Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/fdq5ROCbFtB39C6St_x-mbNAZP4.roa
File: fdq5ROCbFtB39C6St_x-mbNAZP4.roa (raw, json)
Hash identifier: AlMrwj3sz9NaoTrWf0MY9xAg1gJ1S9h9mJjI7N/8+fc=
Subject key identifier: 7D:DA:B9:44:E0:9B:16:D0:77:F4:2E:92:B7:FC:7E:99:B3:40:64:FE
Certificate issuer: /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial: 0BD9F9AE
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/fdq5ROCbFtB39C6St_x-mbNAZP4.roa
Signing time: Sat 01 Jan 2022 01:01:34 +0000
ROA not before: Sat 01 Jan 2022 01:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47957
IP address blocks: 91.208.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198834606 (0xbd9f9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Validity
Not Before: Jan 1 01:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ddab944e09b16d077f42e92b7fc7e99b34064fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:90:dc:05:90:62:ab:d5:de:23:f2:e6:c7:14:
68:9b:67:17:06:4e:c7:97:37:44:a8:4f:22:23:ef:
c3:58:b9:a7:93:79:b7:90:5d:19:fa:9a:18:de:b3:
89:e8:d2:a2:46:e1:9e:03:d3:e3:cb:a2:1c:10:50:
de:1e:fa:d7:0d:c6:8d:54:f2:35:3a:97:42:a0:ce:
11:4b:1a:30:6c:e0:c5:29:3c:b7:68:de:aa:ac:8e:
5d:82:df:e4:37:0a:b2:09:83:a3:ad:84:07:81:4e:
e8:65:ae:b0:7b:2d:71:71:b4:6f:4d:18:e0:89:52:
6f:06:d3:19:42:db:a1:7a:d2:d1:b1:a5:4d:33:3e:
db:a4:4e:e2:89:3c:6a:24:14:bd:21:d0:27:48:fa:
57:4a:b4:21:f6:7b:3e:43:c7:c8:90:11:c9:0f:44:
d8:09:a7:b1:2f:ef:3b:87:e0:f2:b4:f2:af:13:0b:
a8:b4:68:39:7b:47:83:e7:52:d9:bb:ce:22:67:b4:
1e:94:d6:09:b4:ef:75:d6:d4:a0:90:46:cf:27:87:
f7:de:bb:01:49:de:34:c9:7e:51:c6:c7:cc:c0:96:
6c:f2:5f:6d:20:14:62:4d:99:89:36:d7:5f:a2:32:
9b:90:6c:bf:7e:c3:cf:08:8c:cb:b6:f4:d8:b7:3f:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:B9:44:E0:9B:16:D0:77:F4:2E:92:B7:FC:7E:99:B3:40:64:FE
X509v3 Authority Key Identifier:
keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/fdq5ROCbFtB39C6St_x-mbNAZP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:84:7b:f3:5c:53:a2:97:eb:18:ce:b9:69:f4:e6:2f:bc:54:
43:71:b3:77:e9:8e:3e:c7:dc:31:ab:b2:44:84:ab:a9:49:11:
be:09:20:00:f8:bd:76:74:b9:e9:c5:9a:4b:07:c7:27:53:3c:
1d:59:0e:e8:56:3e:b7:68:78:c1:78:3c:a4:60:53:9b:98:14:
46:05:a9:48:a5:34:f8:bb:89:52:56:bb:e6:aa:d7:ea:72:7e:
4b:18:cd:33:d7:17:6c:5e:50:64:d7:29:32:f6:4f:c4:a0:a3:
01:48:ee:95:8b:39:78:d3:67:5a:33:a3:d7:8e:f1:2d:43:6d:
4d:65:3d:8c:38:41:d7:9b:c4:93:68:b8:ba:d0:e9:c9:65:3f:
58:7a:12:d4:f8:2d:7b:5c:7b:1f:a3:09:cf:f3:56:08:7d:44:
7a:18:29:48:8e:13:7f:d4:44:42:06:b2:12:c1:d0:3a:aa:a1:
90:f2:38:4c:77:84:b3:0c:56:8a:2c:07:03:e6:a5:76:aa:e5:
0e:fe:14:b2:1d:dd:38:d7:fb:72:cc:2d:f0:21:ca:a0:c5:46:
4b:1c:f5:a7:6e:93:fe:38:4f:52:76:a6:d0:cb:47:62:66:d8:
75:e2:a6:7a:3f:dc:67:df:3d:c6:2f:3e:c9:01:28:02:17:09:
f7:5e:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org