Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/frkc4G8_sR5BBsVDenXjsEt0uSA.roa
File: frkc4G8_sR5BBsVDenXjsEt0uSA.roa (raw, json)
Hash identifier: EPlWfcJ73NjThA03urWa62tfh9ZGHtThMH0WrRkky9o=
Subject key identifier: 7E:B9:1C:E0:6F:3F:B1:1E:41:06:C5:43:7A:75:E3:B0:4B:74:B9:20
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 0189EA945A91212258C7F134E2E705331A02
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/frkc4G8_sR5BBsVDenXjsEt0uSA.roa
Signing time: Sat 12 Aug 2023 16:28:58 +0000
ROA not before: Sat 12 Aug 2023 16:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200113
IP address blocks: 91.226.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:94:5a:91:21:22:58:c7:f1:34:e2:e7:05:33:1a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Aug 12 16:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7eb91ce06f3fb11e4106c5437a75e3b04b74b920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:45:89:b8:ca:12:41:dc:98:b3:52:61:0a:
a3:d4:e5:b8:75:12:23:63:de:b0:bc:ed:c3:a9:12:
9a:94:20:06:c8:b9:db:2a:f6:ee:21:f4:e5:2a:92:
5a:d4:45:6e:30:df:d5:c5:af:22:44:18:e9:20:bd:
13:ad:f1:2c:b9:9f:ee:08:70:7a:c1:82:51:c0:47:
5e:45:5b:2e:87:16:2e:75:e5:27:7b:ae:04:38:b5:
12:9d:32:c8:83:31:03:3e:31:53:a3:94:5b:72:20:
ef:b6:23:90:09:ed:ea:00:3f:e3:2e:bf:0a:8d:14:
43:d9:c7:61:ba:d9:e9:00:22:71:01:1d:ef:4e:94:
f7:08:85:fb:a5:18:f8:04:76:e8:40:26:98:7b:69:
52:c3:2a:85:6d:bb:1f:77:fc:0e:2a:79:e2:06:1c:
10:d2:bf:73:04:12:fa:a0:a0:30:9b:47:83:03:a6:
b2:a0:de:dd:c7:09:1d:36:f8:bf:34:00:77:93:36:
27:cd:2c:4d:04:e4:ce:3e:c2:9d:d5:e7:23:12:72:
96:c4:18:5c:5f:8a:51:a1:e3:52:7d:05:8d:15:7c:
f5:3d:d4:5a:42:41:ec:18:57:0b:ff:bb:64:62:41:
05:49:0c:fe:35:c6:95:bb:c4:e3:e4:80:ff:1c:23:
c1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:1C:E0:6F:3F:B1:1E:41:06:C5:43:7A:75:E3:B0:4B:74:B9:20
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/frkc4G8_sR5BBsVDenXjsEt0uSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:67:0e:2b:63:0a:6f:fb:06:b7:95:d5:bc:3f:09:5f:92:a5:
b3:40:9b:5b:9e:19:29:13:32:73:bc:4b:9b:9e:fc:d5:f3:1c:
a0:0f:f1:50:68:10:5b:03:3c:86:f6:96:b3:7c:a8:a6:ea:49:
2c:fb:39:43:7b:af:38:3d:71:76:dd:e6:87:3b:6b:b5:32:7b:
a8:dc:9f:56:36:f7:04:a4:0e:95:b1:da:e8:f1:16:d6:da:54:
c9:7d:e7:2f:b1:c9:84:1e:8e:ac:c3:38:b6:a5:4a:9b:e1:4e:
fa:34:69:76:65:1c:33:55:cf:01:13:80:db:e7:c1:61:b4:14:
02:37:f4:a5:56:2c:7b:23:bd:fd:75:e5:e7:af:be:7f:06:e9:
70:bd:09:33:37:40:00:41:4a:5d:d4:a1:d4:5b:65:4d:3f:2e:
30:73:2a:e9:f2:15:ce:5d:55:3a:f5:59:ef:de:fb:e3:75:a3:
5a:8a:03:e6:c2:71:20:2d:36:5c:d3:9b:43:56:90:b0:a1:a6:
10:5f:f1:f3:ac:ae:d7:c4:b5:04:98:73:e0:2d:53:1b:15:4b:
70:12:34:92:95:01:17:16:81:8b:12:f9:fa:b9:cc:da:48:6e:
85:e6:83:b3:3e:20:03:83:5d:db:09:f6:2e:f9:e1:14:7d:15:
cb:45:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:29 2025 by rpki-client