Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/zjHT7tGzjTZ_lPp0CrR51FGxZrI.roa
File: zjHT7tGzjTZ_lPp0CrR51FGxZrI.roa (raw, json)
Hash identifier: IFq41tpoBUudi+VV6ZlCtArSfk1Zr2jY7gq+fOw6nWE=
Subject key identifier: CE:31:D3:EE:D1:B3:8D:36:7F:94:FA:74:0A:B4:79:D4:51:B1:66:B2
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: A13FC9
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/zjHT7tGzjTZ_lPp0CrR51FGxZrI.roa
Signing time: Sat 01 Jan 2022 03:00:47 +0000
ROA not before: Sat 01 Jan 2022 03:00:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52125
IP address blocks: 91.222.64.0/24 maxlen: 24
91.222.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10567625 (0xa13fc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jan 1 03:00:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce31d3eed1b38d367f94fa740ab479d451b166b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:82:17:a4:a4:30:3e:da:4a:64:47:da:25:38:
c2:21:22:4e:c6:dc:7e:8c:7f:49:95:b3:3b:2a:ec:
7a:fa:ff:82:7b:62:5b:0f:07:5f:88:14:69:56:d9:
a8:81:96:ec:c1:dc:ae:38:c0:df:0f:0d:ba:2c:54:
6a:a8:b9:9e:dc:ae:50:e4:4a:94:f8:93:41:1d:0d:
f9:3b:af:20:fb:e3:85:c7:6b:ea:de:f7:52:71:a6:
7a:47:14:c3:97:6b:33:e5:4c:3e:4e:95:09:0b:3c:
7a:04:2b:47:30:02:d4:1e:c9:56:73:ad:2e:73:f7:
3f:ba:1f:3c:4e:95:ca:8c:e5:7e:1a:f0:19:f3:c8:
04:99:9a:a8:67:30:b0:49:db:8d:fe:1e:24:c4:83:
cb:e6:07:91:7a:a9:aa:48:77:27:b1:5f:25:78:39:
36:37:af:96:14:0c:19:3e:ae:62:cd:fc:a9:c3:43:
1b:9e:26:74:1f:40:e8:c8:3b:e9:f0:ed:80:45:62:
a6:0b:52:dd:49:35:18:c0:b8:aa:36:46:14:42:02:
5f:50:34:5f:21:66:2a:2e:2e:27:e0:70:01:02:92:
81:f8:47:3d:69:61:0a:5e:4b:df:53:b7:a3:d3:16:
14:ca:31:0d:66:bd:05:47:ea:87:a9:5a:87:de:49:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:31:D3:EE:D1:B3:8D:36:7F:94:FA:74:0A:B4:79:D4:51:B1:66:B2
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/zjHT7tGzjTZ_lPp0CrR51FGxZrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.64.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:75:ba:f7:b8:88:d3:eb:8c:1b:14:d4:64:2f:a5:cf:14:d8:
b8:6c:87:07:0d:02:a2:e1:19:60:29:18:3a:ce:5e:32:00:94:
fd:8f:06:93:f0:b3:8b:b2:33:ff:48:b9:2a:b1:2e:8f:d1:1c:
4f:9f:e1:dc:77:33:97:e0:78:28:68:de:49:e2:3b:01:aa:38:
4b:7f:48:a0:ff:d7:b7:1f:a5:eb:e8:dc:15:e0:92:52:54:3c:
33:8f:01:e6:63:dd:6a:ee:dd:98:a0:21:ed:b6:ec:a3:01:46:
23:79:2e:6d:41:0c:84:55:63:cc:96:77:f6:64:05:41:7a:ae:
b9:1e:b0:76:57:dc:fe:5c:70:27:16:6f:30:a3:07:83:5a:e4:
ec:a9:a0:ab:a1:7a:a6:e4:cd:7f:aa:4c:dc:8a:e2:9e:a6:f3:
81:99:6a:cb:e8:c5:5a:a0:a2:4b:ca:0b:d7:8b:36:2b:f8:1d:
83:43:6d:a6:f4:87:f2:97:32:72:42:d6:75:58:6b:e3:c6:9d:
29:e0:84:73:53:50:1e:fa:63:4e:54:19:ed:98:35:70:f5:41:
d8:2d:7d:79:b6:ca:62:9a:c1:35:3e:b0:45:1e:b6:ff:df:72:
29:b1:d5:60:bd:bf:17:9b:e7:4e:cd:c3:11:f0:d4:53:66:64:
e7:0c:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:20 2024 by rpki-client on console-fra.rpki-client.org