Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZecVE7pKjOrp4w0SA-WfFkOBNi4.roa
File: ZecVE7pKjOrp4w0SA-WfFkOBNi4.roa (raw, json)
Hash identifier: G8iD0SZ0Yj64jhcCjRmLC59U4WYRxu7NNN/Kba2vGD8=
Subject key identifier: 65:E7:15:13:BA:4A:8C:EA:E9:E3:0D:12:03:E5:9F:16:43:81:36:2E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 4855C6A9
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZecVE7pKjOrp4w0SA-WfFkOBNi4.roa
Signing time: Sat 01 Jan 2022 03:00:19 +0000
ROA not before: Sat 01 Jan 2022 03:00:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5433
IP address blocks: 91.151.176.0/20 maxlen: 20
91.151.186.0/24 maxlen: 24
91.151.190.0/24 maxlen: 24
2a01:8380::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213580969 (0x4855c6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 03:00:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65e71513ba4a8ceae9e30d1203e59f164381362e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:8f:ba:74:85:89:5a:b3:9c:c2:e3:d1:0d:
83:c6:a6:07:12:af:b3:f1:88:38:b2:43:90:f3:0e:
03:30:95:50:97:81:af:b6:2d:4f:f3:70:dc:0f:20:
ff:cb:fc:85:0b:ec:f5:a8:ad:0d:c5:6a:3c:68:88:
68:d0:ad:c0:f8:fa:d5:2a:46:35:81:0e:12:e4:2f:
f6:05:6c:07:b4:6b:a1:5a:2b:5c:1b:4c:37:55:d0:
58:de:2d:95:ec:15:b4:df:b2:25:57:9f:2a:3c:1d:
03:e7:86:ab:cb:18:3b:bc:12:29:7f:ef:ac:12:e6:
74:ea:ed:0d:4d:c3:46:41:86:3f:82:d4:2d:6f:a4:
6b:55:af:ea:90:a9:5c:8b:0e:3f:a8:13:b8:d4:a9:
bf:50:30:9d:83:f9:29:70:15:9b:ba:c6:3a:93:23:
df:28:6a:33:2b:ac:a9:a1:87:1d:4d:c1:09:d9:75:
cc:76:44:d1:01:4d:44:5c:0c:6b:fe:c0:84:5d:cf:
ce:df:aa:3b:fb:91:9f:53:84:04:d8:77:94:86:13:
eb:a6:ea:16:a0:8a:2d:2e:66:71:b7:d6:a9:49:37:
84:77:07:34:88:99:ac:1d:26:e4:e3:29:12:51:97:
c2:20:a7:03:d6:8c:f4:04:f9:61:a3:47:04:92:83:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E7:15:13:BA:4A:8C:EA:E9:E3:0D:12:03:E5:9F:16:43:81:36:2E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZecVE7pKjOrp4w0SA-WfFkOBNi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.176.0/20
IPv6:
2a01:8380::/32
Signature Algorithm: sha256WithRSAEncryption
1c:f7:37:b8:8d:74:55:d1:04:1d:28:72:8c:04:d6:b6:bf:ef:
4f:82:d3:e5:73:0b:bc:6d:57:31:3f:58:bc:ea:b7:27:7c:f5:
6e:3e:94:83:44:3c:e8:40:76:2c:2e:47:f4:c7:b4:ca:34:f5:
7f:d9:5a:80:ad:3f:df:9d:fd:22:d6:5f:08:cf:70:8d:c2:aa:
e9:db:ca:b1:d9:01:b7:6b:a7:cf:86:6b:69:9c:24:67:24:fc:
08:2a:4a:5b:b8:22:b6:fc:d0:30:5f:15:94:5f:82:7b:64:d6:
5c:26:e3:ea:1b:5c:41:d2:79:dc:17:b4:99:5d:f8:96:f9:5d:
ca:3e:22:ab:5d:5b:4f:13:3d:7a:e7:98:70:af:25:b2:96:af:
37:d8:fa:42:a5:17:08:0c:64:61:89:2a:40:bf:06:65:09:e4:
33:6f:d4:44:26:dc:45:c7:47:f9:11:93:d9:dd:da:68:6d:6d:
f8:35:a8:f9:b0:72:dd:e8:9a:b8:cb:6f:ae:42:52:28:77:33:
d7:ec:cb:3b:6e:f5:7a:f1:60:36:f7:75:89:86:b6:39:58:d1:
9c:b1:ea:eb:f7:59:94:a5:51:05:3e:6a:a6:ec:06:86:51:af:
0d:8a:7f:5d:c7:92:75:0d:bc:14:aa:10:24:da:d3:4c:a4:16:
4d:e1:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:56 2023 by rpki-client on console-fra.rpki-client.org