Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/FSOep6T3PBU3RcffSlM0E5V3n_c.roa
File: FSOep6T3PBU3RcffSlM0E5V3n_c.roa (raw, json)
Hash identifier: P9d28CHr0psgvQ7Cu2kJUHOIToq5/a4xfHdNWQtBXUg=
Subject key identifier: 15:23:9E:A7:A4:F7:3C:15:37:45:C7:DF:4A:53:34:13:95:77:9F:F7
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B67225C
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/FSOep6T3PBU3RcffSlM0E5V3n_c.roa
Signing time: Sat 01 Jan 2022 10:02:39 +0000
ROA not before: Sat 01 Jan 2022 10:02:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42759
IP address blocks: 91.120.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459743836 (0x1b67225c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15239ea7a4f73c153745c7df4a53341395779ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:46:e3:fd:7c:9c:f2:3e:e7:8c:61:fd:1b:
59:52:cc:13:1a:17:52:4f:69:52:01:f4:ef:84:72:
cc:ca:fe:93:f2:6e:91:56:c6:d2:61:7a:6b:f8:d9:
a7:32:b4:66:9a:66:be:e6:24:87:1d:f1:15:bd:89:
05:32:bc:dc:2a:38:3d:df:e4:50:85:ed:6a:eb:06:
e1:2f:42:b9:d8:c4:9f:21:44:a8:79:c2:e3:b9:31:
fe:13:53:59:26:12:c0:25:5b:f6:92:ca:0a:69:31:
a8:6e:93:02:47:bc:61:b1:e3:26:3c:c8:06:d3:b6:
5a:17:ed:ef:0d:7c:b1:58:36:6c:71:a9:4c:d2:93:
b7:48:06:4e:79:3f:6c:cd:b1:5a:9e:e4:65:e2:ce:
e0:59:c6:39:74:73:36:3b:a4:95:38:66:e5:b1:a5:
0e:8a:bf:45:5f:45:e2:6a:aa:dd:13:5f:23:d9:e6:
a8:5c:32:57:a1:05:aa:4b:68:eb:e9:79:70:f6:c5:
63:4f:98:34:95:04:be:cc:44:a5:68:e5:2c:4a:6b:
54:66:0c:a1:ff:94:bf:03:a4:48:0d:30:be:3a:40:
60:24:e2:65:b8:85:e4:4a:b8:d6:78:c0:51:e5:51:
45:3b:b5:bd:93:02:77:6b:7f:00:4b:7c:ad:27:51:
77:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:9E:A7:A4:F7:3C:15:37:45:C7:DF:4A:53:34:13:95:77:9F:F7
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/FSOep6T3PBU3RcffSlM0E5V3n_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.49.0/24
Signature Algorithm: sha256WithRSAEncryption
18:61:40:23:4f:ce:34:f0:4d:95:1c:fe:3c:34:41:a9:0c:26:
19:d2:6d:04:55:f1:c1:4b:7e:9a:6b:cf:f9:84:db:37:95:7f:
7f:1f:79:87:da:97:d7:ab:fa:e7:28:c1:80:d0:2d:8f:44:08:
82:26:ee:f5:ab:b5:31:45:62:32:ad:0d:ef:d5:ac:7c:8f:88:
06:65:26:9b:b5:1d:83:49:f9:84:7b:aa:71:ad:b9:26:89:51:
5c:f6:0b:8e:43:b7:63:88:40:02:fc:ec:0e:bc:9f:42:c8:f4:
3c:52:b5:dd:69:74:ae:05:3a:a2:0e:c0:58:fb:40:ad:28:56:
e8:8e:c9:55:4f:bd:45:53:05:65:b6:a6:77:4b:73:52:6a:33:
08:62:75:d9:41:49:95:de:72:46:2b:16:22:d3:1d:32:05:9c:
29:36:18:76:67:ad:4d:b4:56:29:62:33:bd:1e:23:dc:60:9c:
56:57:4c:e9:07:3c:77:a3:3d:89:18:bf:37:5f:b6:be:37:4c:
78:99:e2:76:13:52:95:d7:ec:ae:32:d6:89:a0:7a:d4:13:2d:
f8:96:58:86:05:43:30:e2:8e:05:1a:11:2f:e1:dd:3e:f2:cf:
8f:d0:b8:22:ec:d3:b4:ef:28:e8:9b:6d:fc:ce:6f:82:ed:3f:
49:96:43:d6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEG2ciXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MDJkYWM2MDVmNDY1OTcxOGMwYTE1ZTFmNzMyY2JkNGY0OGFhZTdiMB4XDTIyMDEw
MTEwMDIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTUyMzllYTdhNGY3
M2MxNTM3NDVjN2RmNGE1MzM0MTM5NTc3OWZmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMxpRuP9fJzyPueMYf0bWVLMExoXUk9pUgH074RyzMr+k/Ju
kVbG0mF6a/jZpzK0ZppmvuYkhx3xFb2JBTK83Co4Pd/kUIXtausG4S9CudjEnyFE
qHnC47kx/hNTWSYSwCVb9pLKCmkxqG6TAke8YbHjJjzIBtO2Whft7w18sVg2bHGp
TNKTt0gGTnk/bM2xWp7kZeLO4FnGOXRzNjuklThm5bGlDoq/RV9F4mqq3RNfI9nm
qFwyV6EFqkto6+l5cPbFY0+YNJUEvsxEpWjlLEprVGYMof+UvwOkSA0wvjpAYCTi
ZbiF5Eq41njAUeVRRTu1vZMCd2t/AEt8rSdRd/MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQVI56npPc8FTdFx99KUzQTlXef9zAfBgNVHSMEGDAWgBTwLaxgX0ZZcYwK
FeH3MsvU9IquezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhDMnNZRjlHV1hHTUNoWGg5ekxMMVBTS3Jucy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8x
L0ZTT2VwNlQzUEJVM1JjZmZTbE0wRTVWM25fYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
ZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8xLzhDMnNZRjlHV1hH
TUNoWGg5ekxMMVBTS3Jucy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFt4MTANBgkqhkiG9w0BAQsFAAOC
AQEAGGFAI0/ONPBNlRz+PDRBqQwmGdJtBFXxwUt+mmvP+YTbN5V/fx95h9qX16v6
5yjBgNAtj0QIgibu9au1MUViMq0N79WsfI+IBmUmm7Udg0n5hHuqca25JolRXPYL
jkO3Y4hAAvzsDryfQsj0PFK13Wl0rgU6og7AWPtArShW6I7JVU+9RVMFZbamd0tz
UmozCGJ12UFJld5yRisWItMdMgWcKTYYdmetTbRWKWIzvR4j3GCcVldM6Qc8d6M9
iRi/N1+2vjdMeJnidhNSldfsrjLWiaB61BMt+JZYhgVDMOKOBRoRL+HdPvLPj9C4
IuzTtO8o6Jtt/M5vgu0/SZZD1g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:53 2023 by rpki-client on console.sobornost.net