Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/3FxzJowITK8_H3XtAtdbg5WAzyI.roa
File: 3FxzJowITK8_H3XtAtdbg5WAzyI.roa (raw, json)
Hash identifier: qqhcCLIYE/ypVzWDRkYmP2QNxqdEgmkgmoyZ03Vmod4=
Subject key identifier: DC:5C:73:26:8C:08:4C:AF:3F:1F:75:ED:02:D7:5B:83:95:80:CF:22
Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial: 03A96BB4
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/3FxzJowITK8_H3XtAtdbg5WAzyI.roa
Signing time: Wed 25 May 2022 06:42:13 +0000
ROA not before: Wed 25 May 2022 06:42:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51553
IP address blocks: 85.91.50.0/24 maxlen: 24
85.91.51.0/24 maxlen: 24
91.217.237.0/24 maxlen: 24
85.91.49.0/24 maxlen: 24
85.91.53.0/24 maxlen: 24
85.91.54.0/24 maxlen: 24
85.91.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61434804 (0x3a96bb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Validity
Not Before: May 25 06:42:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc5c73268c084caf3f1f75ed02d75b839580cf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:22:01:0e:a6:9b:f4:22:27:98:ec:b0:0b:
e4:4e:cb:69:04:ab:4b:10:7e:10:1b:b3:bd:30:26:
eb:9a:10:95:c3:86:7f:91:ef:4d:b3:91:7a:06:ba:
9c:88:22:da:12:5e:99:ee:c7:3c:a0:7d:6a:85:71:
bd:05:cf:7e:a0:0b:db:d4:04:28:0b:cf:7a:5a:cc:
b8:59:9f:78:0f:ed:98:8e:f1:41:bd:94:24:d6:09:
22:d7:c1:09:96:0f:2a:d1:4d:40:86:67:f3:6d:e0:
b0:b2:21:36:8b:a2:2a:5a:78:7a:4a:3c:fa:03:7b:
41:75:ae:d8:26:1f:c2:4a:70:4d:dd:ca:c3:dc:21:
0b:22:a0:e8:41:d0:f8:a8:df:71:2c:34:89:09:32:
c0:1e:e9:00:6c:02:61:0f:18:9e:fc:1e:2b:1a:37:
2f:c0:7c:8f:bf:20:e5:ca:38:e3:9e:d9:27:1c:58:
ed:70:2a:90:8b:a3:04:09:59:00:cf:e8:a2:6a:b1:
5d:e1:47:c9:a5:bd:f8:a2:38:5e:08:82:07:d9:f2:
05:0d:d4:05:ea:b9:d9:c2:a6:2e:4c:49:f1:8f:ec:
93:12:2c:31:43:1e:28:cf:4e:9b:4c:fa:6c:9f:25:
f3:20:b9:d8:c9:e8:1d:99:78:55:6e:93:11:3e:1e:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:73:26:8C:08:4C:AF:3F:1F:75:ED:02:D7:5B:83:95:80:CF:22
X509v3 Authority Key Identifier:
keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/3FxzJowITK8_H3XtAtdbg5WAzyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.91.49.0-85.91.54.255
91.217.237.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b3:af:f9:5f:a5:a9:5b:d2:64:f8:d0:9e:c5:24:32:c5:89:
ea:0b:0f:91:2b:f9:4d:b2:2c:da:81:67:e9:ab:cf:af:2f:d0:
a4:82:2f:52:2e:53:3a:57:d0:a6:39:72:eb:5f:82:64:fe:5b:
01:92:cd:8d:e5:35:48:5c:f1:5a:c6:3f:7b:a1:78:e3:72:c0:
cc:a9:13:9b:4f:13:a5:e7:89:4c:30:f1:de:93:a5:2e:26:02:
b5:cf:14:33:e1:58:4d:1f:9d:c0:62:7a:7e:f9:2e:c0:0c:54:
a5:1b:e3:e4:83:f7:19:ce:8a:48:e8:0a:87:92:62:ca:4c:57:
58:c3:3d:27:2c:42:99:f2:e9:9d:d7:cf:ae:9b:64:62:94:0d:
30:c0:2d:88:ca:f8:d2:c0:cb:49:85:31:67:96:f2:9f:63:be:
65:6b:d5:1d:58:96:c4:9c:78:cf:2a:09:5c:1b:7e:78:93:e1:
fb:68:36:8d:e3:ef:a6:b8:14:f3:58:85:12:8c:3a:17:7b:c7:
c3:e1:56:a0:db:33:d7:d5:2b:43:ce:10:d6:75:48:13:5f:c4:
ff:fd:77:6b:0d:69:09:3f:cc:ff:59:46:3f:73:32:f2:31:84:
fd:92:6a:70:8a:a2:00:d1:13:67:e9:d8:34:54:1e:1d:14:15:
16:ca:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:17 2024 by rpki-client on console-ams.rpki-client.org