Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/FoOrS_0QWXIb_W4UeSIRMGnBECY.roa
File: FoOrS_0QWXIb_W4UeSIRMGnBECY.roa (raw, json)
Hash identifier: 9s8uR+hydO+iTXvOMEg6m3lHhGrn3k9ebbpK0tfWVGo=
Subject key identifier: 16:83:AB:4B:FD:10:59:72:1B:FD:6E:14:79:22:11:30:69:C1:10:26
Certificate issuer: /CN=93dc4bf1f8912beb7cdee409302988c611388e91
Certificate serial: 0162A7C8
Authority key identifier: 93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/FoOrS_0QWXIb_W4UeSIRMGnBECY.roa
Signing time: Sat 01 Jan 2022 02:52:00 +0000
ROA not before: Sat 01 Jan 2022 02:52:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56481
IP address blocks: 91.223.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23242696 (0x162a7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc4bf1f8912beb7cdee409302988c611388e91
Validity
Not Before: Jan 1 02:52:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1683ab4bfd1059721bfd6e147922113069c11026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:f1:27:3d:82:30:d7:57:dd:ba:6b:f7:ae:
03:ce:03:cc:2d:80:a0:a6:72:e5:7f:26:ae:6f:12:
30:63:87:ee:43:77:62:a2:a2:41:9e:ef:64:85:11:
d8:59:d5:08:29:85:35:6c:17:ef:19:66:08:0b:a5:
7f:22:cb:91:23:69:e6:3c:03:0e:3e:ee:48:af:75:
3f:c9:cc:6c:ef:f5:75:25:9a:a5:35:82:9b:1e:58:
3a:c0:a4:6c:a0:ab:c0:44:bc:5a:66:1e:54:b7:df:
71:42:9a:0c:a1:8c:a0:a9:88:ee:6a:39:03:06:98:
1f:ae:83:4f:78:43:0c:a3:a5:ef:06:fb:67:e6:25:
92:54:ff:15:9e:e3:c3:d2:12:05:49:6f:8e:7b:1a:
d3:42:55:2b:d4:20:32:0f:6f:31:a6:fd:fc:c2:98:
2e:c4:37:89:b8:02:5b:47:e5:a1:35:2a:12:8c:c6:
76:f0:97:0d:a7:a5:0b:25:bb:77:4a:15:27:00:e4:
69:aa:b3:b4:27:dc:36:2c:cf:9f:2b:88:7c:5b:bb:
00:5d:a0:00:8e:b7:50:96:09:a5:92:9c:e6:8b:b2:
f6:ca:0b:a8:18:15:21:01:0c:d8:dc:73:0b:31:08:
c0:50:60:43:59:62:9d:d7:03:d5:aa:30:ac:a0:7e:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:AB:4B:FD:10:59:72:1B:FD:6E:14:79:22:11:30:69:C1:10:26
X509v3 Authority Key Identifier:
keyid:93:DC:4B:F1:F8:91:2B:EB:7C:DE:E4:09:30:29:88:C6:11:38:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9xL8fiRK-t83uQJMCmIxhE4jpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/FoOrS_0QWXIb_W4UeSIRMGnBECY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ab65c0-4828-41dd-b3da-ed8db62b3533/1/k9xL8fiRK-t83uQJMCmIxhE4jpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.174.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9d:42:5d:da:74:de:44:95:65:d0:9a:aa:21:35:46:31:8d:
2f:7d:b9:78:ee:ca:7d:02:26:48:ed:fc:0b:cc:16:e1:e5:4f:
cb:b1:de:48:d8:7d:f4:5c:99:75:64:30:d2:10:09:f0:5c:46:
11:bb:0a:1f:be:9b:6f:b2:39:05:80:25:10:e0:54:65:0f:70:
81:dd:1c:1e:4f:4b:a2:1b:cd:44:3a:ca:c0:85:10:7b:b7:c2:
26:78:79:72:9f:4e:a0:f2:7b:65:a0:26:51:57:f0:d2:5a:ea:
dd:ce:e1:63:8b:88:c6:eb:03:3b:a1:1d:db:af:73:f4:72:05:
4c:79:2d:41:70:05:81:c6:89:cc:a2:41:a2:92:fb:09:36:17:
71:6f:2b:93:c7:1c:52:26:90:28:02:c5:17:08:fd:f1:ee:c0:
e3:3b:69:d9:18:26:8c:09:1c:00:63:6e:cb:12:a7:9f:b8:1b:
c3:1a:7d:42:c8:b6:2f:bb:23:60:8b:30:54:73:4d:f6:a3:6d:
cb:e4:9d:a2:54:a8:58:08:d2:4c:ac:fe:0a:51:06:ef:fb:85:
38:b1:bf:c4:6a:80:0f:21:dc:2d:f2:01:2a:b9:e8:d2:f0:25:
71:84:a6:bc:3f:04:0f:f6:05:85:d1:f3:51:c4:16:99:ee:30:
f0:be:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:40 2023 by rpki-client on console-ams.rpki-client.org