Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/zlv6MqqJmFwwpEcnJ9pO_hBd5d8.roa
File: zlv6MqqJmFwwpEcnJ9pO_hBd5d8.roa (raw, json)
Hash identifier: 5tHTfcWngbTAszyXSEkUGlsxq2A/uhRm2XD3He+2EIc=
Subject key identifier: CE:5B:FA:32:AA:89:98:5C:30:A4:47:27:27:DA:4E:FE:10:5D:E5:DF
Certificate issuer: /CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Certificate serial: 0182D0333FA3A4D63228C0F736B7287ED392
Authority key identifier: 94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/zlv6MqqJmFwwpEcnJ9pO_hBd5d8.roa
Signing time: Wed 24 Aug 2022 14:13:15 +0000
ROA not before: Wed 24 Aug 2022 14:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61098
IP address blocks: 91.92.116.0/23 maxlen: 23
91.92.227.0/24 maxlen: 24
2a07:6cc1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:33:3f:a3:a4:d6:32:28:c0:f7:36:b7:28:7e:d3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945b73df7e6fe1100f1d13a07c18d59af228428c
Validity
Not Before: Aug 24 14:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce5bfa32aa89985c30a4472727da4efe105de5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:30:98:18:c1:5e:82:27:36:fb:08:77:7f:
c7:25:d7:1e:49:34:7d:65:5a:26:3b:35:c2:c3:71:
c7:09:6b:ec:90:42:46:ae:e3:f6:07:23:aa:fb:e5:
24:01:d6:47:bd:15:7c:f7:9f:11:ad:db:77:98:32:
78:88:27:50:f9:90:af:4d:a3:98:cd:02:d2:32:3c:
46:20:10:f8:b6:f4:85:45:61:67:14:84:c2:1d:51:
32:26:1c:6f:8a:b8:07:57:a3:c7:60:2f:e8:ee:21:
34:5e:45:8d:d8:88:cf:26:ef:b0:1d:f2:bc:d5:18:
a0:57:e4:c1:9a:9e:5b:b3:4a:2f:ba:43:c5:d4:9b:
07:e8:9d:84:fe:80:7f:1a:e0:e3:cf:49:41:ae:02:
67:36:cf:27:cf:99:96:bb:01:a7:61:fa:02:4e:da:
7c:57:ca:5c:a8:68:ef:10:1f:04:59:14:03:ed:41:
a8:bd:ca:61:09:55:6f:21:03:5c:90:f1:30:fc:dc:
59:47:30:94:f8:05:b1:55:2a:01:23:a9:08:06:4b:
f8:93:15:b7:a5:11:bd:f1:9f:75:d3:ae:6e:42:07:
38:f8:e1:b5:ab:1b:8a:55:a1:ea:3b:f2:aa:48:7e:
33:70:9d:6e:e3:90:34:f3:81:c2:0f:ff:24:1e:0f:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5B:FA:32:AA:89:98:5C:30:A4:47:27:27:DA:4E:FE:10:5D:E5:DF
X509v3 Authority Key Identifier:
keyid:94:5B:73:DF:7E:6F:E1:10:0F:1D:13:A0:7C:18:D5:9A:F2:28:42:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFtz335v4RAPHROgfBjVmvIoQow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/zlv6MqqJmFwwpEcnJ9pO_hBd5d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec618f-9f61-4185-ba0d-6e452425a193/1/lFtz335v4RAPHROgfBjVmvIoQow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.116.0/23
91.92.227.0/24
IPv6:
2a07:6cc1::/32
Signature Algorithm: sha256WithRSAEncryption
72:9b:80:61:d3:11:14:5b:27:08:4e:06:8e:d4:ef:d6:f3:5c:
fa:8d:13:89:c5:40:c6:bd:e0:70:7b:ae:62:13:4f:4f:fa:8b:
95:b6:8c:1d:05:f0:cd:f0:a4:dd:49:ec:31:10:56:c8:4e:d8:
b5:66:37:00:49:7d:e6:91:f7:54:1a:6a:ed:c8:95:1a:9e:a0:
a3:a2:72:2f:bb:c6:28:e2:dd:fd:09:e4:37:9c:ea:9f:37:2b:
28:a6:21:87:1d:4e:be:da:8c:6e:7a:82:fc:ca:c1:33:6a:1b:
99:d4:47:bc:c2:db:31:e3:1d:f2:ae:b6:2c:50:1e:a3:85:4c:
b4:0c:bd:80:09:8b:24:17:90:6d:13:94:13:4b:96:70:af:1f:
10:00:d1:de:44:f9:eb:3f:c3:96:2f:e6:4e:59:db:c1:b8:02:
66:b3:31:44:d2:58:94:36:17:ad:0d:9a:57:64:a8:48:8f:f3:
53:97:83:5b:94:86:89:ad:a2:27:0b:6a:6d:d1:a7:de:ee:36:
76:c2:30:af:96:ea:70:af:9e:bf:63:80:16:f6:02:ae:5e:00:
cb:b1:8d:d8:aa:7a:2a:94:7c:72:e1:70:d3:88:49:fd:4a:0c:
ee:7d:c7:4a:bc:c7:88:d4:d5:80:9f:02:08:22:84:05:d0:09:
85:e1:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:03 2024 by rpki-client on console-fra.rpki-client.org