Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/fSZkaIgo-NE0fLNjcx4mcRnDusE.roa
File: fSZkaIgo-NE0fLNjcx4mcRnDusE.roa (raw, json)
Hash identifier: SkGcpprQKCfMTODmNJcrMdSMO8PPhIDDmIF+36qbMME=
Subject key identifier: 7D:26:64:68:88:28:F8:D1:34:7C:B3:63:73:1E:26:71:19:C3:BA:C1
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 054C35DF
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/fSZkaIgo-NE0fLNjcx4mcRnDusE.roa
Signing time: Sat 01 Jan 2022 13:05:27 +0000
ROA not before: Sat 01 Jan 2022 13:05:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20712
IP address blocks: 91.240.176.0/24 maxlen: 24
2001:67c:2a40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88880607 (0x54c35df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Jan 1 13:05:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d2664688828f8d1347cb363731e267119c3bac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:a1:ad:7e:9c:9f:1d:80:3d:02:59:35:48:
3c:47:24:fe:82:a3:95:bf:55:f7:70:f0:0c:8d:f9:
1b:53:50:a1:f4:dc:0e:9c:e2:49:71:2b:96:5c:4b:
07:28:9c:17:f4:79:80:19:9e:1e:09:e2:66:df:4c:
c3:0e:f2:86:11:3b:96:2d:55:59:27:b7:ae:55:eb:
a9:6b:29:17:95:17:e8:e6:01:7a:c7:ff:51:45:db:
c3:3e:0f:3b:7a:37:24:cd:36:a1:b6:e4:8a:be:c7:
98:5d:ff:6d:5a:63:82:41:18:0c:64:65:ba:8b:23:
b5:09:1d:e5:81:45:78:a4:f4:56:46:a6:83:45:89:
01:ee:0b:80:56:b5:52:a3:22:77:64:3a:4e:4a:b7:
8a:fa:bd:f4:22:a5:15:bb:70:86:3f:26:4c:c3:98:
d1:44:53:90:35:72:ea:6f:20:2c:9a:d3:50:44:d7:
5d:fb:0c:e3:f4:74:1f:84:45:5a:99:95:9a:d4:f0:
4d:df:0c:95:7b:81:e0:5d:01:0e:81:5c:f1:c6:f7:
ce:31:40:a0:2d:f3:c5:13:df:e3:6e:81:22:ce:b2:
29:19:1c:cc:6b:fb:18:53:b1:21:33:a2:f1:f4:8f:
5a:57:d1:1f:a6:19:d3:62:34:f6:6a:e8:78:11:7e:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:26:64:68:88:28:F8:D1:34:7C:B3:63:73:1E:26:71:19:C3:BA:C1
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/fSZkaIgo-NE0fLNjcx4mcRnDusE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.176.0/24
IPv6:
2001:67c:2a40::/48
Signature Algorithm: sha256WithRSAEncryption
53:4d:d5:b5:62:f3:01:4c:46:97:20:21:65:1f:3c:88:81:d2:
49:5e:43:bb:96:b7:19:f6:32:58:7c:e5:81:71:de:5e:97:ec:
84:1c:d8:b8:5d:3b:28:fb:c6:bc:0d:29:94:12:52:5a:a8:41:
b6:f4:2d:c2:8f:59:46:7e:03:df:9f:79:25:62:cc:58:ca:25:
78:46:15:e1:3b:15:a5:af:55:53:00:f1:93:40:6b:ad:d8:7b:
dc:9f:fc:dd:c6:40:23:ff:8f:d2:ef:57:56:37:b4:80:48:b8:
00:75:e3:11:bd:fc:a1:da:c1:7e:63:e0:54:98:9f:f7:64:b5:
9c:94:4c:8b:22:27:bb:54:e6:36:ef:8e:05:11:6f:6e:36:52:
8e:5e:bf:c9:df:65:84:1f:c2:22:9c:8c:fd:b2:9c:6d:83:8f:
06:95:1f:de:7e:ab:24:f7:93:f0:7c:04:f5:e0:4a:c3:4e:e3:
a9:78:49:50:51:7f:75:01:d3:60:a9:70:5a:6b:76:bf:c7:2e:
4a:76:0f:af:f4:51:52:35:a1:55:96:98:71:04:35:33:2d:4e:
dd:08:fe:e9:bf:73:78:aa:35:dd:cf:50:8c:fc:aa:8b:e7:06:
b5:77:e4:00:a7:7a:8d:af:ba:c5:7f:49:9e:76:f6:9a:4a:d7:
98:bd:e5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:31 2024 by rpki-client on console-fra.rpki-client.org