Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8FQcRJ5JIH_pIkzeTTvClfSMv-s.roa
File: 8FQcRJ5JIH_pIkzeTTvClfSMv-s.roa (raw, json)
Hash identifier: jNjPlejQGO+55wSsVYI5bfwKuUyA8W9+JJjrJQW8zI8=
Subject key identifier: F0:54:1C:44:9E:49:20:7F:E9:22:4C:DE:4D:3B:C2:95:F4:8C:BF:EB
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14532DB1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8FQcRJ5JIH_pIkzeTTvClfSMv-s.roa
Signing time: Fri 18 Mar 2022 18:06:55 +0000
ROA not before: Fri 18 Mar 2022 18:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207246
IP address blocks: 91.242.98.0/24 maxlen: 24
91.242.104.0/24 maxlen: 24
91.242.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340995505 (0x14532db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 18 18:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0541c449e49207fe9224cde4d3bc295f48cbfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:54:88:66:b2:20:da:f3:53:a4:a6:f1:7d:
fe:5e:10:11:d5:28:af:38:42:47:4b:2e:29:af:a2:
46:4e:82:76:5c:bc:dc:12:5d:2f:98:9d:f3:32:de:
a4:e8:b6:1f:40:a5:bb:c6:56:85:79:ba:b5:b1:5a:
dc:bc:4b:94:1e:a1:ef:86:76:9a:44:41:ee:ac:73:
c0:e1:4a:42:65:39:9b:cd:05:8c:e2:ac:05:6e:71:
8f:88:39:2a:69:64:db:4e:16:81:da:26:41:d8:ec:
35:0d:15:ab:59:89:d4:f2:b7:e3:81:1e:1c:59:65:
25:c3:cf:fc:e7:3e:d2:6c:7e:96:07:98:b8:f5:81:
44:83:ad:d0:99:d8:18:9d:aa:9d:f6:34:dd:75:8b:
0f:7b:c3:82:c1:cb:f9:e3:f3:6e:ac:ec:84:78:23:
4c:d8:f3:a2:6d:ec:c4:12:43:32:75:39:85:3d:9f:
7c:18:1c:67:35:25:c1:25:88:a0:b7:6b:a0:f8:77:
f3:a3:b6:12:61:24:20:3f:58:1c:a3:24:3f:d3:68:
31:ff:5b:16:50:39:6b:06:d8:91:74:28:8c:40:b9:
9c:36:97:fe:1e:ba:ca:6a:58:b8:f2:db:c3:6a:42:
cc:07:17:7e:3b:cd:9f:89:8e:0a:47:c5:64:40:e9:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:54:1C:44:9E:49:20:7F:E9:22:4C:DE:4D:3B:C2:95:F4:8C:BF:EB
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/8FQcRJ5JIH_pIkzeTTvClfSMv-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.76.0/23
91.242.98.0/24
91.242.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c7:de:56:6a:77:cc:db:7d:9f:bb:e9:a2:3e:77:c4:9b:9e:
f5:5c:44:56:0d:b8:3b:58:6f:8f:c2:b3:df:39:39:28:c2:4d:
ba:d2:b1:36:bf:30:f5:88:c2:4a:be:f3:87:85:05:a4:a4:c3:
95:96:8d:16:4b:55:c8:3c:ab:e5:57:64:f5:07:a4:07:99:3b:
32:0a:09:79:91:30:f1:bb:eb:6e:80:c3:cb:24:59:b1:3c:e1:
f0:de:ec:ab:d7:34:f0:ac:74:bb:40:ab:a7:23:52:67:bb:c5:
b5:1a:db:3e:0e:5d:e3:3b:7e:f5:90:fe:9f:1d:67:dd:a0:4f:
d2:5a:28:b6:64:a3:0c:99:fc:eb:a2:bc:a1:99:06:9b:89:9d:
7e:c4:84:47:eb:47:d2:18:f0:6e:ba:ce:15:03:78:3a:33:5c:
91:fe:7f:ae:c8:a5:73:b6:65:87:d1:92:71:c3:1f:96:81:7c:
0c:32:e5:6f:5b:47:da:44:81:9d:59:a3:f9:b1:95:ba:c6:8a:
25:8b:fc:bc:48:f7:6a:bf:c1:b6:93:73:85:bd:43:d2:85:a1:
91:d7:01:0f:5e:a4:1e:21:93:49:6d:01:c1:a5:0d:79:79:c2:
0e:27:42:be:1f:35:d7:3b:32:18:90:db:9e:3c:6a:ec:54:3f:
2f:8c:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-fra.rpki-client.org