Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/sF2xM6gO7vAUYPOyLw1d7xNWM4c.roa
File: sF2xM6gO7vAUYPOyLw1d7xNWM4c.roa (raw, json)
Hash identifier: +ID00lvzcyz9Ozs4+1vbAXHXFBvHiKI/ypwIK5yFoec=
Subject key identifier: B0:5D:B1:33:A8:0E:EE:F0:14:60:F3:B2:2F:0D:5D:EF:13:56:33:87
Certificate issuer: /CN=cb55656c69d553da92b783850e15b1704e876d93
Certificate serial: 03D9211E
Authority key identifier: CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/sF2xM6gO7vAUYPOyLw1d7xNWM4c.roa
Signing time: Sat 01 Jan 2022 09:02:07 +0000
ROA not before: Sat 01 Jan 2022 09:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197303
IP address blocks: 91.220.11.0/24 maxlen: 24
94.158.18.0/24 maxlen: 24
94.158.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64561438 (0x3d9211e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb55656c69d553da92b783850e15b1704e876d93
Validity
Not Before: Jan 1 09:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b05db133a80eeef01460f3b22f0d5def13563387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:10:cf:5c:8e:80:b5:4b:c7:78:57:5b:5e:
95:6c:18:c8:47:d7:28:ef:ca:db:0d:a9:85:d0:4e:
09:1e:a5:e6:dc:cb:ce:aa:70:64:65:cf:08:21:cc:
42:4e:f4:cd:05:7c:aa:98:a6:31:f5:f5:75:90:7f:
db:de:7e:ba:d9:de:fa:cd:04:3c:96:a8:e7:6e:21:
29:62:8a:2f:8b:19:8c:86:0c:2d:b4:a1:55:89:a0:
a6:d5:b8:de:97:53:4d:5b:7c:37:5f:99:f1:13:cb:
79:fc:a5:8c:3f:89:e4:ea:26:92:d7:fb:3b:13:85:
22:da:f6:41:5e:78:1e:05:f1:11:14:c4:c4:d4:1d:
70:38:92:aa:03:ba:2b:7b:e6:69:52:2e:a1:39:75:
2c:f2:52:ee:a5:df:b0:85:43:d6:48:bc:93:c3:0e:
e9:8b:83:ca:a8:3a:ad:8d:37:c2:bc:d6:dd:12:b9:
37:cc:5f:0f:18:56:00:ac:b9:f3:d8:22:7d:67:5c:
20:b4:62:df:70:15:48:ec:f6:c4:53:a9:99:4e:2a:
90:1f:3b:cf:5e:1e:d9:cc:ed:09:9d:1f:cd:59:94:
5f:d6:f4:01:ba:33:51:44:9a:23:91:07:1f:ab:d3:
97:85:64:6a:e1:d8:88:ac:e9:66:62:8e:da:72:a5:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:B1:33:A8:0E:EE:F0:14:60:F3:B2:2F:0D:5D:EF:13:56:33:87
X509v3 Authority Key Identifier:
keyid:CB:55:65:6C:69:D5:53:DA:92:B7:83:85:0E:15:B1:70:4E:87:6D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VlbGnVU9qSt4OFDhWxcE6HbZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/sF2xM6gO7vAUYPOyLw1d7xNWM4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4e2150-669d-4554-b779-2bb8861a3e4d/1/y1VlbGnVU9qSt4OFDhWxcE6HbZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.11.0/24
94.158.18.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:d6:11:8e:01:f3:4a:7b:c7:74:de:16:5e:ab:02:9b:97:47:
a6:dd:02:f7:d0:51:27:71:0d:90:cb:61:05:8e:cd:b9:79:da:
a9:cd:cf:0a:79:75:69:97:d3:cc:bb:c7:fe:5d:0f:e3:c5:0f:
f7:ef:03:c7:2a:94:e0:44:44:d9:15:d6:41:3f:ed:25:b3:1a:
1c:fa:16:7b:e6:7d:96:92:de:f0:df:84:90:9d:46:4c:56:52:
2e:ad:e2:d7:a2:53:40:72:6d:72:5c:6c:75:ba:3a:fa:7c:a7:
6f:ea:3e:83:d7:4e:5c:d9:d2:2e:93:05:d2:d0:16:bf:4a:bf:
5e:9b:14:9f:c7:18:b8:6c:84:90:ec:a2:80:6a:ea:65:7d:a2:
21:15:85:6b:4b:e1:e4:37:be:91:04:87:af:41:92:7e:64:37:
db:85:90:fc:ba:1b:85:5f:a3:eb:7a:c8:6c:36:f4:c3:30:e3:
6b:b7:06:09:ec:7b:1c:05:2c:95:e0:ef:7d:4c:94:88:3b:db:
52:e7:1d:5c:e8:ca:0b:1c:5b:25:24:48:20:43:f7:04:84:ec:
5a:e9:34:39:d2:df:3d:60:d7:e2:71:b5:77:f0:91:86:49:d7:
62:a8:62:e7:6f:38:8a:ed:7f:7f:bd:42:64:69:ce:2b:5c:6f:
dd:ef:9d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:10 2024 by rpki-client on console-ams.rpki-client.org