Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/4ZMzB6RGINHlSovTnw0QPxH9LRM.roa
File: 4ZMzB6RGINHlSovTnw0QPxH9LRM.roa (raw, json)
Hash identifier: fM7vZr9JzWOP3dpgyTzP2gcmgSdBfBqKYWowUTWFOPU=
Subject key identifier: E1:93:33:07:A4:46:20:D1:E5:4A:8B:D3:9F:0D:10:3F:11:FD:2D:13
Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial: 026796E3
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/4ZMzB6RGINHlSovTnw0QPxH9LRM.roa
Signing time: Sat 01 Jan 2022 07:03:01 +0000
ROA not before: Sat 01 Jan 2022 07:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51553
IP address blocks: 85.91.50.0/24 maxlen: 24
85.91.51.0/24 maxlen: 24
91.217.237.0/24 maxlen: 24
85.91.49.0/24 maxlen: 24
85.91.53.0/24 maxlen: 24
85.91.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40343267 (0x26796e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Validity
Not Before: Jan 1 07:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1933307a44620d1e54a8bd39f0d103f11fd2d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:b0:6d:d7:ec:d9:e8:d6:a8:fe:53:6b:3d:
1c:ce:22:10:53:bd:7e:e5:1f:c5:bf:19:3d:94:20:
80:ca:f3:a4:ff:c4:9f:f9:39:a7:41:e7:54:cb:a4:
45:a7:bd:44:d5:8c:23:69:da:f0:95:1f:a2:18:0c:
d5:86:dd:51:33:df:83:91:59:4f:ca:87:3c:cb:7f:
d8:29:f5:38:36:5a:1a:7b:6f:8d:f2:58:1d:00:64:
33:16:bf:e0:6e:2a:fd:54:ad:1f:77:10:ba:e6:97:
f5:0d:04:9c:ff:7c:5d:0e:f3:46:a6:5b:fe:31:4f:
36:37:27:3f:01:78:d4:b6:da:a3:56:aa:11:32:f2:
ab:bf:c3:27:33:a9:8e:b0:aa:a9:a9:41:41:69:ed:
e3:dd:4c:94:ac:33:49:0b:3c:c8:5d:35:fe:d0:6b:
2e:ac:ca:32:af:48:b1:db:30:b7:94:4e:c1:2e:90:
73:f1:94:b4:bf:59:b4:64:c1:d2:a3:1c:5f:44:29:
20:50:9d:85:b6:de:57:a6:cd:22:e6:55:d2:20:e4:
b3:4e:bd:f4:50:9d:0a:51:1b:ef:ab:c4:93:e6:d5:
c2:cc:8b:6d:77:ec:fe:bc:56:21:b1:fa:44:c0:25:
f8:f8:76:98:9a:b4:91:e8:22:7f:28:ae:e6:8b:f1:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:93:33:07:A4:46:20:D1:E5:4A:8B:D3:9F:0D:10:3F:11:FD:2D:13
X509v3 Authority Key Identifier:
keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/4ZMzB6RGINHlSovTnw0QPxH9LRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.91.49.0-85.91.53.255
91.217.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4b:d2:9e:45:d4:de:60:8f:39:ce:86:0a:22:da:97:8b:45:
6c:4a:c0:71:dc:44:b6:9c:97:eb:89:52:86:bc:77:19:bb:97:
cd:91:46:84:08:3d:da:10:f1:be:78:44:ca:b5:6b:74:ce:a2:
e6:be:25:39:91:af:dc:57:67:7c:6c:34:ce:04:9a:a0:fa:35:
81:f0:a6:d5:5d:80:e3:4c:a5:fb:98:d3:ac:19:17:1b:57:a3:
3e:d0:ae:50:b5:05:86:33:b7:5e:fa:23:39:d4:ac:de:96:2d:
aa:87:27:39:b1:f0:e2:1a:f9:de:d0:e9:5f:be:5f:83:97:58:
69:ad:71:f5:11:07:e4:fd:aa:64:8c:ec:d3:bc:d6:bb:95:2a:
2e:78:7c:f6:c8:db:ca:2f:d9:03:2a:3d:1f:b3:06:06:ca:ce:
5c:91:d7:03:2f:c4:6e:41:9d:c0:2f:67:30:d5:1d:ac:fc:33:
0b:e9:63:dd:e9:35:20:6e:16:f2:fe:61:87:d7:8a:c2:0f:6c:
5a:d2:f6:0a:ca:22:c4:01:56:61:3c:7f:c5:9f:7a:a9:65:6f:
de:96:e4:3d:6d:05:a9:9e:40:3e:ad:3f:5c:44:38:82:42:f6:
ff:5b:81:fe:56:6a:ad:b7:56:43:0c:30:d3:df:fc:30:c6:89:
12:bf:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:35 2024 by rpki-client on console-fra.rpki-client.org