Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/FR0st8UpOUs3gW8YTtJGYjNzeLE.roa
File: FR0st8UpOUs3gW8YTtJGYjNzeLE.roa (raw, json)
Hash identifier: q4DkxhN1BQwnLr4vTpe7FIGp1C+iVuMk116KfpRUFzM=
Subject key identifier: 15:1D:2C:B7:C5:29:39:4B:37:81:6F:18:4E:D2:46:62:33:73:78:B1
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 06048E6A
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/FR0st8UpOUs3gW8YTtJGYjNzeLE.roa
Signing time: Wed 23 Feb 2022 23:11:28 +0000
ROA not before: Wed 23 Feb 2022 23:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100961898 (0x6048e6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 23 23:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=151d2cb7c529394b37816f184ed24662337378b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:5d:43:e7:a9:57:27:bf:ad:fe:4d:7b:b8:
e9:7a:48:21:ec:f5:2c:93:ec:fa:63:9a:ea:bc:22:
67:ac:82:6b:09:77:93:81:82:03:58:03:2c:e7:37:
08:5f:88:ee:c7:56:5d:3c:5b:85:33:93:cd:81:a2:
f3:dc:95:19:84:76:b3:f0:aa:ef:27:32:ab:a4:ab:
dc:4d:d3:63:16:23:6f:c9:9a:19:46:e3:40:9c:d8:
b9:bb:bb:03:ee:c3:77:47:e8:31:6e:f5:71:7a:9a:
e9:6a:2a:cd:7c:6c:18:17:e0:7e:91:ba:6e:4e:6c:
5b:8a:0b:c5:a3:75:d0:98:dc:11:0f:31:f5:63:1c:
8f:7f:30:84:b3:cd:0b:a3:bc:67:1b:3a:e7:ef:f3:
b9:8d:85:e3:93:bf:e7:47:19:06:bf:5d:5d:e9:e4:
8b:22:ce:0b:e6:a4:c2:6a:e5:8a:a2:bf:c2:01:51:
a1:89:7d:8d:5a:ab:4a:da:0a:95:49:0e:67:5b:a3:
9d:0d:c6:bd:33:2c:1e:0f:44:9e:62:74:d3:f8:7f:
43:82:c0:cd:74:2e:ae:85:16:86:d2:24:1c:7e:2d:
87:e1:3f:fa:36:6a:12:71:b5:73:77:43:5b:2b:b9:
60:f9:2f:64:13:2a:68:27:42:26:42:6a:80:dd:e7:
0f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:2C:B7:C5:29:39:4B:37:81:6F:18:4E:D2:46:62:33:73:78:B1
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/FR0st8UpOUs3gW8YTtJGYjNzeLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
46:58:96:72:05:92:86:00:6f:7e:2e:25:67:da:d0:ea:60:99:
0d:a1:64:f6:28:ee:1b:59:df:c3:ae:29:72:38:50:c1:6d:d7:
fe:f9:87:33:1d:c1:38:08:ab:a7:ad:7e:ac:24:d6:c4:e6:ab:
19:ed:8c:5e:6a:96:8e:72:cc:81:d4:d0:f8:a7:37:81:92:e1:
20:c2:65:95:fc:2a:02:1a:63:c6:1b:6d:24:8e:2c:f2:3b:ad:
bd:fe:1b:78:76:8d:8f:79:dd:aa:c0:54:71:f7:8b:a2:6e:33:
da:5a:4c:6e:7f:3a:39:c5:16:e6:05:2d:6b:29:33:e6:3d:e2:
7f:1e:cf:95:47:17:be:d0:cd:07:bb:05:28:db:3a:d3:56:64:
18:4f:b2:75:3b:b0:47:b6:63:6e:92:38:61:4a:4b:d1:c6:de:
e3:d4:e2:d5:97:14:89:ef:95:93:15:16:3c:91:f2:83:89:d7:
b2:c1:9f:6a:b4:6b:f9:d9:19:8e:d7:05:d8:19:54:eb:99:5c:
a4:d7:6e:91:17:6a:6e:95:d4:8b:12:bd:42:ac:cc:b0:b6:64:
04:ce:39:d6:ed:6a:0c:55:57:07:a9:a7:fe:fc:b5:38:fb:43:
25:72:2a:6d:3d:b1:f1:90:53:69:fd:c2:fb:3a:9a:47:f3:11:
cd:15:33:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org