Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/FsLh4_TEymg-T2VTLXbb2fwYZFk.roa
File: FsLh4_TEymg-T2VTLXbb2fwYZFk.roa (raw, json)
Hash identifier: uUGR0rt2CGjbVTxAppEvmW1Gy5wclHXopUe7PZudDPc=
Subject key identifier: 16:C2:E1:E3:F4:C4:CA:68:3E:4F:65:53:2D:76:DB:D9:FC:18:64:59
Certificate issuer: /CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Certificate serial: 1264AAFA
Authority key identifier: E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/FsLh4_TEymg-T2VTLXbb2fwYZFk.roa
Signing time: Sat 01 Jan 2022 08:05:10 +0000
ROA not before: Sat 01 Jan 2022 08:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38927
IP address blocks: 91.213.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308587258 (0x1264aafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e7b034b4e7ca86d716b1140fca5b590f3e78c0
Validity
Not Before: Jan 1 08:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16c2e1e3f4c4ca683e4f65532d76dbd9fc186459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:e0:49:b1:20:57:f2:4e:20:40:5f:f0:51:
86:cf:de:da:64:a2:4a:f1:49:91:9a:ad:06:ac:71:
e1:f6:fb:5d:f1:39:11:2e:7d:bb:3f:d2:fd:79:2b:
2f:e1:1f:89:f1:c7:3b:a1:60:53:49:9d:31:1e:cb:
87:9f:8b:e8:36:81:1d:5c:2a:b8:4b:fd:3e:3f:66:
e7:00:e9:4a:3f:07:7b:86:7b:a7:2f:1f:60:d0:0e:
1b:76:db:70:24:21:c8:11:1b:ba:bc:98:83:ff:8a:
94:18:f5:ac:00:3e:92:2f:44:0a:c7:43:9e:57:2d:
d2:ab:0b:10:1f:8c:27:40:95:13:88:a6:6a:b6:5d:
59:31:01:c9:81:21:cc:10:80:be:ff:ba:84:53:40:
96:c0:c8:fd:8f:b6:2d:72:a6:d8:ed:b6:01:27:7e:
07:65:b0:bb:75:45:49:bc:df:38:39:e8:f2:ff:7b:
a6:55:a8:72:df:30:d4:e9:de:c2:c7:15:67:3e:12:
77:5d:a3:61:ef:d5:4f:4e:3f:39:a6:cc:49:cd:f1:
15:46:25:b4:37:98:a0:2a:80:1e:09:03:71:82:5f:
20:ae:36:c8:83:e4:e9:a5:87:d8:19:f8:64:b7:ae:
86:b1:f0:5b:0c:73:f5:f6:0e:9f:42:db:5f:b4:aa:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:E1:E3:F4:C4:CA:68:3E:4F:65:53:2D:76:DB:D9:FC:18:64:59
X509v3 Authority Key Identifier:
keyid:E5:E7:B0:34:B4:E7:CA:86:D7:16:B1:14:0F:CA:5B:59:0F:3E:78:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eewNLTnyobXFrEUD8pbWQ8-eMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/FsLh4_TEymg-T2VTLXbb2fwYZFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6f4bf4-f1aa-47e7-9df1-80070af0eb5e/1/5eewNLTnyobXFrEUD8pbWQ8-eMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.232.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c4:15:c2:cc:57:73:17:f0:2a:9e:07:43:14:0f:13:c5:4e:
7a:73:ed:1f:24:cf:3c:82:2e:d5:13:63:5b:7f:3a:af:f9:c0:
52:34:02:2c:1c:87:34:55:94:53:d6:95:33:f3:3c:b6:ac:e0:
da:90:35:ba:c9:03:88:79:1a:85:9f:05:a9:ad:02:e4:65:84:
13:77:8b:e0:b6:2c:80:80:f8:8f:ed:88:ec:b8:79:23:36:1a:
b1:89:67:62:e8:e6:6f:28:6e:fc:b5:67:5e:97:e5:0a:00:58:
96:ed:e6:cf:29:34:83:05:43:01:d8:00:56:3b:af:9a:bf:ae:
2c:53:ab:56:83:15:33:dc:fb:9a:d2:c4:cd:f7:ef:34:77:57:
12:7c:fe:2c:6d:85:c9:16:a1:55:1e:86:30:51:92:28:c6:87:
e5:cd:c6:5e:e8:06:7e:5f:13:b4:f2:e4:22:e9:bb:49:d6:96:
51:20:4d:e5:b7:d8:b1:fb:7d:42:6b:3a:e1:21:16:9d:dd:c6:
80:ba:1c:61:2d:71:32:62:fc:a5:e9:9f:fe:2b:2c:64:c5:2b:
c0:84:c4:4f:69:4a:46:d6:04:ff:e2:9c:6b:89:b9:58:de:be:
9e:77:3e:70:40:74:20:e7:d6:6c:7d:cf:61:36:87:d8:10:39:
62:b3:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:07 2024 by rpki-client on console-ams.rpki-client.org