Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Z6VgZBN88kWKi5RZdAxEbJ9MLDY.roa
File: Z6VgZBN88kWKi5RZdAxEbJ9MLDY.roa (raw, json)
Hash identifier: xv0cmc1lwlup5UJQ3N+4GrqhLm2dnVuUg2/1jKrseZ4=
Subject key identifier: 67:A5:60:64:13:7C:F2:45:8A:8B:94:59:74:0C:44:6C:9F:4C:2C:36
Certificate issuer: /CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Certificate serial: 0306DB04
Authority key identifier: 97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Z6VgZBN88kWKi5RZdAxEbJ9MLDY.roa
Signing time: Mon 07 Feb 2022 23:43:38 +0000
ROA not before: Mon 07 Feb 2022 23:43:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56835
IP address blocks: 91.227.180.0/22 maxlen: 22
176.113.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50780932 (0x306db04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9717bafb7018dc43bdae53b23a23e16567e1f21c
Validity
Not Before: Feb 7 23:43:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67a56064137cf2458a8b9459740c446c9f4c2c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:e5:fc:35:1d:bd:98:e4:b5:ce:39:7d:45:
e8:11:c8:29:7c:9e:82:38:45:22:9a:ab:45:c8:bd:
d4:e9:00:ad:db:d9:75:15:6b:b8:a3:ca:e1:b6:e8:
40:c7:80:76:eb:1c:d8:95:a7:8d:0b:a1:19:5a:c1:
6c:40:0c:c8:72:fd:eb:b8:b1:64:24:77:ca:38:da:
da:b8:6e:b0:09:46:42:e0:bf:ea:da:38:f2:3a:4e:
b4:97:e8:97:12:1d:72:2b:a6:be:4f:16:39:c5:6b:
d8:1b:d7:b8:1b:81:ca:b5:d2:d0:a6:1f:cd:a2:60:
4e:9f:52:35:55:a8:c3:3c:16:8f:c4:11:30:a2:70:
59:d8:c6:a6:da:4c:a4:15:f1:c1:d3:39:6c:af:01:
a9:b1:ff:fb:c1:00:0e:97:81:cb:bc:55:48:57:81:
fa:ff:b0:bf:9d:70:2b:1e:74:e9:f7:6c:96:24:7c:
b5:fc:24:5d:e1:78:87:2c:9e:13:a8:6d:96:c2:0f:
cd:ea:6a:a2:f8:96:c2:b8:db:c7:fb:8d:6e:de:27:
14:fe:8d:63:e4:96:6a:f8:ef:3f:ee:9c:c1:35:4a:
1f:2d:b9:57:51:95:bb:62:51:df:ff:3b:6d:b4:e3:
40:ef:bf:be:e3:ca:6b:2e:b9:a7:e6:f6:ea:a0:46:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A5:60:64:13:7C:F2:45:8A:8B:94:59:74:0C:44:6C:9F:4C:2C:36
X509v3 Authority Key Identifier:
keyid:97:17:BA:FB:70:18:DC:43:BD:AE:53:B2:3A:23:E1:65:67:E1:F2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxe6-3AY3EO9rlOyOiPhZWfh8hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Z6VgZBN88kWKi5RZdAxEbJ9MLDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/lxe6-3AY3EO9rlOyOiPhZWfh8hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.180.0/22
176.113.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:e7:23:22:82:24:6a:5f:97:f0:48:43:a1:89:f0:96:f8:49:
