Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/Zd2o_fss4kbJQJPkDPL0NCYYRfo.roa
File: Zd2o_fss4kbJQJPkDPL0NCYYRfo.roa (raw, json)
Hash identifier: IcmMJ7F0igjxqFHwp1NulsvwH5mgWzvVKIJpP4hFWsk=
Subject key identifier: 65:DD:A8:FD:FB:2C:E2:46:C9:40:93:E4:0C:F2:F4:34:26:18:45:FA
Certificate issuer: /CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Certificate serial: 08A16D9F
Authority key identifier: 8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/Zd2o_fss4kbJQJPkDPL0NCYYRfo.roa
Signing time: Sat 01 Jan 2022 06:04:00 +0000
ROA not before: Sat 01 Jan 2022 06:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10010
IP address blocks: 91.200.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144797087 (0x8a16d9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6024b2c27a67dff5b654efa06bf7bfc1222625
Validity
Not Before: Jan 1 06:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65dda8fdfb2ce246c94093e40cf2f434261845fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:11:fc:41:08:10:12:83:c3:58:3c:8f:1a:
d4:0c:c9:b3:b0:21:d3:30:76:af:2e:be:ca:1b:1d:
22:84:22:63:07:0c:90:3e:b6:c0:a0:a8:6c:c0:e8:
9f:3e:39:2f:07:5d:6d:78:6e:5a:89:8c:8f:37:82:
60:47:e7:50:a2:79:b0:4c:3e:64:26:06:91:8e:4c:
f0:b8:45:d0:db:ce:94:47:7f:ef:a3:9e:36:23:d5:
b7:24:06:9d:af:35:7a:3f:bf:07:bf:9d:e9:ac:7a:
15:49:7c:70:a8:46:dd:6c:df:91:8a:54:75:0f:47:
34:84:fc:fa:5b:73:66:a3:bc:70:9d:f4:8e:a2:db:
1e:56:dd:50:81:d4:57:05:cc:25:cf:8f:c8:5e:b1:
80:db:26:94:9e:2c:16:e1:87:a0:ee:57:b8:db:29:
e2:2b:e9:b5:c9:1c:bf:51:ef:60:4d:c3:d6:b0:e7:
45:ec:56:33:55:08:af:72:49:4f:00:50:4f:86:61:
41:b1:c2:08:46:da:6b:cd:04:57:ff:af:32:d5:7a:
0c:3a:b9:bc:b7:11:b6:ba:ce:c8:fd:af:a3:bf:1d:
92:ce:c6:41:c4:85:11:48:1a:c8:9a:27:21:3a:20:
b0:05:e3:15:b4:66:75:9d:19:79:0c:a6:a8:9d:50:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:A8:FD:FB:2C:E2:46:C9:40:93:E4:0C:F2:F4:34:26:18:45:FA
X509v3 Authority Key Identifier:
keyid:8A:60:24:B2:C2:7A:67:DF:F5:B6:54:EF:A0:6B:F7:BF:C1:22:26:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imAkssJ6Z9_1tlTvoGv3v8EiJiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/Zd2o_fss4kbJQJPkDPL0NCYYRfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/33eccf-0ae3-4c7e-a441-08e8f0cbb840/1/imAkssJ6Z9_1tlTvoGv3v8EiJiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.58.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a9:94:d3:db:1d:22:71:5a:c3:c2:3f:2b:78:3f:76:6d:c0:
fa:32:8d:e9:9e:c0:8c:b7:4a:43:13:cd:69:68:1e:25:16:8f:
6e:9d:a7:7d:29:5d:9e:34:51:83:03:53:a6:80:70:65:ae:37:
5f:86:d8:41:e7:4e:3e:21:7d:c3:b1:3c:93:b8:96:9d:f3:01:
89:61:7e:db:1a:bb:6e:bc:2c:18:3c:3c:18:69:c3:64:c1:14:
ef:e0:78:05:0c:7f:fa:ea:6d:ae:f3:75:b5:d9:c3:7b:84:98:
ee:ba:e8:4a:d8:a1:de:95:57:d9:ea:ae:17:f7:18:a5:64:5c:
33:63:84:7d:94:1c:5a:34:62:72:c7:a1:76:79:30:03:5f:fa:
10:2f:db:45:ff:cb:01:35:b6:31:83:80:63:91:38:11:b9:ae:
8c:f3:3a:42:7b:74:be:84:8f:22:36:14:af:1c:f6:81:8c:b2:
1e:44:de:c6:c8:08:d1:a3:e7:4b:dc:ab:78:4d:a9:1f:d8:70:
6f:e9:85:4d:b0:4a:03:67:1a:49:7b:d1:30:f1:67:f8:25:ac:
3f:0e:b4:5b:3c:4f:9e:3c:7a:34:1c:f7:57:6a:0d:75:e0:45:
00:ca:06:92:b9:f1:ab:57:8a:e3:70:7c:dc:bf:e8:65:6e:4c:
71:40:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:17 2025 by rpki-client