2d:83:48:ff:55:94:2f:45:0c:82:d7:56:a3:
da:30:a2:7a:8b:6f:8a:09:c4:ff:a7:d5:9c:05:7f:
1d:f2:01:b4:c8:99:12:47:c4:eb:c0:32:fc:7c:35:
8b:5f:c6:c3:6a:cb:42:13:96:ce:1e:67:5d:2b:07:
c5:09:09:c4:e6:76:28:a2:17:34:e7:41:a1:0a:3f:
26:8f:c9:83:a8:c7:0a:9b:af:44:14:b6:51:c9:67:
04:c6:af:fb:49:27:a1:ac:ce:7a:6b:33:51:a2:63:
66:fd:42:93:4a:1d:2c:4e:33:9b:51:3a:8a:4e:16:
28:4d:9a:ef:11:de:f5:a0:60:18:db:f7:de:e0:4f:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B3:87:B8:5F:AB:27:98:D7:0F:BB:93:72:77:E5:C2:DD:2E:A6:F8
X509v3 Authority Key Identifier:
keyid:63:78:14:0D:BD:4E:6E:F1:70:20:D8:9B:0D:42:50:DF:FB:04:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3gUDb1ObvFwINibDUJQ3_sEgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/fbOHuF-rJ5jXD7uTcnflwt0upvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9e6ab2-03e8-48e9-86f6-563c6b52d086/1/Y3gUDb1ObvFwINibDUJQ3_sEgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.27.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b3:e9:30:d5:df:ab:f9:11:5d:ab:81:91:d3:2b:da:a4:17:
ad:f7:22:35:80:27:cd:ca:6a:a7:ff:ad:21:b0:bd:e2:f3:02:
5a:45:cc:ac:4f:22:2f:b4:70:70:ea:4c:43:89:d0:e7:76:16:
83:52:a4:63:79:9b:22:0d:d9:d7:a8:bb:ba:44:92:fc:e2:0d:
6b:ba:ec:4e:72:1e:f2:44:ec:b3:1f:95:18:2e:01:8e:57:76:
35:24:95:c3:91:c0:77:d5:d6:95:5b:57:06:4d:af:2d:37:5c:
80:92:ea:08:e5:72:37:31:6d:b0:53:04:d3:dc:db:1d:ef:9c:
2b:fc:d1:0c:c8:1b:6a:d4:9c:bb:3c:e0:81:f0:8d:5a:9d:5b:
fa:26:73:ce:01:78:b3:0d:77:2f:f6:04:ee:7c:4f:7f:62:d1:
3a:76:97:ed:e6:b3:03:26:f5:c1:b1:f8:cf:f8:53:b4:24:83:
4c:09:28:20:73:fe:e7:8f:8f:9d:7c:6d:b5:bd:e7:b6:a8:e9:
31:b6:68:bf:86:fd:22:d6:4a:78:48:ee:b2:a4:ed:50:cf:ee:
f4:e0:50:58:2a:5f:5c:9a:27:98:72:1a:d6:5f:0d:5b:f9:5b:
d6:d7:d0:84:fb:01:85:09:27:86:04:64:53:f8:8a:e9:b7:81:
86:d4:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:23 2025 by rpki-client