Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/o_4yQ3ovObAVHh0XKXaVCrCClnc.roa
File: o_4yQ3ovObAVHh0XKXaVCrCClnc.roa (raw, json)
Hash identifier: stqmuyy3ccqmvb63DEjB+lj5i1WMSAGrvGB0P2P44Hw=
Subject key identifier: A3:FE:32:43:7A:2F:39:B0:15:1E:1D:17:29:76:95:0A:B0:82:96:77
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018397B38858C4F1F566E2BE512B35F6A446
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/o_4yQ3ovObAVHh0XKXaVCrCClnc.roa
Signing time: Sun 02 Oct 2022 07:57:48 +0000
ROA not before: Sun 02 Oct 2022 07:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 91.229.134.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:97:b3:88:58:c4:f1:f5:66:e2:be:51:2b:35:f6:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Oct 2 07:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3fe32437a2f39b0151e1d172976950ab0829677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:15:ba:b6:49:fe:35:f9:13:44:d7:dc:5d:
3c:58:c1:83:ae:5d:2a:09:96:a9:71:5b:8e:2a:41:
0a:f6:64:7d:33:ee:a5:e7:52:63:0f:a3:23:4a:24:
d0:4f:eb:2e:64:46:dc:a5:f0:60:af:ac:01:93:17:
1b:c5:d2:36:0d:92:57:a0:5c:2b:e2:7e:e0:ea:46:
13:df:c6:c5:92:38:6e:2c:5c:d2:84:a5:22:b8:ae:
ca:80:7e:c3:47:0d:0a:3b:84:e8:14:52:09:90:fd:
33:94:81:f0:9d:67:3a:9a:d8:a7:11:28:ad:d9:e8:
6c:3e:7a:6e:6b:6f:a0:56:6e:3e:aa:f4:c9:1c:66:
17:f4:c9:3a:c3:99:4f:df:c1:f4:b0:51:89:2a:ef:
92:ea:e3:de:90:13:c1:a1:81:cf:34:56:52:8b:a4:
b3:9f:7e:05:3b:a7:32:43:4a:d6:08:f9:60:b1:86:
79:3b:3c:27:31:d9:66:dd:5b:2e:5e:c5:6c:46:f0:
9a:59:7b:b7:be:a1:8b:7a:1f:33:45:89:db:6f:6e:
42:c0:0a:eb:19:12:ce:27:ab:5e:6b:fd:21:27:5c:
1c:64:91:53:d1:12:f5:69:d1:89:02:12:37:41:8f:
ed:a8:97:13:37:01:4c:11:8b:0b:18:a1:f2:7f:06:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FE:32:43:7A:2F:39:B0:15:1E:1D:17:29:76:95:0A:B0:82:96:77
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/o_4yQ3ovObAVHh0XKXaVCrCClnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.134.0/23
Signature Algorithm: sha256WithRSAEncryption
12:1a:7c:5b:62:dd:d5:d1:96:ba:a7:4c:b4:2c:dc:1b:6d:b6:
83:04:eb:8b:ca:65:82:82:0e:d4:da:96:85:78:0e:ca:06:7e:
24:d5:32:3c:e1:7e:a2:46:eb:75:38:bb:0e:01:49:d5:8a:64:
fd:55:3a:c6:bf:7d:5d:04:2b:8c:c7:57:84:c2:8d:7c:2e:64:
72:5e:6b:1e:80:6f:6c:92:f5:48:f1:b8:a9:6e:35:16:05:2d:
7a:4c:7c:38:6a:ab:54:19:7f:9c:ca:7e:e2:6b:9c:c0:a7:b7:
4a:25:d8:5e:48:eb:8a:b8:0a:c4:3a:d2:f0:2c:dd:27:f3:d9:
ac:05:86:a0:97:65:26:10:70:82:a2:07:ca:c8:95:e6:38:58:
cb:ad:38:26:7e:f1:36:78:7a:b9:00:cb:7e:74:64:a7:69:75:
a6:ea:16:4f:6d:0a:17:51:80:af:d6:e3:31:b2:84:a3:b0:8b:
e1:9d:15:08:ab:1d:d9:42:01:ba:65:e5:e8:13:ba:6b:08:32:
3b:f7:eb:a3:0b:8c:e5:8c:60:e5:55:60:51:1e:41:7c:47:84:
a5:6f:7e:23:07:f0:cd:a5:9a:9c:0f:30:f7:62:39:e7:9d:28:
78:11:c4:a0:3e:f6:10:e2:66:6a:1e:7e:bf:f5:6a:97:fa:72:
ee:0d:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org