Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/ktZ-2VhuTnlNUlbeV5mSdGDNxM8.roa
File: ktZ-2VhuTnlNUlbeV5mSdGDNxM8.roa (raw, json)
Hash identifier: z/aQCTNyEWfGR+oe/1BZaF7hHs2WsZFTanMczEGD0M8=
Subject key identifier: 92:D6:7E:D9:58:6E:4E:79:4D:52:56:DE:57:99:92:74:60:CD:C4:CF
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 059EA7C8
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/ktZ-2VhuTnlNUlbeV5mSdGDNxM8.roa
Signing time: Sat 01 Jan 2022 08:02:06 +0000
ROA not before: Sat 01 Jan 2022 08:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51522
IP address blocks: 91.247.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94283720 (0x59ea7c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 1 08:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92d67ed9586e4e794d5256de5799927460cdc4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:84:e9:a5:cd:83:2f:95:66:d4:cd:4c:8b:
71:6f:4f:6c:91:85:2c:83:4d:1a:ce:58:4e:07:27:
3c:4a:12:2c:97:cf:5a:2c:48:35:c8:ad:59:db:33:
df:29:5f:77:11:d5:76:ed:de:fe:6f:a2:9a:cc:56:
0a:cf:74:03:63:d5:a3:5a:85:fe:17:2c:47:74:af:
61:52:df:b6:95:cf:7b:16:42:2e:4b:c7:ec:94:ca:
0a:94:ee:86:8c:6b:72:ac:f5:4e:b6:59:9f:03:93:
95:8c:e7:ff:be:00:98:41:00:43:ac:68:d9:da:de:
76:f6:3a:0b:06:c7:04:fb:5f:c2:2d:41:31:51:d9:
24:ff:98:21:3f:fa:85:0b:f0:6c:41:c3:64:fa:ef:
99:61:e2:27:f4:b1:d4:88:6a:8d:82:7d:c6:77:cd:
34:81:59:19:88:4c:e5:a6:f8:cb:cc:5a:b3:72:e8:
00:29:2c:2f:82:22:76:11:f9:0c:ba:12:c1:9a:c4:
52:b4:52:9b:8d:16:b0:e6:72:99:15:d3:cd:b3:17:
1c:dd:2a:30:c0:8c:25:7d:af:8a:df:38:c9:c5:0a:
ec:b3:a6:68:f9:a2:15:d2:18:7e:ed:5c:97:13:2a:
d7:0a:0c:a0:f7:1f:aa:32:d4:f7:a9:62:4f:6d:c7:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D6:7E:D9:58:6E:4E:79:4D:52:56:DE:57:99:92:74:60:CD:C4:CF
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/ktZ-2VhuTnlNUlbeV5mSdGDNxM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.112.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:fb:81:70:f4:7e:71:04:28:3d:a5:2c:14:59:7f:85:65:0b:
25:d8:d5:b6:e3:a2:5f:3c:3f:36:33:58:b6:30:2e:46:67:08:
f3:47:2a:31:8f:69:c6:d4:9c:5d:9e:4d:70:23:95:94:45:a7:
fb:29:d5:38:79:4b:62:b2:5e:49:f9:a9:7a:51:e6:db:f1:2b:
95:0b:49:9c:6d:e4:a3:72:5c:e4:7d:0c:ba:6a:c4:af:35:6c:
4c:f9:a5:a6:8c:31:98:e8:ae:0b:09:93:d5:3b:13:0a:93:60:
a5:c1:11:58:28:6c:23:52:55:30:7e:fe:2f:25:51:7d:90:ae:
28:a2:cf:d1:62:ed:14:e9:fe:ad:18:b7:3b:86:7a:0f:b0:fb:
6e:d5:5a:5b:ac:72:b8:f2:b8:b6:77:71:fc:3f:bb:f9:f7:46:
9d:53:22:43:68:17:32:58:b0:58:f7:27:4b:fb:e2:de:f6:7d:
25:65:ce:f5:b2:6a:36:11:33:b1:69:10:24:2d:aa:37:fc:a7:
79:83:a7:7f:b7:4c:79:8d:5e:4e:7b:8c:91:6b:ab:ba:11:28:
90:67:12:f1:d1:58:ee:3d:b1:4f:45:99:50:5e:f6:a1:9d:46:
69:30:6e:ca:5b:32:1e:62:d4:dc:fc:55:e1:eb:9a:25:13:19:
1b:98:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:27 2024 by rpki-client on console-ams.rpki-client.org