Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/BZbCGL6PIojfXhIyw7ayxgScfBY.roa
File: BZbCGL6PIojfXhIyw7ayxgScfBY.roa (raw, json)
Hash identifier: MbuzmZZtoVVC6mmgc5MswJJVRokINEJTyMBwUJ55I+E=
Subject key identifier: 05:96:C2:18:BE:8F:22:88:DF:5E:12:32:C3:B6:B2:C6:04:9C:7C:16
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 0185719E6A2939E73AAE476CE876287AE991
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/BZbCGL6PIojfXhIyw7ayxgScfBY.roa
Signing time: Mon 02 Jan 2023 08:34:45 +0000
ROA not before: Mon 02 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41075
IP address blocks: 91.236.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:6a:29:39:e7:3a:ae:47:6c:e8:76:28:7a:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 2 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0596c218be8f2288df5e1232c3b6b2c6049c7c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:8c:fc:88:10:46:81:d3:92:50:aa:a3:0d:
38:f0:16:e0:ba:51:31:ac:4c:7a:ef:14:fa:5b:d4:
0b:96:ad:4c:98:9d:28:f4:46:90:25:e4:25:fc:df:
91:bb:fe:40:c9:df:ef:26:37:da:01:c6:4e:ac:f4:
4f:3c:7d:85:6a:06:0a:5f:ed:0e:49:9e:0b:3d:24:
a9:7c:d1:10:df:ee:5f:c2:6e:c4:0c:42:b9:5a:0f:
24:1a:81:6d:52:22:f4:d2:79:eb:c9:8d:6e:0f:be:
03:d6:7e:6a:38:c8:19:15:f9:43:de:6f:9b:87:d6:
ea:1e:77:45:96:e5:0f:03:0d:7c:81:13:62:ee:e8:
cd:9f:e9:9c:f6:a4:bc:7d:a3:43:5d:90:ce:ed:9a:
76:1e:c7:37:eb:9d:8a:bb:73:72:12:bd:f7:21:5e:
33:eb:49:aa:8d:c5:3e:b6:25:8d:77:0b:0d:7c:f3:
cd:97:d1:fd:04:43:e1:b7:0f:94:21:7b:1a:83:da:
8f:5b:7b:18:a8:3a:ac:fc:2d:ac:b2:71:f1:c8:c3:
ea:9a:cb:45:ae:f1:e0:46:19:c4:22:70:40:12:2c:
96:e0:49:cc:1f:d8:1e:da:53:d7:ab:f3:71:f0:c5:
33:86:ca:0f:2e:68:f2:68:64:17:3e:4d:7b:0f:c8:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:C2:18:BE:8F:22:88:DF:5E:12:32:C3:B6:B2:C6:04:9C:7C:16
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/BZbCGL6PIojfXhIyw7ayxgScfBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a1:55:db:ca:86:89:14:11:f9:de:88:9e:72:e2:d3:52:95:
01:90:88:0d:c3:3b:da:46:19:20:50:bf:20:ea:b5:a3:3c:34:
5d:3d:98:66:24:c6:d9:e8:14:3e:9e:e0:a6:03:a1:96:f3:a2:
78:d0:69:90:39:6c:05:02:31:b4:87:0d:e9:a9:cc:e1:02:11:
64:79:e6:12:c7:e6:e8:37:f3:9d:46:0a:85:6c:fe:3d:91:1f:
dd:b5:b2:2d:de:38:1e:e2:12:04:36:72:d5:f3:38:59:52:bb:
64:8f:ed:6d:45:6b:bc:f6:43:8b:33:e0:b6:10:2f:20:47:e7:
c6:99:f9:88:5a:86:0a:28:20:28:1b:f7:f3:31:c2:06:2b:19:
ba:09:92:d2:13:42:b0:55:a9:40:90:54:7b:05:17:8e:84:9d:
eb:25:9a:ff:8f:65:95:82:63:16:f6:ac:e1:da:f7:ae:fb:0a:
7f:c7:02:cc:08:11:99:33:58:c5:8b:d3:93:74:e7:c0:30:2c:
11:49:36:85:5f:2f:d7:a1:89:b1:ed:17:52:f3:bd:a7:1c:b3:
ba:32:06:90:01:61:94:a7:d2:40:ef:21:ba:06:f0:64:50:48:
44:ea:ec:df:d7:b0:a3:47:3f:a6:bb:4d:12:b5:2c:0e:e8:df:
0b:b4:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:00 2025 by rpki-client