Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/fCVj8cdLinPWGY_Xtxbcg4xCFa0.roa
File: fCVj8cdLinPWGY_Xtxbcg4xCFa0.roa (raw, json)
Hash identifier: Gx+wI0pqrwaV3FBCT+tVYMQn9IV9v21my+OiAkQlbO4=
Subject key identifier: 7C:25:63:F1:C7:4B:8A:73:D6:19:8F:D7:B7:16:DC:83:8C:42:15:AD
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 0121F2EC
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/fCVj8cdLinPWGY_Xtxbcg4xCFa0.roa
Signing time: Tue 24 May 2022 16:06:13 +0000
ROA not before: Tue 24 May 2022 16:06:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 91.232.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19002092 (0x121f2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: May 24 16:06:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c2563f1c74b8a73d6198fd7b716dc838c4215ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:8b:56:fe:ab:54:08:26:e1:1a:65:8a:1e:
f0:27:52:91:19:3d:5d:2b:88:2a:d9:cb:54:d0:2e:
65:01:53:48:b7:38:6e:2c:59:e9:1f:c7:43:f1:b4:
a7:a6:fd:b0:f4:a1:6d:87:7a:49:af:e8:8d:3e:9d:
3b:66:ce:4f:40:6c:53:dc:17:c8:d4:81:ad:c5:66:
8d:bf:0a:56:b3:16:a9:5a:8a:f8:6e:c4:0d:32:51:
47:d6:f7:21:2f:30:8a:43:59:91:b3:9b:a1:d8:4a:
1e:22:29:39:45:2f:1e:6c:b9:18:aa:33:8a:20:5c:
3d:76:0a:76:a3:04:15:f4:f7:eb:7c:1f:bc:a2:30:
f6:50:e4:6c:1c:02:8e:65:ff:ef:ec:bc:26:6e:c9:
4a:6f:04:ad:d2:8f:6d:9c:fb:13:00:7c:ef:61:20:
2e:fd:b4:4f:c0:da:f5:c8:bb:af:11:fd:90:cd:f9:
db:06:46:18:2d:65:d7:35:9e:06:a2:c3:01:df:5d:
7e:6c:49:97:b6:dc:e2:72:06:40:7b:20:7e:5a:29:
e5:22:75:91:56:5f:7b:82:96:01:57:56:f6:fb:ab:
58:27:b3:eb:fc:58:89:08:f7:ea:07:b0:31:2c:3e:
48:10:49:81:8e:9b:bc:dc:3b:ab:31:36:44:5c:4d:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:63:F1:C7:4B:8A:73:D6:19:8F:D7:B7:16:DC:83:8C:42:15:AD
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/fCVj8cdLinPWGY_Xtxbcg4xCFa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.103.0/24
Signature Algorithm: sha256WithRSAEncryption
22:20:c2:ab:05:90:b0:2f:14:7a:6b:dc:72:9b:a1:d2:b5:d9:
bd:5b:84:b3:2b:cf:16:b8:3a:0f:bd:13:42:d8:40:48:04:29:
4d:50:50:94:92:cd:3b:4c:21:65:8d:52:39:03:27:62:ec:37:
f9:aa:16:14:1d:bb:60:a8:13:08:92:16:13:42:54:b4:23:b0:
56:06:ef:b8:ae:c8:eb:6a:c5:56:39:42:d3:fe:d1:19:22:b8:
0c:2e:00:ba:fd:a2:63:e9:cd:30:cf:c8:eb:ca:28:a6:e9:75:
6d:9d:54:d4:31:87:01:0a:ce:55:5a:e9:7e:ca:7e:e0:be:8d:
b7:53:4d:c2:a0:a3:fa:89:06:2c:4e:0b:a3:30:e3:c5:42:83:
6b:88:d8:49:72:b6:b5:4f:dd:85:17:48:8a:91:7d:35:9b:82:
d4:94:63:af:db:ed:b5:16:98:d6:8c:77:fc:68:c0:cc:e0:1f:
5d:d4:24:18:5e:ac:24:60:a1:27:86:ae:9d:7d:e4:b7:33:36:
fa:41:d6:d2:ca:90:39:01:94:72:8d:6c:c5:ee:9c:74:e3:56:
f1:85:e1:36:45:aa:42:9b:b2:9c:e7:5e:a5:b3:61:25:e0:e9:
57:4e:a5:52:df:d5:9d:48:35:94:35:b7:ca:03:f6:92:e1:de:
03:85:46:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-ams.rpki-client.org