Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/fBfkAZlp-gYNliFMZw85quWUhPE.roa
File: fBfkAZlp-gYNliFMZw85quWUhPE.roa (raw, json)
Hash identifier: D5aA9JloFfcIY3DC3uZdTaenHDncUG4+bDi4sRdlRFs=
Subject key identifier: 7C:17:E4:01:99:69:FA:06:0D:96:21:4C:67:0F:39:AA:E5:94:84:F1
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 0184A9DE064872894C88BFC820631BA3FE2F
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/fBfkAZlp-gYNliFMZw85quWUhPE.roa
Signing time: Thu 24 Nov 2022 13:40:10 +0000
ROA not before: Thu 24 Nov 2022 13:40:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203499
IP address blocks: 2.59.108.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:de:06:48:72:89:4c:88:bf:c8:20:63:1b:a3:fe:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Nov 24 13:40:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c17e4019969fa060d96214c670f39aae59484f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:33:6a:36:6f:a3:49:39:fd:d1:38:d2:c3:
7b:35:40:d1:47:3f:1d:55:7a:ca:ff:09:0e:75:17:
e3:de:dd:16:5d:8e:6b:a8:3c:52:61:be:68:22:d0:
c3:ef:d7:f7:df:90:2d:0e:d8:4d:33:6a:c0:a5:ca:
f2:2f:56:3f:82:e7:63:00:2e:1a:01:76:0a:38:41:
dd:d3:fc:ff:05:ab:04:d8:92:d2:bd:6e:7e:d7:bf:
9e:17:15:7d:72:c7:19:32:6c:d9:a6:5d:c1:15:91:
d7:7d:86:15:e7:36:36:2b:33:d0:8a:5b:00:7c:7a:
e3:11:dc:f3:8f:6c:f4:2f:ab:8b:f2:78:6b:12:a0:
0b:ab:af:b2:0c:dc:3d:e9:79:d1:a2:d4:96:19:aa:
5d:bd:c4:d4:11:22:93:65:cf:3d:7a:6a:85:8d:58:
15:0a:ed:ca:39:a7:6b:2a:7e:de:c1:9c:1d:76:1f:
9e:21:63:7a:d7:27:00:3d:fd:c9:21:af:02:e9:dc:
40:7e:a5:55:66:cc:10:38:ff:d4:52:3c:a0:20:22:
24:e6:a9:4e:ba:37:b2:eb:6c:a4:87:6c:f3:ed:a3:
a7:14:00:2d:7c:e7:46:9b:78:69:83:d2:ac:58:ba:
9e:3e:c9:86:7a:de:7f:b3:ad:eb:01:61:a0:67:c6:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:17:E4:01:99:69:FA:06:0D:96:21:4C:67:0F:39:AA:E5:94:84:F1
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/fBfkAZlp-gYNliFMZw85quWUhPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.108.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:de:01:82:26:98:ea:e9:d8:d4:dc:8e:3a:fc:10:91:c2:08:
e9:bf:d1:83:84:c2:90:c8:3d:d2:aa:53:25:04:f2:ed:c0:92:
01:81:d0:67:01:ba:2a:15:8f:01:c5:05:f1:1c:6f:8f:28:a4:
06:d2:98:e6:62:62:7c:37:6b:83:fc:cb:2c:13:1a:0f:47:ec:
80:42:44:f0:27:14:f6:8f:7c:67:29:d9:1d:c4:33:70:e4:74:
66:2f:8e:2e:13:9b:63:44:c1:49:6b:74:f6:7f:13:54:13:52:
63:30:85:59:50:59:5f:b8:1b:d7:0f:b1:50:ca:0e:8c:71:2e:
84:78:e0:5f:82:a2:1c:0b:7a:58:12:2b:83:35:2d:9f:39:6c:
da:24:e4:3a:76:47:a5:33:7c:4a:91:7e:7e:ba:09:9d:75:86:
f1:ed:67:2f:e7:c7:8a:31:51:34:b3:53:f9:d9:61:b3:5f:07:
16:a3:7c:2a:82:60:ea:4f:f5:1d:90:17:18:51:e4:d8:06:8f:
e7:78:72:4b:52:40:21:1a:72:a9:24:5f:53:20:6f:f8:04:c5:
fd:0e:65:5c:37:97:21:fd:05:72:81:16:7e:d7:da:9a:92:8b:
5f:63:b5:73:9f:d8:93:5a:f9:cd:9c:05:19:00:1d:fb:a7:d3:
e0:af:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org