Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/1x_FwUBu8chx6T6sXSDHuk1n1YM.roa
File: 1x_FwUBu8chx6T6sXSDHuk1n1YM.roa (raw, json)
Hash identifier: cXpxbR3zgnwWUfa17DOoh1F0RV74QAsnXBXv94ZxYEA=
Subject key identifier: D7:1F:C5:C1:40:6E:F1:C8:71:E9:3E:AC:5D:20:C7:BA:4D:67:D5:83
Certificate issuer: /CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
Certificate serial: 014C53
Authority key identifier: F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/1x_FwUBu8chx6T6sXSDHuk1n1YM.roa
Signing time: Mon 07 Feb 2022 21:47:40 +0000
ROA not before: Mon 07 Feb 2022 21:47:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61048
IP address blocks: 91.212.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85075 (0x14c53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
Validity
Not Before: Feb 7 21:47:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d71fc5c1406ef1c871e93eac5d20c7ba4d67d583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:47:f3:ff:c2:07:60:62:bd:26:13:9f:0c:
86:68:0e:28:bb:a7:e3:d5:6a:bd:18:02:2f:1a:a9:
5b:49:b5:12:b1:c3:6e:e5:2c:64:36:0d:9a:af:08:
5a:7b:09:75:f0:04:07:9c:27:48:00:fc:ae:05:49:
bf:c8:27:1a:50:1f:e0:1e:af:5e:fa:c3:27:b9:59:
07:62:7f:11:6c:6f:77:4d:8f:75:ea:1e:de:97:df:
18:d1:17:bf:45:65:c7:1d:66:4b:e2:bc:78:f1:a8:
0e:e9:78:84:93:3d:62:a9:6f:98:3c:bd:76:8a:7d:
a4:8b:40:2a:4a:22:c9:d1:e5:9b:2e:49:02:eb:49:
00:42:8a:5d:4a:8b:ac:d4:3e:40:e4:f1:f3:7e:41:
5b:1b:4a:f9:d2:22:39:d1:ca:ae:20:b0:d6:81:f5:
4d:2f:bb:a4:5f:e5:97:86:dd:d3:9a:21:82:fc:4e:
c5:ef:92:bf:c7:13:b5:8d:85:06:79:ce:c3:e3:c8:
bf:fb:22:1e:83:8b:8e:ce:30:15:c9:82:d9:e4:9a:
75:bd:c4:be:04:9b:09:8f:b3:15:8c:f2:a2:f6:9a:
b1:b2:ea:6e:9e:3a:3a:b3:29:ce:c9:92:80:94:c8:
f8:b2:78:04:43:7b:f2:cc:e7:5c:75:83:07:e9:07:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:C5:C1:40:6E:F1:C8:71:E9:3E:AC:5D:20:C7:BA:4D:67:D5:83
X509v3 Authority Key Identifier:
keyid:F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/1x_FwUBu8chx6T6sXSDHuk1n1YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.103.0/24
Signature Algorithm: sha256WithRSAEncryption
83:65:7c:99:cc:34:b1:9f:b6:17:f1:8a:ea:57:e5:18:ff:63:
3c:08:81:e2:d2:b5:c4:ad:99:a5:a8:5b:49:ae:60:aa:92:eb:
7b:4c:f5:ef:6d:85:b5:e4:95:89:d7:ce:23:27:41:90:32:b9:
30:63:ea:b3:49:82:81:66:22:e8:0f:98:80:84:76:f3:d7:39:
80:de:19:56:ae:83:0e:1b:56:7c:53:6a:a7:f6:d3:76:04:ba:
16:70:86:43:7c:c4:23:95:56:90:60:09:50:26:ad:fa:bc:55:
1a:1e:18:58:50:20:18:ac:3b:c1:35:1b:76:bd:08:ff:de:ad:
19:68:9f:1f:3f:d4:95:fd:8c:c4:06:4c:a2:38:1c:cf:8c:14:
10:d9:86:c2:1c:e8:64:80:1e:83:f0:55:3c:3e:59:47:ad:dc:
08:db:2b:05:a8:8a:e9:8c:df:f5:0e:f7:8a:0a:2a:51:30:a3:
b0:72:70:27:7a:1d:17:1f:99:4b:96:35:f3:6a:86:c7:95:9a:
d8:1a:fc:7c:d0:6c:df:28:c5:30:0e:be:68:41:0a:52:02:2d:
6e:ae:e7:f3:bc:9e:d3:50:c2:3e:82:e9:2b:d6:d0:84:c3:a0:
27:d6:94:2e:ff:e8:8b:ad:91:f0:02:42:41:d6:c4:9c:c8:7b:
bd:61:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:05 2023 by rpki-client on console-fra.rpki-client.org