Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/fwjiOCb97fzTPIg43lxDhpKNTCA.roa
File: fwjiOCb97fzTPIg43lxDhpKNTCA.roa (raw, json)
Hash identifier: 4jV0ot1bY1OYS2KsO5/di6zu2PPcktA9AJWm+QnR41k=
Subject key identifier: 7F:08:E2:38:26:FD:ED:FC:D3:3C:88:38:DE:5C:43:86:92:8D:4C:20
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 010A2B09
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/fwjiOCb97fzTPIg43lxDhpKNTCA.roa
Signing time: Fri 17 Jun 2022 10:26:44 +0000
ROA not before: Fri 17 Jun 2022 10:26:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211269
IP address blocks: 91.213.201.0/24 maxlen: 24
5.8.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17443593 (0x10a2b09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Jun 17 10:26:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f08e23826fdedfcd33c8838de5c4386928d4c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:2a:77:a5:52:e5:d4:ed:a5:a5:e6:20:b3:
e2:5b:d6:08:81:c2:79:45:8c:7f:c6:79:1b:63:32:
c1:a2:60:b3:bc:4b:9e:fd:b2:0c:89:39:00:c4:c9:
62:7f:4c:af:ef:0e:0d:95:4a:48:eb:67:ea:8e:32:
9e:26:9b:2a:d9:e6:06:a5:e7:72:85:ba:01:40:97:
ef:9d:01:c9:64:d0:6f:0b:70:cd:23:b2:e7:90:bc:
b1:a0:d3:0d:7c:b2:21:bb:f4:8e:dd:e3:1c:ba:39:
d4:ac:56:b2:3f:8c:75:e6:ea:1b:c0:0e:0d:2e:3f:
08:fe:85:32:55:5e:27:ab:34:27:17:2b:ee:9c:fa:
1b:ab:d1:f8:d3:46:66:b4:c9:a3:b0:d9:dc:5f:6f:
d1:fc:a3:1d:62:34:e6:77:8e:06:39:44:34:2b:cc:
d6:fb:cb:5c:f7:3b:d0:80:a3:e8:6a:94:c8:d8:6c:
17:6c:09:0a:d6:12:3f:4d:78:8f:bb:de:db:72:3c:
3c:2c:3b:db:ee:fe:3f:b8:6a:2b:7e:ef:fc:b8:41:
79:f7:9a:d2:14:ec:1e:27:fc:5e:ff:18:0a:6c:bb:
aa:aa:e8:b8:d4:35:74:89:e4:d5:99:02:b8:5f:01:
ed:b7:32:cd:2e:e4:b6:be:85:15:f4:f1:4a:4f:2e:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:E2:38:26:FD:ED:FC:D3:3C:88:38:DE:5C:43:86:92:8D:4C:20
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/fwjiOCb97fzTPIg43lxDhpKNTCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.250.0/24
91.213.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2c:90:2e:79:8f:f8:07:99:d4:5d:1c:8f:ae:6c:60:30:ab:
da:40:a4:39:04:b2:b2:be:2e:8a:72:81:5b:67:6d:f9:f0:eb:
95:c9:31:9f:a8:97:68:d1:ab:78:3f:69:2a:05:44:0a:14:d4:
9b:54:68:e0:a6:b5:0d:f5:41:8b:4b:8d:d1:67:65:f7:a3:1a:
0a:03:75:7f:ed:b8:5c:7e:d3:89:bf:9a:89:2d:ca:0c:f1:19:
f0:db:18:a3:e0:32:3b:4d:7f:e5:ee:f2:17:5c:02:b8:bc:74:
b1:4a:e9:c2:15:cd:dd:f1:51:80:5a:14:20:0d:5a:56:33:dc:
00:ba:3c:1b:2e:05:1a:69:0f:9e:b7:7d:f8:f1:29:82:77:8f:
b8:b9:e6:60:5e:9a:aa:ad:cd:6f:14:18:50:c4:bb:15:42:24:
97:ef:90:b6:06:33:71:f0:02:21:b1:ab:01:3a:e0:0f:7e:a0:
3f:aa:d3:54:cf:9d:79:b3:1f:bd:d9:de:8a:bd:81:84:66:5b:
89:7b:5e:df:ad:9c:c7:10:2e:4b:2c:f5:0a:1c:9e:51:f1:1d:
45:e1:48:30:56:2b:81:8b:38:04:c3:7c:1d:41:34:68:c4:32:
cc:39:c4:d0:97:28:37:ee:78:8f:0a:41:6a:a1:cc:34:76:fe:
31:e3:be:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:52 2024 by rpki-client on console-ams.rpki-client.org