Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/SrZDDn8wfET8C6S3e7Xckai31gU.roa
File: SrZDDn8wfET8C6S3e7Xckai31gU.roa (raw, json)
Hash identifier: 3YyQ3sxRVdwB0O3m7bp+TcgKg0kReV6PkUOtmRkzhGo=
Subject key identifier: 4A:B6:43:0E:7F:30:7C:44:FC:0B:A4:B7:7B:B5:DC:91:A8:B7:D6:05
Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial: 03E09692
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/SrZDDn8wfET8C6S3e7Xckai31gU.roa
Signing time: Sat 01 Jan 2022 11:58:00 +0000
ROA not before: Sat 01 Jan 2022 11:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34259
IP address blocks: 91.231.54.0/24 maxlen: 24
91.231.55.0/24 maxlen: 24
91.195.120.0/24 maxlen: 24
91.195.121.0/24 maxlen: 24
193.111.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65050258 (0x3e09692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Validity
Not Before: Jan 1 11:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ab6430e7f307c44fc0ba4b77bb5dc91a8b7d605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:92:bd:72:49:2b:f3:eb:fb:26:3d:3e:77:
eb:42:6c:23:14:57:4b:cd:44:9b:d3:7f:36:18:ed:
d6:a7:e5:0d:ec:95:02:b0:d8:51:f0:61:55:b6:f1:
2f:cf:29:86:4f:84:ae:9d:72:e1:1f:48:a3:ca:98:
7f:d7:d7:16:b2:41:d6:ab:5b:e5:c6:7d:37:b7:dc:
ed:ed:a7:47:e9:9e:4e:d9:81:3d:5d:93:75:d5:80:
c0:91:6b:d9:3d:74:4a:cd:8a:c5:9d:b0:8a:97:3a:
3c:12:57:cb:70:50:70:39:d8:49:c5:28:f3:ae:ba:
2f:7d:45:09:59:f4:23:04:f7:a4:7b:04:5d:a9:c0:
28:9f:3f:e4:c9:59:58:a4:6e:f7:70:eb:e9:46:0b:
64:4b:31:14:1b:5e:01:5d:f5:2b:14:34:31:8c:54:
b7:e7:fd:75:36:9f:ca:df:26:88:b5:de:29:b5:55:
69:ec:8f:bd:1c:33:c1:38:83:5d:1e:c5:0b:32:84:
fa:cf:0b:3c:a9:02:75:eb:00:b5:4f:e4:1d:c2:8d:
b5:e6:76:5b:2b:98:be:4f:6a:a7:ef:91:f7:4f:92:
b3:50:38:6f:6e:94:f7:08:0e:25:94:85:e7:f1:fa:
56:80:ae:99:31:77:d2:56:18:ca:dd:44:09:b9:22:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:43:0E:7F:30:7C:44:FC:0B:A4:B7:7B:B5:DC:91:A8:B7:D6:05
X509v3 Authority Key Identifier:
keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/SrZDDn8wfET8C6S3e7Xckai31gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.120.0/23
91.231.54.0/23
193.111.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:93:dc:4e:7d:01:cf:5b:87:a1:e3:43:85:0d:c8:3f:e5:48:
61:37:98:20:8c:1f:75:97:f1:3c:ac:1b:0b:73:50:8f:b0:64:
be:58:33:de:85:4e:3c:19:b2:97:8d:59:51:c5:c5:58:71:25:
c2:da:f0:89:b4:94:c5:2e:7e:c7:94:63:35:6f:1d:98:48:0d:
7e:8c:a5:09:65:cf:85:05:49:27:f2:17:0f:1b:d8:88:3b:c3:
5e:f0:5f:c3:16:7c:5b:4e:21:59:74:42:4a:aa:57:5e:4c:b1:
70:f7:10:a4:59:d6:f7:85:d8:40:a8:1e:7b:a9:29:18:5d:c2:
ef:1f:95:6b:7a:76:97:33:d3:b5:77:2a:62:88:ae:90:97:2f:
0f:e1:13:c5:58:4f:7a:b5:5e:57:a4:ba:da:72:ca:45:0a:be:
1f:d7:b5:43:fd:9d:51:d7:c1:5f:fc:32:02:13:9d:d0:2e:ac:
a2:ff:e6:4c:1c:96:ed:5e:b5:7e:f3:e5:3e:55:45:90:77:16:
8b:d0:cb:49:b0:ef:22:65:00:be:11:39:e2:7c:a4:68:d8:1a:
34:bd:95:16:47:69:c9:a5:05:93:c4:05:25:96:b5:06:f0:a3:
ce:7a:f8:79:f1:b7:fe:70:81:48:1c:d7:b1:10:80:09:e9:26:
0b:8a:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:55 2024 by rpki-client on console-fra.rpki-client.org