Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/FXr-qTW-wnmrXg3ZotH-0fe9qWw.roa
File: FXr-qTW-wnmrXg3ZotH-0fe9qWw.roa (raw, json)
Hash identifier: DqDAi9SXnRRQzeXQBEfNMcS6S42u5ZO3vFLG1uEN2/E=
Subject key identifier: 15:7A:FE:A9:35:BE:C2:79:AB:5E:0D:D9:A2:D1:FE:D1:F7:BD:A9:6C
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0189E006A445BF43BA08541FC03C3BFC2209
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/FXr-qTW-wnmrXg3ZotH-0fe9qWw.roa
Signing time: Thu 10 Aug 2023 15:17:58 +0000
ROA not before: Thu 10 Aug 2023 15:17:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 91.247.36.0/23 maxlen: 23
91.215.152.0/24 maxlen: 24
91.215.153.0/24 maxlen: 24
91.215.154.0/24 maxlen: 24
91.215.155.0/24 maxlen: 24
91.210.166.0/24 maxlen: 24
2001:67c:2f4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e0:06:a4:45:bf:43:ba:08:54:1f:c0:3c:3b:fc:22:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Aug 10 15:17:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=157afea935bec279ab5e0dd9a2d1fed1f7bda96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:fa:0c:fd:67:48:14:b5:44:e6:86:36:1e:
a8:c8:96:3e:c8:e6:00:8f:20:65:63:c0:25:9a:bf:
08:db:96:a4:0d:87:fd:97:d7:75:1f:20:24:0a:db:
69:8d:d1:f4:dd:ff:48:c6:d8:61:fe:1b:2c:b0:b7:
f1:4d:b6:0b:e1:bd:8c:2d:84:e4:2e:c8:ae:d4:aa:
b9:05:a4:da:28:44:6d:9d:50:da:d8:ed:ae:0b:e7:
ed:39:77:a3:3b:25:5a:22:bf:a0:c2:b9:ab:09:e1:
75:f8:65:8d:e2:19:c3:5b:5a:64:8e:d1:84:be:cd:
c7:6f:92:86:b5:a1:67:fc:29:a3:02:4b:03:31:06:
e3:19:6b:81:1b:22:2b:9a:e1:d6:92:aa:1e:d5:1a:
6c:a1:39:8e:d9:b0:e0:7a:3f:cb:03:fa:a0:03:fa:
60:76:ec:b9:fa:a3:8d:2c:f8:b3:4f:5b:0e:64:4d:
a7:4e:90:ff:e4:93:57:40:a9:f0:5a:bd:0b:63:3d:
47:73:11:a9:7d:25:c8:74:ef:5b:48:d1:2c:a4:15:
45:ae:14:08:d0:80:ca:e0:41:34:2e:20:fb:fa:59:
a5:1b:d7:6d:38:05:98:a7:93:82:00:94:42:a4:0e:
3c:da:4b:9f:df:5b:1f:8f:61:81:ec:cb:1b:2b:fe:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:FE:A9:35:BE:C2:79:AB:5E:0D:D9:A2:D1:FE:D1:F7:BD:A9:6C
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/FXr-qTW-wnmrXg3ZotH-0fe9qWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.166.0/24
91.215.152.0/22
91.247.36.0/23
IPv6:
2001:67c:2f4c::/48
Signature Algorithm: sha256WithRSAEncryption
1e:de:b6:80:b2:8d:48:0a:14:ac:99:e3:d9:71:ee:5d:60:01:
26:da:d0:28:b7:0e:56:6d:ea:92:c1:2a:28:83:b8:38:c2:47:
1a:05:1a:68:76:af:3c:30:0f:a4:72:44:fb:09:44:c2:db:bd:
77:70:00:35:0c:af:0e:8c:b6:ef:12:57:4e:e2:c4:9b:7b:e3:
20:bf:96:6c:f6:b2:58:0a:46:41:f5:70:9e:a1:40:04:67:36:
bc:7d:5e:f6:d5:e4:27:35:2e:f0:c1:93:a5:3b:26:60:19:31:
38:82:71:ea:32:00:95:6a:a8:e6:80:6a:2e:13:87:57:65:ee:
d9:d7:33:92:a1:e0:4b:f6:84:97:c3:85:c5:df:97:fd:08:7a:
8c:ae:f6:6f:e2:70:7d:70:9e:d6:1b:b9:7e:85:30:c1:d7:a4:
86:69:ed:05:58:4d:07:96:5e:46:1e:e0:d9:04:fd:bf:20:31:
e8:2e:6e:27:02:b7:ab:11:ee:37:53:35:d1:0b:53:6b:eb:cd:
d5:28:0d:10:5f:fe:50:a6:2c:bc:fa:66:2b:02:a6:3c:7d:69:
b9:f3:05:ed:32:71:09:b4:89:8c:83:70:f1:9d:ae:e3:b5:65:
9f:7c:e7:2e:2f:52:0f:54:0a:37:84:93:13:93:7b:4d:d6:2b:
1c:ac:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:48 2025 by rpki-client