Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/fb4CCGBRawJSbadSDivB3qz1sho.roa
File: fb4CCGBRawJSbadSDivB3qz1sho.roa (raw, json)
Hash identifier: avA27X/joayUgbYLpUDcLMFMFSfvQq2cfKK90Avtg3w=
Subject key identifier: 7D:BE:02:08:60:51:6B:02:52:6D:A7:52:0E:2B:C1:DE:AC:F5:B2:1A
Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial: 103A7403
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/fb4CCGBRawJSbadSDivB3qz1sho.roa
Signing time: Mon 20 Jun 2022 07:54:47 +0000
ROA not before: Mon 20 Jun 2022 07:54:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47835
IP address blocks: 91.206.198.0/23 maxlen: 23
91.230.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272266243 (0x103a7403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Validity
Not Before: Jun 20 07:54:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dbe020860516b02526da7520e2bc1deacf5b21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:7e:b8:f2:a1:00:23:92:ff:69:27:01:86:
27:5e:4c:c9:d8:6e:d5:7f:df:55:d7:c9:e1:58:28:
fd:f8:1b:77:cf:08:c3:18:7d:2b:c5:ad:35:0b:1d:
95:a6:a8:f8:88:6b:e3:3f:48:01:d8:4a:cb:b6:b1:
8c:f8:f8:8b:d2:99:e4:05:91:e2:91:6b:1e:b4:19:
80:38:42:68:ae:e9:4b:c6:5d:34:bf:01:ac:69:38:
11:2c:41:41:50:0f:b9:a4:3f:d8:25:c1:67:ff:95:
f7:a9:f8:c4:2c:a9:a6:7d:68:1a:80:61:10:ff:6f:
a6:9f:a2:55:33:3e:86:b9:db:ba:03:d0:ac:6b:16:
b2:12:ee:4e:1c:1b:8c:5a:e9:f8:11:0a:73:86:17:
c0:65:d3:53:a0:0f:0e:b5:bb:c2:0d:39:6a:3b:7b:
47:a0:7f:6a:f9:5e:d1:80:a6:d7:ee:76:73:34:85:
ee:1e:5e:93:b0:ed:6d:0a:3e:32:ee:88:6b:7e:83:
74:17:9c:17:9f:d4:38:93:7e:f4:f8:92:10:15:3b:
2e:01:6c:67:90:dc:6d:73:2a:c5:11:0e:c0:2e:a4:
b9:34:7c:d9:00:20:09:2f:e7:66:b0:ff:74:d2:3f:
f8:50:2e:20:f2:4c:c1:2b:67:6b:ab:93:7c:6e:7f:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BE:02:08:60:51:6B:02:52:6D:A7:52:0E:2B:C1:DE:AC:F5:B2:1A
X509v3 Authority Key Identifier:
keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/fb4CCGBRawJSbadSDivB3qz1sho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.198.0/23
91.230.235.0/24
Signature Algorithm: sha256WithRSAEncryption
90:58:58:44:e0:b4:2c:3b:8e:f2:f6:50:3e:19:cc:7d:c8:57:
46:f5:d3:7d:aa:c6:ea:b7:36:0d:79:20:57:1b:d0:96:64:11:
d6:6d:f7:a3:0b:23:b0:aa:62:7e:4d:ec:e2:12:9f:01:b9:75:
45:53:96:48:e2:e0:46:87:1d:67:7a:56:87:a4:9e:83:b0:13:
6f:09:ca:4e:a3:3c:27:d1:51:30:4b:2c:02:96:5d:53:c0:06:
fb:25:76:96:c8:26:95:0d:6e:b6:15:96:a6:fd:ce:65:92:57:
c0:f2:43:03:8b:68:90:fd:36:5f:11:e0:3a:4a:5d:99:dc:b4:
fd:21:4f:c4:be:28:6b:e4:a1:fc:c1:e3:af:db:60:e6:64:33:
58:4a:4a:ff:1a:38:4c:e3:34:c5:8a:90:d4:e1:79:0b:01:86:
e3:34:69:62:bd:48:02:12:f9:9c:25:6e:c2:1f:41:21:ac:6c:
d2:27:06:e2:7a:0c:f5:6d:7a:4e:f8:bc:26:b0:c3:04:99:03:
70:1e:dc:b5:96:8b:da:b1:37:4d:eb:bf:bc:8e:34:81:6a:a2:
54:b3:8a:d6:1a:46:e6:22:e0:18:5a:24:8f:a9:ff:08:2e:5d:
1e:e3:4b:3f:39:37:0b:c7:6f:6f:42:ce:03:63:83:38:2b:23:
49:69:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:08 2024 by rpki-client on console-ams.rpki-client.org