Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/fmXkktLCpIdguq6pHNorsWsFQtA.roa
File: fmXkktLCpIdguq6pHNorsWsFQtA.roa (raw, json)
Hash identifier: RL+xqKBNPeKno2exAMuefpaRrpY4YPeNPwmr2HcgBb0=
Subject key identifier: 7E:65:E4:92:D2:C2:A4:87:60:BA:AE:A9:1C:DA:2B:B1:6B:05:42:D0
Certificate issuer: /CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Certificate serial: 01834BD449EADB927B5B7732E54F0F982E32
Authority key identifier: 20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/fmXkktLCpIdguq6pHNorsWsFQtA.roa
Signing time: Sat 17 Sep 2022 14:22:27 +0000
ROA not before: Sat 17 Sep 2022 14:22:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30870
IP address blocks: 91.199.219.0/24 maxlen: 24
171.25.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4b:d4:49:ea:db:92:7b:5b:77:32:e5:4f:0f:98:2e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Validity
Not Before: Sep 17 14:22:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e65e492d2c2a48760baaea91cda2bb16b0542d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:73:d6:16:92:6a:ce:0c:e9:cd:f9:f2:06:
0d:fd:4a:83:3d:54:c0:73:1d:f1:6f:d3:dc:f6:f4:
b5:16:4f:e4:2c:72:fa:32:5a:74:00:54:fc:0a:3b:
3e:e2:cc:3c:0f:b6:de:db:63:15:ca:8c:ae:b1:5a:
61:cf:5b:7a:be:2c:d7:bf:59:a9:71:dc:7a:56:0e:
17:c1:fc:b0:e0:94:49:be:da:ca:c3:17:a5:a4:61:
a9:3f:ed:50:88:73:eb:c5:60:8e:a9:7d:7f:c3:11:
37:76:25:94:8f:51:18:2b:d5:9c:84:21:b8:b6:67:
42:27:79:c0:72:e4:0d:61:3f:45:02:e7:a0:4f:f5:
ab:8f:c0:f7:bd:ff:63:70:dc:d8:76:27:fd:b2:8d:
f6:9c:af:a9:d5:eb:a3:bc:a3:7b:20:86:57:b9:ff:
e6:54:d7:ac:8c:b5:ce:dd:41:16:72:ce:01:aa:a7:
75:b8:d4:d5:49:d9:f8:ed:76:a1:76:fb:78:7a:87:
00:37:5c:90:08:ff:98:06:51:9c:73:e7:02:5c:ff:
34:fa:eb:15:e3:f9:d5:3e:8f:1c:03:2c:97:d0:24:
e8:d5:9d:fe:38:02:f7:59:09:0d:05:ff:e2:7b:0d:
87:e9:62:4f:6c:82:0c:7d:98:e6:e4:15:22:4b:9e:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:65:E4:92:D2:C2:A4:87:60:BA:AE:A9:1C:DA:2B:B1:6B:05:42:D0
X509v3 Authority Key Identifier:
keyid:20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/fmXkktLCpIdguq6pHNorsWsFQtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.219.0/24
171.25.179.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c1:4d:c1:32:91:cc:62:84:9c:73:9c:54:5b:35:4c:0d:22:
9b:64:60:9a:42:56:a4:67:cd:6b:d8:dc:4a:b3:f7:20:ed:94:
18:92:d3:41:08:43:7a:b9:c9:56:14:9e:cb:b5:bd:66:9c:c9:
bd:ab:da:77:9e:f4:08:69:4a:db:fc:cb:7f:3c:46:78:ae:57:
e2:0a:11:50:7c:1b:82:8b:ee:53:29:a9:e5:a5:4c:0f:06:7f:
fd:dc:c7:91:f8:08:b1:9b:64:a5:52:4e:38:aa:3b:fe:51:3a:
ae:ec:dd:d0:d8:52:4e:dc:ca:b2:55:af:33:67:53:46:5e:7c:
17:79:e8:4a:44:9b:53:01:13:ea:69:03:ce:2a:ce:04:6c:7f:
0e:99:d4:db:7c:5f:a0:00:f0:59:0d:36:15:a8:c8:d5:ae:13:
d7:80:14:6a:c9:3b:03:ac:57:54:db:5c:19:c8:95:66:5e:2f:
9b:e8:7b:01:7f:77:24:8b:26:d1:4b:59:2e:51:2b:ea:d2:d7:
96:69:59:43:01:af:42:14:be:73:97:67:20:2e:e2:4b:a1:6a:
c5:93:38:74:92:ed:b9:90:95:99:77:0c:ca:61:b8:ad:6e:4b:
db:d8:40:8b:80:ec:3a:17:14:17:aa:5f:00:6e:32:fd:4f:02:
fe:73:54:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:52 2023 by rpki-client on console-fra.rpki-client.org