Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZguVb61gRLGhvFhdh-i8tGWjR9A.roa
File: ZguVb61gRLGhvFhdh-i8tGWjR9A.roa (raw, json)
Hash identifier: +fJ+aycxg+HN2RbfyCoWrBRu1BZ1aob0A5WOckxrrZU=
Subject key identifier: 66:0B:95:6F:AD:60:44:B1:A1:BC:58:5D:87:E8:BC:B4:65:A3:47:D0
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 4491F96C
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZguVb61gRLGhvFhdh-i8tGWjR9A.roa
Signing time: Sat 01 Jan 2022 03:58:40 +0000
ROA not before: Sat 01 Jan 2022 03:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198855
IP address blocks: 90.83.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150417260 (0x4491f96c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=660b956fad6044b1a1bc585d87e8bcb465a347d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:26:73:0b:a6:b5:67:a6:80:0c:cd:ff:06:
4e:e5:9c:d0:0d:f3:7e:1d:4d:88:d9:3d:76:a7:6f:
a5:a9:d5:9c:04:aa:7f:f7:e4:65:06:47:3f:e7:a6:
f8:ef:ff:02:29:c1:4a:f4:db:59:c3:bc:ab:8f:99:
1c:ea:67:e1:65:f4:34:f3:eb:85:be:3e:c4:34:32:
ec:df:a1:67:f6:a7:b4:79:18:e9:bd:8f:fb:35:a8:
a5:7e:48:ae:8b:4d:8e:3c:97:16:0b:5f:53:ea:39:
0d:4b:48:16:f2:09:ea:07:13:a9:07:77:71:4c:5a:
33:57:cf:ee:ea:63:8a:06:45:88:47:cf:2d:a1:d5:
8e:28:e5:a1:a9:c5:ab:ac:a2:47:3b:50:84:4b:93:
97:67:17:54:cc:33:f6:16:32:55:eb:22:9b:8b:fe:
8a:8d:64:92:25:04:09:14:60:e9:bc:62:a3:e0:35:
f8:57:62:e2:12:c4:79:b8:d4:20:af:85:98:58:ff:
bd:ff:d4:89:5c:1e:78:22:1e:ad:f2:0e:00:b8:20:
0d:74:1e:b7:bd:4e:3e:4e:e3:fb:28:63:37:b2:66:
b3:45:a4:a7:ff:73:59:51:16:50:1b:f2:be:9f:b9:
54:9c:ab:b8:5f:19:6e:b8:9b:73:8e:7f:7c:32:5c:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0B:95:6F:AD:60:44:B1:A1:BC:58:5D:87:E8:BC:B4:65:A3:47:D0
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZguVb61gRLGhvFhdh-i8tGWjR9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.83.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9b:4e:64:16:72:64:f6:45:0c:c9:32:73:bc:41:3e:1b:b6:
bf:07:ee:12:24:56:b1:b4:21:62:e1:53:89:19:86:c5:b0:80:
ff:ce:74:29:25:f1:ac:54:c0:99:23:71:66:ad:0b:df:a2:01:
18:d1:d4:45:03:f7:cf:65:1d:b2:4b:dc:3b:25:a2:f3:9c:47:
de:ea:cf:7b:c0:64:d5:6a:2d:9b:cd:e3:9e:27:33:d7:b7:88:
aa:87:44:8f:26:fd:a3:56:67:9f:72:e3:40:8f:32:4f:e3:ee:
fe:5f:e1:b4:db:dc:2a:18:6f:48:cf:63:b1:56:85:d0:4f:41:
27:65:15:0f:cf:75:bf:33:3c:4c:4d:eb:45:c6:67:ee:65:e9:
c3:7d:07:0b:d0:86:d1:a7:c8:86:2a:03:fb:28:a9:9c:ed:51:
23:c1:31:63:24:f7:7d:1f:ac:5b:93:38:04:97:1a:2d:fd:df:
8e:2e:be:56:9e:57:e2:de:7b:7e:2f:78:eb:42:3e:ac:98:9a:
fa:c8:2e:40:20:48:93:5a:a3:73:e9:ee:c9:24:ea:3c:2d:3b:
b3:98:90:dd:99:96:03:a0:f7:5f:02:8c:5f:aa:34:6c:a0:10:
68:66:a9:5e:ad:80:b4:5e:72:1c:84:17:52:b4:ed:46:ac:d6:
ea:10:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org