Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RCFusE4OBWtheUHjJuCLlnBVzYA.roa
File: RCFusE4OBWtheUHjJuCLlnBVzYA.roa (raw, json)
Hash identifier: dnxVppDidXEohznlVeeW8gN4STKlRhpgzgErJ9/gy88=
Subject key identifier: 44:21:6E:B0:4E:0E:05:6B:61:79:41:E3:26:E0:8B:96:70:55:CD:80
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 22ABEFA8
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RCFusE4OBWtheUHjJuCLlnBVzYA.roa
Signing time: Sat 01 Jan 2022 12:03:05 +0000
ROA not before: Sat 01 Jan 2022 12:03:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2687
IP address blocks: 87.237.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581693352 (0x22abefa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 12:03:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44216eb04e0e056b617941e326e08b967055cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:77:d8:3a:d0:90:dc:e5:7e:32:ba:ac:11:
04:b7:da:33:d5:e8:2a:c2:7d:49:1a:e3:61:40:9b:
aa:2a:28:e5:15:0b:a2:58:68:17:83:37:5d:ad:b3:
fc:3d:23:83:f9:23:5b:66:df:07:be:c8:e6:2a:2a:
ba:04:8b:71:de:67:0e:56:34:0a:91:2b:7d:09:e1:
00:6d:bb:36:0d:83:84:d1:9a:29:6a:70:1d:0e:cb:
e2:5f:8d:f3:d0:2c:92:d7:a7:90:f9:1f:d9:44:21:
63:00:bc:c6:c3:49:5b:d5:5d:ff:be:16:e0:9a:17:
f3:14:1a:3a:42:0a:1f:a7:b8:dd:ca:3c:ec:bd:45:
13:cd:50:8e:f4:a8:f0:5c:46:c8:4c:f6:5f:c4:b6:
aa:88:97:4d:ca:d0:d2:2e:b9:c6:bb:df:30:25:16:
01:59:58:4a:bf:05:22:7a:0e:c5:46:50:c4:f0:f7:
40:4b:22:e5:71:42:84:cb:11:3d:37:b5:22:5b:7f:
51:a6:af:09:5e:75:35:53:59:97:af:fb:bf:02:37:
12:16:75:9a:25:49:c5:aa:4f:6a:24:dd:fc:38:ba:
b0:49:3e:99:15:c8:30:d6:8e:c3:4a:44:1f:84:f5:
cd:14:9d:13:a1:31:a4:5c:ed:12:9c:95:2a:13:6d:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:21:6E:B0:4E:0E:05:6B:61:79:41:E3:26:E0:8B:96:70:55:CD:80
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RCFusE4OBWtheUHjJuCLlnBVzYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bd:ff:7f:ba:ea:48:e2:03:ef:20:3a:20:06:d7:ef:74:2b:
40:c0:41:a6:9f:44:1b:bf:ff:de:0e:99:ce:1b:9b:66:b2:50:
be:db:92:d3:b4:8b:d3:33:40:68:7a:33:06:d8:cb:1f:80:9e:
34:99:73:ea:23:c7:86:02:57:18:df:0c:b9:36:4f:01:10:36:
fd:d4:89:3d:51:85:33:91:52:85:80:18:1d:0b:30:89:ae:09:
b7:7c:c6:3c:d2:ad:da:be:a2:2e:87:7a:ad:a2:67:a3:74:80:
e6:b0:d2:84:11:fb:65:1b:56:30:be:96:e6:46:29:98:a6:9b:
88:46:96:94:a7:20:78:8b:c6:a7:b8:ee:18:9b:c6:40:9f:90:
0b:1a:e2:69:66:77:67:e5:bd:39:7f:50:02:8e:86:22:a0:f1:
89:d6:08:1a:08:10:86:e2:c0:36:25:aa:14:86:13:18:82:12:
88:ad:31:88:51:5d:02:37:db:06:d0:e8:06:1d:ec:68:93:a2:
b8:c3:96:08:09:28:6e:b5:79:bc:67:c9:ce:6b:68:58:4f:46:
23:4b:5e:79:1d:5f:5b:88:2a:27:21:d3:4e:30:8d:68:6e:14:
f8:3b:66:15:51:aa:a5:23:c0:58:34:d8:d4:c0:a2:e6:40:0d:
dc:4a:5d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:45 2024 by rpki-client on console-fra.rpki-client.org