50:68:8c:49:56:f2:5d:47:6f:2f:28:e7:fd:b4:a4:d7:5a:b8:
16:c0:9c:be:6e:b7:75:da:fd:30:ee:c8:1a:67:9e:c5:fa:29:
56:75:07:89:b5:55:60:2e:3d:57:07:a2:f4:6a:1e:04:6f:00:
1d:2a:bb:54:84:61:b3:6d:31:c7:eb:b2:ed:b1:73:8d:b6:19:
bb:4a:02:4a:04:08:c9:f4:9e:e4:71:b8:27:9c:a1:a9:eb:3f:
29:02:1a:9c:7c:2c:e6:45:9a:42:98:08:1a:85:91:f0:1f:f1:
c4:42:a8:83:5f:1e:75:19:f2:02:ac:3a:6a:4e:e3:84:d0:b1:
75:d3:b0:61:a2:8b:13:6a:c5:c6:dc:fb:1f:67:15:fe:a8:58:
e4:d2:38:68:10:21:4a:40:56:c4:aa:80:65:a6:2f:c5:38:c4:
2f:c2:eb:9a:2d:a6:48:2f:61:1b:b3:10:c9:2a:a6:26:82:98:
df:bc:74:39:58:1d:f3:14:11:0c:0b:37:24:e3:20:cf:6e:d2:
37:45:d2:2a:7e:9f:b8:59:44:79:ce:91:7e:28:e9:e4:de:a2:
7e:e6:8c:de:1e:5a:62:b3:36:c5:6a:44:16:1f:89:24:4b:7d:
42:f5:b8:7c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAwbbBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NzE3YmFmYjcwMThkYzQzYmRhZTUzYjIzYTIzZTE2NTY3ZTFmMjFjMB4XDTIyMDIw
NzIzNDMzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjdhNTYwNjQxMzdj
ZjI0NThhOGI5NDU5NzQwYzQ0NmM5ZjRjMmMzNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIv55fw1Hb2Y5LXOOX1F6BHIKXyegjhFIpqrRci91OkArdvZ
dRVruKPK4bboQMeAdusc2JWnjQuhGVrBbEAMyHL967ixZCR3yjja2rhusAlGQuC/
6to48jpOtJfolxIdciumvk8WOcVr2BvXuBuByrXS0KYfzaJgTp9SNVWowzwWj8QR
MKJwWdjGptpMpBXxwdM5bK8BqbH/+8EADpeBy7xVSFeB+v+wv51wKx506fdsliR8
tfwkXeF4hyyeE6htlsIPzepqoviWwrjbx/uNbt4nFP6NY+SWavjvP+6cwTVKHy25
V1GVu2JR3/87bbTjQO+/vuPKay65p+b26qBGr0cCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRnpWBkE3zyRYqLlFl0DERsn0wsNjAfBgNVHSMEGDAWgBSXF7r7cBjcQ72u
U7I6I+FlZ+HyHDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2x4ZTYtM0FZM0VPOXJsT3lPaVBoWldmaDhody5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWYvNGNlOTMzLTQ4OGYtNDZiOS1hYzJjLTdjOTNjYWUyMjdiZC8x
L1o2VmdaQk44OGtXS2k1UlpkQXhFYko5TUxEWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYv
NGNlOTMzLTQ4OGYtNDZiOS1hYzJjLTdjOTNjYWUyMjdiZC8xL2x4ZTYtM0FZM0VP
OXJsT3lPaVBoWldmaDhody5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvjtAMEArBxpDANBgkqhkiG9w0B
AQsFAAOCAQEAnucjIoIkal+X8EhDoYnwlvhJUGiMSVbyXUdvLyjn/bSk11q4FsCc
vm63ddr9MO7IGmeexfopVnUHibVVYC49Vwei9GoeBG8AHSq7VIRhs20xx+uy7bFz
jbYZu0oCSgQIyfSe5HG4J5yhqes/KQIanHws5kWaQpgIGoWR8B/xxEKog18edRny
Aqw6ak7jhNCxddOwYaKLE2rFxtz7H2cV/qhY5NI4aBAhSkBWxKqAZaYvxTjEL8Lr
mi2mSC9hG7MQySqmJoKY37x0OVgd8xQRDAs3JOMgz27SN0XSKn6fuFlEec6Rfijp
5N6ifuaM3h5aYrM2xWpEFh+JJEt9QvW4fA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:27 2024 by rpki-client on console-ams.rpki-client.org