Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/_J3R3cdcqipoYCPxGTb1fi2-FSY.roa
File: _J3R3cdcqipoYCPxGTb1fi2-FSY.roa (raw, json)
Hash identifier: KMzlmyWwjSzrbkQ7QznhBbNWIIP0vrq4OpI1cVQpk6Y=
Subject key identifier: FC:9D:D1:DD:C7:5C:AA:2A:68:60:23:F1:19:36:F5:7E:2D:BE:15:26
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 168E682B
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/_J3R3cdcqipoYCPxGTb1fi2-FSY.roa
Signing time: Fri 11 Feb 2022 16:04:39 +0000
ROA not before: Fri 11 Feb 2022 16:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34182
IP address blocks: 91.238.144.0/24 maxlen: 24
2001:67c:938::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378431531 (0x168e682b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Feb 11 16:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc9dd1ddc75caa2a686023f11936f57e2dbe1526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:46:50:b7:0a:d4:2d:4e:4a:c6:1b:1a:6a:
39:91:85:4f:ef:b3:00:b5:2d:6f:3b:11:20:68:09:
5d:b6:c6:82:f9:14:c4:c4:d5:99:94:78:ac:f9:ce:
39:e5:b9:0a:8f:b7:2f:c9:84:e6:99:e9:d6:23:a3:
95:91:e1:32:18:2c:3d:22:53:91:cc:66:b8:cd:1f:
f5:a6:e8:25:28:c5:48:2d:30:ac:98:7a:51:0c:21:
8b:5d:8c:ee:8f:3e:79:d6:53:d9:8b:c3:98:24:1f:
5b:ab:5b:89:e8:ae:75:f7:79:ce:62:b2:44:73:f7:
a0:6e:60:c6:bd:73:c1:18:76:2b:53:e3:c8:da:00:
a5:81:a0:0b:6f:bd:2f:d6:20:20:28:50:40:17:3e:
91:08:e9:46:ee:9a:e2:43:48:27:89:75:8d:22:d5:
ea:47:ec:59:09:a2:77:bc:b7:60:c4:3d:a5:e0:5a:
c8:bc:43:67:be:d7:af:6a:6c:7b:80:b6:a5:76:e5:
b6:ed:72:87:ad:6b:74:8f:65:9e:94:21:07:e5:2b:
ac:b5:86:6a:f0:73:c8:62:60:bb:c8:6c:63:0b:92:
78:01:d3:ad:53:d0:d7:cd:c7:b0:82:68:06:fc:d6:
28:36:18:31:97:ce:36:cc:73:f6:5f:c8:18:13:f5:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9D:D1:DD:C7:5C:AA:2A:68:60:23:F1:19:36:F5:7E:2D:BE:15:26
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/_J3R3cdcqipoYCPxGTb1fi2-FSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.144.0/24
IPv6:
2001:67c:938::/48
Signature Algorithm: sha256WithRSAEncryption
c7:a7:ef:87:d9:c8:4e:bc:23:ec:ea:44:87:d1:80:54:45:35:
d1:3b:86:78:31:5f:78:92:70:54:40:3d:48:f3:92:81:11:21:
4f:dc:b7:6d:f8:6a:d2:2f:f2:37:ec:93:2b:ec:c7:71:c4:da:
f2:7d:dc:64:2e:fd:e0:10:92:6f:82:a4:64:49:d1:78:a0:95:
e2:32:53:40:12:37:08:4a:b7:43:a4:dc:e3:75:d3:09:24:90:
58:6a:d1:e2:e8:97:71:c2:9f:72:d9:52:7d:8a:81:89:09:86:
0b:77:c4:0c:15:83:af:18:99:bb:b8:20:e3:b6:34:0c:b9:2e:
c2:4e:f9:24:82:af:59:42:88:27:49:34:54:08:02:2c:63:8b:
4d:b2:7b:2c:fb:a2:b7:5a:73:dd:46:25:d2:3b:d9:0b:03:fd:
af:c4:56:1a:e0:ad:5c:ff:bb:f1:b1:d4:44:22:b2:36:55:31:
1e:01:b3:df:a5:a2:8a:a8:de:17:74:d6:43:19:1e:d0:47:a9:
9b:c9:15:d5:ea:08:92:57:1c:41:2f:ff:c9:5f:72:c0:78:3b:
c7:d2:e6:1d:6f:6e:69:68:c4:bd:a8:38:5c:cd:63:79:06:d7:
a4:41:b4:d7:e7:56:88:35:e3:39:83:5d:07:f9:42:a5:d1:7c:
c3:48:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:43 2024 by rpki-client on console-fra.rpki-client.org