Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/zPIqe9-9UvB9ymLNtIrn_x9dchE.roa
File: zPIqe9-9UvB9ymLNtIrn_x9dchE.roa (raw, json)
Hash identifier: o9rhdvH/XGkaTOxrUTQ63Rl8GARx5emSmTkQhM59F6A=
Subject key identifier: CC:F2:2A:7B:DF:BD:52:F0:7D:CA:62:CD:B4:8A:E7:FF:1F:5D:72:11
Certificate issuer: /CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Certificate serial: 0183CCB71E96F2A0631E356DEF4DDC594623
Authority key identifier: 10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/zPIqe9-9UvB9ymLNtIrn_x9dchE.roa
Signing time: Wed 12 Oct 2022 15:01:36 +0000
ROA not before: Wed 12 Oct 2022 15:01:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197490
IP address blocks: 91.221.210.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:b7:1e:96:f2:a0:63:1e:35:6d:ef:4d:dc:59:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Validity
Not Before: Oct 12 15:01:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccf22a7bdfbd52f07dca62cdb48ae7ff1f5d7211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8b:1b:9b:03:10:73:8f:c6:b7:62:e7:02:f9:
c6:84:4a:73:f3:e0:ef:08:99:e8:62:04:c1:2b:64:
43:e8:3a:fc:66:d0:af:2e:9d:bb:9b:d7:0f:8a:65:
6b:52:7b:f1:cf:d4:87:38:62:a9:05:1b:5b:cc:17:
49:9a:62:7f:3c:93:7a:86:a6:3f:e8:da:b6:d8:c4:
4e:20:53:fd:e1:46:47:74:c6:b4:af:21:7b:c7:f6:
c6:63:5a:1e:6c:cf:d1:bf:d1:a4:09:2d:f7:88:fe:
fe:01:31:62:7f:c1:d0:80:6d:40:6f:43:df:9d:1c:
fb:a8:21:b8:73:c6:94:b7:99:3d:20:81:9d:dd:11:
b1:f3:a4:97:c3:04:35:ae:e7:63:3e:a0:36:e8:64:
07:38:44:83:8d:5f:2a:41:04:2e:25:fd:13:8d:75:
8d:d9:0a:3b:80:ed:4a:d5:d5:b4:61:7c:70:6d:9f:
8d:94:08:c8:3a:13:e3:5e:22:ed:9b:af:1e:05:86:
22:56:c4:80:b9:33:58:c1:7c:54:fb:4b:60:a3:a0:
00:43:99:3f:cf:f0:a5:a4:dc:20:a2:67:78:49:e6:
38:1e:b5:0a:15:40:9d:dc:c6:af:46:fb:0e:cd:9e:
a3:06:cf:86:0d:d2:65:84:ae:1d:7e:06:6b:fa:02:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:2A:7B:DF:BD:52:F0:7D:CA:62:CD:B4:8A:E7:FF:1F:5D:72:11
X509v3 Authority Key Identifier:
keyid:10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/zPIqe9-9UvB9ymLNtIrn_x9dchE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.210.0/23
Signature Algorithm: sha256WithRSAEncryption
78:ea:da:f2:1d:2d:1d:a8:4e:0a:e5:ad:70:69:e6:d1:1e:a3:
19:6c:0d:d7:5e:27:aa:5e:55:ce:5b:22:f8:4b:98:06:e5:6f:
6d:04:3a:01:43:e9:05:43:e3:ce:09:a8:89:87:ed:36:2f:47:
39:1c:fe:5a:8f:13:bb:1c:03:ec:b5:12:9a:b4:d3:96:d1:03:
35:82:a3:89:f6:ff:76:57:3c:dc:61:0e:c8:00:3c:de:5a:4d:
40:d9:57:a3:bc:e2:5f:69:c3:eb:a5:a3:7c:1e:c8:78:02:6a:
d5:12:79:98:1f:a4:ad:86:0a:dd:be:3e:6f:24:4e:82:23:4f:
07:c0:27:e4:8a:33:55:c1:47:cd:46:40:ce:3a:a0:9c:19:f9:
ad:1a:bb:8d:be:0a:44:d7:79:86:ac:6a:4d:1d:31:96:b8:41:
a5:1a:7e:88:88:58:b9:49:5c:26:60:b4:1b:8a:6c:48:b9:35:
5e:65:f8:e8:5e:26:4b:15:0d:ae:fe:29:83:35:c0:a1:55:77:
83:86:79:7f:8a:2e:59:f0:79:f2:a1:25:24:23:3a:1a:cd:ea:
de:02:4c:98:d3:40:28:08:63:28:cc:e3:dc:5e:c6:c6:2d:89:
73:09:4d:65:c9:22:cb:a1:c6:4c:17:a7:fe:69:03:14:9d:ff:
47:69:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:52 2024 by rpki-client on console-fra.rpki-client.org