Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e5582-b3dd-401e-995e-34b4791c237b/1/qFTIzjIwdaSywMIchekhk9YV6Gs.roa
File: qFTIzjIwdaSywMIchekhk9YV6Gs.roa (raw, json)
Hash identifier: kstOAnunHxT/ZkchVHbYVHgTGsecAv8XlVeSP29CYh0=
Subject key identifier: A8:54:C8:CE:32:30:75:A4:B2:C0:C2:1C:85:E9:21:93:D6:15:E8:6B
Certificate issuer: /CN=fb628595b3d7fc465b77b93b2d2e072f4ff7403d
Certificate serial: A3134D
Authority key identifier: FB:62:85:95:B3:D7:FC:46:5B:77:B9:3B:2D:2E:07:2F:4F:F7:40:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2KFlbPX_EZbd7k7LS4HL0_3QD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e5582-b3dd-401e-995e-34b4791c237b/1/qFTIzjIwdaSywMIchekhk9YV6Gs.roa
Signing time: Sat 01 Jan 2022 01:00:58 +0000
ROA not before: Sat 01 Jan 2022 01:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10687309 (0xa3134d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb628595b3d7fc465b77b93b2d2e072f4ff7403d
Validity
Not Before: Jan 1 01:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a854c8ce323075a4b2c0c21c85e92193d615e86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:48:d8:22:a9:9f:08:89:8b:75:4a:07:8f:
3f:af:85:90:d2:90:0b:69:0f:2f:bc:50:61:6a:82:
ff:07:35:59:b5:87:2c:42:75:c4:74:03:c9:22:26:
a2:47:cf:f1:fa:85:a1:0e:49:68:62:99:f1:e4:f2:
ad:54:b9:fd:83:47:43:b4:cc:87:04:ca:b3:81:9f:
e6:4d:35:5a:9d:e4:a8:51:d3:f9:4c:0e:09:cc:79:
85:76:3b:44:0f:64:21:f9:d3:c8:7d:04:ac:d9:c8:
57:1d:65:36:14:41:d3:18:63:98:cb:46:c0:4d:18:
6b:72:8a:2d:f8:53:f6:36:45:17:a7:b2:8b:4e:d1:
97:db:d5:3b:1f:44:d6:66:79:ba:4f:a4:59:3e:92:
b6:ca:bf:ef:6e:c2:2b:cb:11:49:e1:8a:bd:08:e0:
79:2a:e0:26:fe:a1:7c:61:e1:15:bc:5f:ff:f7:d4:
a5:96:4d:b6:cc:f4:9d:5f:89:ca:c8:7a:b7:13:25:
cd:d4:23:34:ef:a4:5e:c6:dd:e3:08:10:69:0f:9c:
1d:a5:ba:ad:ba:b8:b7:dc:05:5d:df:46:fb:28:81:
b3:bd:ba:8f:5a:64:e2:5e:86:e7:80:20:e7:20:d2:
a3:f4:66:7a:d0:ed:76:3f:f1:fe:5f:d8:7f:b7:da:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:54:C8:CE:32:30:75:A4:B2:C0:C2:1C:85:E9:21:93:D6:15:E8:6B
X509v3 Authority Key Identifier:
keyid:FB:62:85:95:B3:D7:FC:46:5B:77:B9:3B:2D:2E:07:2F:4F:F7:40:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2KFlbPX_EZbd7k7LS4HL0_3QD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e5582-b3dd-401e-995e-34b4791c237b/1/qFTIzjIwdaSywMIchekhk9YV6Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e5582-b3dd-401e-995e-34b4791c237b/1/1-2KFlbPX_EZbd7k7LS4HL0_3QD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.161.0/24
Signature Algorithm: sha256WithRSAEncryption
16:69:f4:34:b0:ed:00:1f:c6:2c:98:20:95:c7:52:ce:42:dc:
3d:87:b6:14:26:28:25:0b:57:7f:11:83:c9:3a:6d:93:b5:e0:
45:7d:b9:ba:43:89:1e:fe:5c:0e:eb:2d:06:9b:3f:e1:ce:2d:
ce:8d:59:ba:6a:6d:5b:f5:01:41:01:a4:20:59:54:2b:f9:5b:
d1:6c:eb:90:38:a3:91:9e:b4:81:b1:3d:52:f4:74:80:e6:48:
dc:9f:04:88:82:39:d0:a4:36:b6:e5:b5:18:5c:f1:9e:19:c9:
ac:0d:54:85:ba:cb:26:ea:5a:7a:5d:b6:1f:b4:1d:ca:de:3d:
ee:b6:76:7c:c9:1e:85:66:46:9e:d1:d0:57:db:87:b3:1f:1c:
d3:94:f9:26:86:7d:32:b3:54:22:00:6c:dc:21:22:f4:1e:7b:
a0:e2:99:43:a9:fb:ee:6f:07:fa:50:5d:fb:d2:e5:5d:9c:4e:
15:57:70:e1:5f:5b:0d:1c:c8:aa:0e:85:d1:1c:71:5c:7a:43:
ab:e2:03:c2:00:5b:46:c2:b3:74:22:61:b8:bc:68:17:a9:2b:
ee:2e:0e:f7:6f:8f:91:cc:03:f8:ea:09:c9:86:bf:68:a4:57:
3b:9e:b5:24:66:ce:33:24:47:57:3d:66:8e:37:00:bb:29:e9:
78:b7:42:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:33 2023 by rpki-client on console-ams.rpki-client.org