Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/FnpqnZRXQrlcAlftZZpCQPreCUs.roa
File: FnpqnZRXQrlcAlftZZpCQPreCUs.roa (raw, json)
Hash identifier: kTV5IKMzz1j8ASq/fCdAc9IqHbj1TKu11tw+6wCb6eg=
Subject key identifier: 16:7A:6A:9D:94:57:42:B9:5C:02:57:ED:65:9A:42:40:FA:DE:09:4B
Certificate issuer: /CN=51f2045386969d11c741c3b545e02a00c1252f71
Certificate serial: 01C2B4
Authority key identifier: 51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/FnpqnZRXQrlcAlftZZpCQPreCUs.roa
Signing time: Wed 27 Apr 2022 21:21:02 +0000
ROA not before: Wed 27 Apr 2022 21:21:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56744
IP address blocks: 91.238.218.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115380 (0x1c2b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f2045386969d11c741c3b545e02a00c1252f71
Validity
Not Before: Apr 27 21:21:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=167a6a9d945742b95c0257ed659a4240fade094b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:f9:14:c7:f2:47:8a:73:c2:fc:73:99:e3:
65:0d:40:68:19:5a:03:cf:32:7f:f9:4f:74:d2:3d:
01:20:fe:25:1b:d7:e8:dd:ca:b7:e1:41:19:db:ef:
ca:71:d8:69:09:43:87:56:55:83:2b:53:0b:05:43:
33:af:25:3b:98:b4:42:ba:17:75:18:4d:cd:4d:be:
ff:6c:27:8f:82:4a:64:d4:0a:f8:2a:b4:2f:79:59:
c6:8a:48:3b:7e:0c:6e:de:73:45:e0:df:fd:ab:f0:
1a:3d:fe:89:99:48:32:82:10:68:97:b3:a9:2c:e4:
f7:d1:5d:fe:d1:ee:f5:e3:6a:33:62:2b:3d:72:c2:
8d:a5:6d:8b:ed:cf:5b:14:73:f7:d2:0d:fe:a4:fa:
5b:9f:24:36:4c:35:8b:08:03:1c:50:14:56:01:dc:
fa:65:bd:b1:b0:f0:4d:7a:df:2e:7b:0f:8e:d0:69:
4d:07:2c:6d:67:45:d3:bc:e7:86:10:2f:59:04:92:
50:60:49:46:5a:06:8f:0a:41:a0:57:62:dc:82:75:
ee:5d:20:ae:86:2c:b0:6b:d0:63:39:8d:f4:eb:24:
29:d9:b8:cd:e7:f7:2e:11:6b:de:f0:26:0a:45:be:
49:d3:4f:95:27:01:d0:f1:2e:34:6b:da:b9:29:a9:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7A:6A:9D:94:57:42:B9:5C:02:57:ED:65:9A:42:40:FA:DE:09:4B
X509v3 Authority Key Identifier:
keyid:51:F2:04:53:86:96:9D:11:C7:41:C3:B5:45:E0:2A:00:C1:25:2F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfIEU4aWnRHHQcO1ReAqAMElL3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/FnpqnZRXQrlcAlftZZpCQPreCUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73c15a-352b-4c09-9af1-3b82e43cf293/1/UfIEU4aWnRHHQcO1ReAqAMElL3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a1:ab:8c:da:d5:5a:98:34:11:c6:49:5f:dc:71:b5:61:71:
21:39:c0:84:85:37:d7:33:ae:77:dc:a0:28:cf:8b:fb:99:69:
11:a6:4e:2d:f8:e3:0d:cf:7d:42:ca:48:ad:21:34:4d:9d:ef:
8e:2b:46:60:a1:e6:be:3a:d1:b0:67:1b:cb:5b:74:57:92:9a:
34:a9:69:c2:f2:23:fc:b9:98:66:09:ed:bd:b2:31:a8:f9:f3:
1d:2f:59:4f:b7:69:74:00:e1:e0:99:ac:7a:90:46:4e:66:1b:
f5:19:3d:0c:2f:30:88:84:68:e2:d5:ab:7a:57:6d:c5:8b:e7:
9e:ba:15:a7:5f:79:24:96:5b:24:39:8d:5d:e1:39:01:61:a9:
d5:97:f1:96:1a:66:06:3e:6c:80:d2:28:d2:96:d7:99:82:99:
66:12:2f:b9:e5:3c:b1:58:2b:e4:c9:fa:f4:d7:db:22:b1:b4:
8f:bb:2d:16:c7:ac:4a:4f:92:13:1f:90:e7:d0:6c:7f:2a:24:
12:41:63:5f:36:09:d8:ab:f6:33:ed:68:ba:b9:ce:74:b9:e5:
17:e6:24:ea:b5:51:9b:6f:33:48:df:26:89:6c:3e:55:a5:d9:
82:9f:5c:e0:9a:90:7e:12:af:3e:20:02:e1:78:71:3e:14:d6:
35:26:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:29 2023 by rpki-client on console-fra.rpki-client.org