Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/ZX9aooOOCm1NgpbjajBYh9bdyC8.roa
File: ZX9aooOOCm1NgpbjajBYh9bdyC8.roa (raw, json)
Hash identifier: K5VNUaY2ogjU4z0Ys5bOfhN1uCf+PxNuTgMojhT4HRk=
Subject key identifier: 65:7F:5A:A2:83:8E:0A:6D:4D:82:96:E3:6A:30:58:87:D6:DD:C8:2F
Certificate issuer: /CN=96199360259fa5b35b82953c5ed97999228341ac
Certificate serial: 03F2ECB3
Authority key identifier: 96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/ZX9aooOOCm1NgpbjajBYh9bdyC8.roa
Signing time: Sat 01 Jan 2022 07:58:22 +0000
ROA not before: Sat 01 Jan 2022 07:58:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212986
IP address blocks: 91.212.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66251955 (0x3f2ecb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96199360259fa5b35b82953c5ed97999228341ac
Validity
Not Before: Jan 1 07:58:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=657f5aa2838e0a6d4d8296e36a305887d6ddc82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:24:32:2b:30:20:9e:86:8f:30:da:1d:35:
4b:2b:ab:02:8f:ca:71:ff:3b:82:93:03:8d:a4:4b:
15:74:ce:46:48:3b:51:46:a3:ca:6a:f0:61:99:9e:
24:80:29:e1:0a:e5:ba:f9:c6:2f:8f:43:55:32:22:
a2:4d:d8:17:48:eb:61:6c:e4:50:6d:c3:ef:02:bc:
10:20:53:62:f0:ad:06:4e:a2:3e:73:8b:fc:9f:51:
56:4b:c4:68:ae:72:ec:90:21:c8:65:6a:7b:2e:bd:
a1:c7:70:96:45:86:17:fc:68:44:76:f4:f1:f7:44:
b1:31:1e:de:29:6e:b8:3c:ee:75:10:95:c2:c4:f5:
28:83:41:f9:78:ab:7d:da:b8:8c:7c:74:b8:52:c0:
ad:b7:79:db:ad:ae:08:ae:5e:c2:2f:d0:91:af:c4:
3a:ee:d9:70:37:5d:24:50:97:98:04:21:f2:ab:18:
43:46:18:85:c2:f3:3a:97:fb:02:c2:e6:5c:3d:3f:
ba:4b:b4:9b:e5:39:66:d0:c6:f7:07:d8:d2:82:4c:
3a:4e:21:3f:91:31:71:b9:07:07:0c:74:d8:e2:59:
b6:a4:cf:cf:39:9e:e8:79:bb:95:35:68:ed:dc:55:
91:8e:d3:23:83:6d:46:50:f5:b8:d2:e5:14:57:97:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7F:5A:A2:83:8E:0A:6D:4D:82:96:E3:6A:30:58:87:D6:DD:C8:2F
X509v3 Authority Key Identifier:
keyid:96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/ZX9aooOOCm1NgpbjajBYh9bdyC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f9:84:70:c2:ee:f4:37:4d:54:37:df:37:1c:36:3e:7d:c2:
31:d4:36:be:7f:b1:b2:20:6a:c3:d5:17:68:a7:96:91:db:0b:
45:00:e3:d9:97:85:5f:5d:60:e9:e8:60:35:d8:3d:f6:04:53:
ce:be:57:cc:be:ae:54:ac:55:09:b6:90:98:da:6e:8c:b2:5d:
84:15:0c:9a:ac:3f:27:c6:1d:4e:1f:fe:a8:b0:82:43:1d:31:
54:b4:b8:d7:a0:fe:f3:f9:e1:f8:4f:46:39:ba:56:a9:10:eb:
58:7a:37:ab:ae:e4:25:c3:27:d2:fc:23:e0:9a:3a:72:c9:a6:
89:e9:b9:bd:62:45:ac:0f:8a:55:86:e8:f4:4d:b8:7f:b3:42:
02:b8:b9:36:a9:c8:25:7e:3a:19:a7:6d:61:b4:92:95:cc:57:
ce:cf:d8:fb:4e:55:60:92:6d:83:7e:f7:a4:41:13:a1:eb:a7:
ab:80:03:20:e9:fc:67:90:dc:00:a1:b6:d6:e5:e1:43:54:f8:
67:38:e7:28:a5:fc:38:f3:53:5e:41:fc:50:e0:e1:36:5b:6a:
16:d1:61:01:ef:84:a2:44:13:56:b1:87:25:e8:60:16:83:2b:
a6:93:69:ae:db:31:d5:a8:63:3f:17:b5:ca:0d:57:6b:0b:59:
18:ba:35:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:12 2023 by rpki-client on console-fra.rpki-client.org