Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/RZ-9NcwMgNgcbsit-DnGtCVSLD0.roa
File: RZ-9NcwMgNgcbsit-DnGtCVSLD0.roa (raw, json)
Hash identifier: 9AwsjgjSOzSsJUOA9zFREd23Qo6fyeRb534tX3b8Xq4=
Subject key identifier: 45:9F:BD:35:CC:0C:80:D8:1C:6E:C8:AD:F8:39:C6:B4:25:52:2C:3D
Certificate issuer: /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial: 0760814C
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/RZ-9NcwMgNgcbsit-DnGtCVSLD0.roa
Signing time: Sat 01 Jan 2022 12:59:18 +0000
ROA not before: Sat 01 Jan 2022 12:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44858
IP address blocks: 91.245.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123765068 (0x760814c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Validity
Not Before: Jan 1 12:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=459fbd35cc0c80d81c6ec8adf839c6b425522c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:e7:c1:53:11:cb:05:02:58:9f:21:b6:d0:
81:7f:b2:a7:6c:4e:94:0c:e0:c0:d8:8e:56:e5:33:
a3:14:eb:83:2d:4d:ff:00:d7:d9:0c:8d:5c:d6:7e:
ec:05:5f:b6:23:7c:31:3c:d4:00:f6:53:18:cb:23:
c5:de:06:92:38:ec:ee:48:28:fc:79:0d:bd:ae:ef:
5e:62:de:a8:c9:05:a9:49:7a:12:61:63:e7:13:d2:
05:09:e2:56:a2:0c:25:39:2f:f9:85:f6:0c:b5:d4:
78:b1:0d:ea:01:ee:25:ba:80:49:e2:61:66:c0:20:
56:c6:5e:d8:fa:fe:e1:64:32:85:12:dd:2a:5f:e8:
40:67:88:51:88:8f:e5:ca:d8:ee:25:f6:52:45:4b:
f0:5c:f0:ec:66:48:0e:22:71:0c:79:e6:cd:63:11:
2e:ec:3f:87:d2:07:b5:5d:9b:2f:e1:c0:fb:9a:6e:
26:c0:36:aa:ee:7f:52:1a:fa:ef:07:09:3b:79:66:
41:90:75:e9:4a:d4:40:70:4f:30:31:d9:61:0f:df:
58:b7:c7:93:13:dc:8b:20:63:85:b4:9c:be:3c:7d:
e9:d2:7e:76:6b:7a:1e:96:b4:eb:0d:5e:1f:e6:f6:
03:ab:52:78:ba:96:d4:86:19:78:2c:d1:0b:80:01:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9F:BD:35:CC:0C:80:D8:1C:6E:C8:AD:F8:39:C6:B4:25:52:2C:3D
X509v3 Authority Key Identifier:
keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/RZ-9NcwMgNgcbsit-DnGtCVSLD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.240.0/22
Signature Algorithm: sha256WithRSAEncryption
25:26:a8:cc:d6:af:2c:cd:33:0d:b7:a1:3f:d8:12:2b:81:b9:
56:6c:ab:e1:de:ef:33:73:58:a3:d9:b4:f3:e4:3c:21:9b:af:
b9:2a:96:e0:4d:19:64:67:06:c9:2a:ee:84:a6:98:d5:9e:5e:
ba:7c:c0:32:05:0a:60:2a:7e:1c:58:68:6d:d1:4d:53:36:6c:
23:c7:bc:82:a0:52:6d:2b:a4:00:c7:da:6a:77:7d:f3:ef:9e:
ca:4f:8b:f8:04:1a:2e:71:da:02:12:e5:10:07:6e:24:c4:22:
da:14:07:78:e8:22:cd:3b:e6:4d:ce:83:1f:e8:bc:46:43:84:
23:15:05:e0:be:16:4c:e1:f7:6d:09:2d:f6:dc:8c:5b:a6:57:
a7:e2:f9:74:f7:77:c1:cb:5e:8a:a1:18:9b:41:c4:f3:1b:24:
0c:63:da:2b:e6:7b:b4:c7:99:b4:14:66:64:5e:de:38:da:e0:
6f:8a:85:d8:a5:e7:cc:be:e0:ae:55:b0:29:d5:b6:cd:f4:a1:
8a:db:7f:d1:bf:65:04:d6:a9:68:7c:a9:f2:cd:26:69:52:76:
a3:c0:82:22:da:fc:e1:e5:3d:e4:d8:53:a1:62:02:ea:17:33:
51:48:2f:fb:0e:c6:2a:cb:cb:55:b0:fd:44:58:89:8e:df:43:
b8:47:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:40 2025 by rpki-client