Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/1-_6EusENC6YAuDseG_QMEcoZ4bc.roa
File: 1-_6EusENC6YAuDseG_QMEcoZ4bc.roa (raw, json)
Hash identifier: pfkwh++LD6HJloDMWiCYIFU95sCGifpH3wHNNWtupVQ=
Subject key identifier: FB:FE:84:BA:C1:0D:0B:A6:00:B8:3B:1E:1B:F4:0C:11:CA:19:E1:B7
Certificate issuer: /CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Certificate serial: 37391C56
Authority key identifier: 18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/1-_6EusENC6YAuDseG_QMEcoZ4bc.roa
Signing time: Sat 01 Jan 2022 08:57:54 +0000
ROA not before: Sat 01 Jan 2022 08:57:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43868
IP address blocks: 91.217.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926489686 (0x37391c56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18caeb14a01ee16d836565e14fa53b4ab3c3cd26
Validity
Not Before: Jan 1 08:57:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbfe84bac10d0ba600b83b1e1bf40c11ca19e1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9e:f6:cd:0c:53:b5:e2:74:d2:d7:76:2c:08:
b8:66:06:53:68:b5:01:69:1a:b3:88:dc:d5:05:b7:
d5:2e:76:b7:26:14:80:03:2d:51:19:37:86:9e:94:
90:16:40:9a:f7:a4:c3:e6:80:e9:25:63:fe:e0:92:
c1:26:a0:6b:15:99:be:e4:ac:7e:e8:85:f7:04:d9:
4a:6d:d3:59:38:d5:6d:3b:6d:8f:e6:8d:75:a9:a8:
87:09:33:56:75:17:b8:5f:fe:1b:58:83:bd:2f:8d:
50:78:9a:64:61:27:2c:dd:49:36:b5:d0:52:5b:3a:
55:ce:76:50:e0:f6:51:3a:82:ea:ab:4c:0a:b7:79:
71:03:e5:6a:46:9c:57:d2:4c:4c:36:27:0c:91:64:
14:7c:63:66:be:b3:fc:8d:64:99:77:7d:83:f7:0b:
9a:c2:b4:60:a9:82:7e:7a:ab:86:3f:90:10:45:ae:
59:3c:14:97:3d:97:ed:b1:09:67:4b:29:12:26:c9:
f4:bb:84:6b:89:e0:f9:16:78:c4:1e:f7:44:78:b3:
d3:94:37:b5:d7:a4:72:5e:a7:c1:dd:d8:c5:4c:a7:
d4:f4:5c:a0:35:d9:ba:e2:e5:78:d2:10:8e:27:a8:
ff:87:97:73:c7:f7:7f:e5:75:b4:45:6a:36:95:50:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:84:BA:C1:0D:0B:A6:00:B8:3B:1E:1B:F4:0C:11:CA:19:E1:B7
X509v3 Authority Key Identifier:
keyid:18:CA:EB:14:A0:1E:E1:6D:83:65:65:E1:4F:A5:3B:4A:B3:C3:CD:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMrrFKAe4W2DZWXhT6U7SrPDzSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/1-_6EusENC6YAuDseG_QMEcoZ4bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e7b1d7-3d7a-46ab-810f-eddf23c1ba6d/1/GMrrFKAe4W2DZWXhT6U7SrPDzSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ed:f3:6d:2d:fb:84:27:51:21:ee:86:76:11:10:32:cb:ac:
f5:0b:50:45:1b:5d:2c:6a:29:c4:c2:5e:06:1b:49:3b:1e:44:
28:7f:2d:bc:a8:a1:2b:60:0f:f3:97:22:23:fd:10:7a:af:57:
12:0e:e0:07:2f:76:8f:d5:62:59:ca:ae:d7:5f:4a:22:b7:d5:
fd:84:54:fa:12:42:ea:ff:ec:bf:3a:9e:66:13:a9:f4:6f:13:
61:cc:92:2e:e5:42:51:2a:90:59:62:d8:f9:a5:e9:19:d4:a0:
bb:b7:fd:de:be:18:26:62:df:d4:b2:5b:97:2d:56:e2:69:f1:
97:74:0b:84:61:52:35:44:77:42:24:8b:69:d4:f0:29:2c:04:
7c:fc:9d:f2:66:8d:f3:9b:5c:9a:f2:79:30:7a:f9:38:ae:7a:
ba:3b:d0:0a:a4:e8:04:15:95:b1:ac:27:6c:1d:46:0f:ed:bc:
fb:42:31:4e:cc:81:0b:f4:8c:23:8a:b9:62:43:04:80:19:f6:
ed:97:68:cd:d1:25:b6:45:da:bb:ee:b0:76:6c:8c:08:c3:56:
f3:cd:4d:17:51:e4:11:07:f9:8e:cd:75:20:73:74:94:86:12:
71:92:59:ee:86:91:f0:ed:e0:49:27:5c:ab:58:17:02:f6:ee:
81:1d:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:38 2023 by rpki-client on console-fra.rpki-client.org