Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/Fb9WJZqM1hcrvOHXHRYRDqP21nc.roa
File: Fb9WJZqM1hcrvOHXHRYRDqP21nc.roa (raw, json)
Hash identifier: Vy/i7OpJZI/Cwu3qPX8pYVpZjqJz1KGOeueebeNTCoA=
Subject key identifier: 15:BF:56:25:9A:8C:D6:17:2B:BC:E1:D7:1D:16:11:0E:A3:F6:D6:77
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 0184A9EE8153B5C050B6B4231351BB613048
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/Fb9WJZqM1hcrvOHXHRYRDqP21nc.roa
Signing time: Thu 24 Nov 2022 13:58:10 +0000
ROA not before: Thu 24 Nov 2022 13:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39401
IP address blocks: 193.93.24.0/22 maxlen: 24
91.192.236.0/22 maxlen: 24
2a0d:9a00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:ee:81:53:b5:c0:50:b6:b4:23:13:51:bb:61:30:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Nov 24 13:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15bf56259a8cd6172bbce1d71d16110ea3f6d677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:90:51:46:c2:68:4a:7c:0b:c4:50:64:1b:
36:67:cb:98:e5:0a:08:fc:00:77:2d:12:51:9a:52:
cd:ba:12:57:bb:8f:5c:45:fd:42:cb:9d:fc:2e:36:
e0:49:af:a6:e5:18:48:8a:aa:72:bf:ef:22:ef:37:
48:ee:74:bd:79:1e:7a:44:9b:7e:8d:a0:f4:3c:5f:
aa:66:11:84:da:4f:3a:a1:c5:a5:82:06:30:7a:d1:
f6:63:02:3e:70:ef:9f:ae:2d:55:9a:34:1b:8f:84:
ba:15:88:ee:39:f1:d9:72:60:20:cb:56:c4:bd:78:
bd:26:a5:cc:6d:c1:60:c4:fb:d5:bc:52:23:17:eb:
1b:02:2e:b0:89:d9:22:3e:ce:73:68:e8:98:bd:ed:
9a:29:f5:56:35:c6:88:47:d9:28:c3:82:81:6c:d2:
04:96:1b:49:b8:ea:62:a7:62:9c:5f:c6:e1:90:4c:
b6:49:58:9f:46:1a:b1:c6:d0:ec:36:9d:85:5c:ab:
8c:c0:ba:bd:e6:2a:f4:99:fb:6d:b1:f9:b4:2a:b5:
6a:60:a9:21:0b:4e:14:f1:56:8d:3c:ca:09:c7:95:
ff:b3:5f:45:5e:db:12:60:54:9e:6b:a2:32:2d:a3:
28:34:c2:71:f8:d6:d9:e5:fc:43:d0:cb:58:d1:79:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BF:56:25:9A:8C:D6:17:2B:BC:E1:D7:1D:16:11:0E:A3:F6:D6:77
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/Fb9WJZqM1hcrvOHXHRYRDqP21nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.236.0/22
193.93.24.0/22
IPv6:
2a0d:9a00::/32
Signature Algorithm: sha256WithRSAEncryption
0f:41:f6:aa:27:bc:70:09:bd:18:8e:d4:ed:df:2b:d2:f9:e9:
b8:74:a4:03:fd:da:0a:01:93:4e:bd:a5:5e:4d:f7:04:7a:4b:
71:fd:93:48:b6:24:a4:0f:44:86:a9:03:7d:98:e8:41:17:82:
2e:17:0b:55:17:c2:db:42:14:93:38:8c:5e:d1:73:6e:84:ec:
58:e3:b5:3b:f2:7c:12:84:2e:94:72:37:bf:08:88:e5:4d:00:
60:03:f0:a0:a6:c1:87:53:9d:91:f6:f5:1f:12:ac:21:0c:9b:
45:b4:08:88:70:a7:b6:d3:91:d6:09:05:49:9d:7d:fd:a7:6a:
3e:2c:5f:61:29:96:c8:03:4e:b9:82:9d:70:a4:c2:37:e3:58:
18:89:40:ca:78:a1:8e:03:1e:d6:60:1b:e6:89:5d:22:3a:5c:
72:1b:c6:a8:14:9e:72:06:f3:58:a8:10:18:16:8e:f6:89:a1:
67:91:51:ae:5f:00:a0:43:3e:8c:4e:56:bb:5c:ca:bb:a1:80:
2c:8d:75:84:11:67:e0:58:55:cd:e2:e9:52:37:20:02:28:97:
45:9b:f1:2a:d1:bc:70:66:63:38:b8:c2:62:12:b3:34:e1:b5:
e6:8d:5d:63:f8:05:47:11:39:f3:99:fc:f6:ec:0c:6e:e5:e3:
e4:fd:58:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:53 2024 by rpki-client on console-fra.rpki-client.org