Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/FxBuej-Z4KOD5pqxPfKdRKLNFNM.roa
File: FxBuej-Z4KOD5pqxPfKdRKLNFNM.roa (raw, json)
Hash identifier: t7THrE7k/XaeOWv9u9AhTHmlhZFjWfMxPUcFiMiZMLI=
Subject key identifier: 17:10:6E:7A:3F:99:E0:A3:83:E6:9A:B1:3D:F2:9D:44:A2:CD:14:D3
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 01851FF7D983493C0F896B6CB3B7B98997F5
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/FxBuej-Z4KOD5pqxPfKdRKLNFNM.roa
Signing time: Sat 17 Dec 2022 12:03:34 +0000
ROA not before: Sat 17 Dec 2022 12:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62284
IP address blocks: 91.108.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1f:f7:d9:83:49:3c:0f:89:6b:6c:b3:b7:b9:89:97:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Dec 17 12:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17106e7a3f99e0a383e69ab13df29d44a2cd14d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:f6:1f:4b:cd:1c:ac:c5:d1:8e:7d:fb:7c:
98:75:d8:19:95:23:11:f1:96:25:68:07:70:c3:d2:
ed:5f:54:31:c5:33:2b:a1:8f:82:f7:9b:94:6a:ec:
6f:e3:87:e3:ca:ba:1a:ab:6c:a6:10:0d:0a:07:7c:
de:12:a3:c5:24:9e:ca:82:1b:0e:46:25:10:ef:57:
8e:26:89:29:2d:98:e0:ba:93:f4:37:bb:41:64:9f:
36:e6:47:2c:c3:8e:76:88:eb:61:06:71:42:cf:5c:
f4:dd:c8:d2:9b:83:96:32:6f:2d:a1:35:e3:a8:82:
61:9a:5c:46:28:9e:7b:bc:80:fe:58:43:9b:b4:b5:
4f:eb:90:d3:15:23:95:04:8d:61:cc:ed:56:ff:0e:
d6:41:d7:54:38:c9:31:0b:22:a9:ce:07:d0:24:1b:
4e:b6:63:7e:b9:e4:5b:59:8a:cb:9f:31:5c:d7:a6:
4d:48:f6:ef:f5:66:1d:8f:52:ba:95:99:fe:01:ba:
35:e6:4b:05:5d:12:65:90:d7:4e:9f:87:20:d3:e8:
8b:36:0a:5e:f9:2c:e7:18:57:95:62:af:81:01:a3:
90:fc:dd:14:16:23:2c:f9:d0:f8:a9:18:c4:02:3f:
a6:be:83:0c:75:52:d3:bc:f0:36:5c:2f:05:a5:cb:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:10:6E:7A:3F:99:E0:A3:83:E6:9A:B1:3D:F2:9D:44:A2:CD:14:D3
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/FxBuej-Z4KOD5pqxPfKdRKLNFNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.150.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c9:67:33:20:18:65:68:26:5e:10:f9:3f:09:3f:ac:de:ad:
bc:1c:10:63:52:31:41:28:05:51:19:2f:99:79:b0:31:d3:da:
b0:09:77:b8:cd:92:af:f0:87:ac:16:2d:3e:2e:9b:8d:bb:d4:
45:2c:ad:d4:5f:76:15:f1:bc:e5:6e:c1:53:b5:3b:8e:58:57:
de:70:bb:06:e3:df:33:56:2d:5a:cd:f7:84:7a:f7:8f:fc:89:
d7:66:fb:f2:04:ac:a8:48:8d:32:b6:e7:a9:93:9f:41:42:67:
02:d3:c1:3a:48:8a:d6:3d:49:83:21:b8:78:84:c6:6e:ee:f3:
4d:36:34:58:e5:a8:8e:dd:c7:7d:53:08:96:2e:51:3d:1b:07:
23:a2:61:d3:fa:1c:5a:c9:6e:fc:a2:08:ec:f9:dd:ee:05:66:
89:c2:b8:74:5c:a4:07:36:2f:04:ab:9a:1b:bc:17:3f:c7:de:
0b:57:5b:47:5f:5b:54:bf:6f:af:74:6c:a5:87:58:79:ed:7d:
c6:88:07:1d:e9:7f:6e:4a:e9:e5:93:a8:f3:88:10:bf:bf:cc:
ba:43:74:d2:52:38:a2:55:f4:78:46:18:2a:4a:fb:85:90:72:
74:33:77:bf:a0:ae:f2:49:fd:06:0b:b6:9e:67:b5:16:cc:4f:
76:b6:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:19 2024 by rpki-client on console-ams.rpki-client.org