Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/ZK5mAXGy8tLUx23lUbIIFzNRpGY.roa
File: ZK5mAXGy8tLUx23lUbIIFzNRpGY.roa (raw, json)
Hash identifier: ETtEB8O9vo4OE2GAHi+wW8mNOfjDoORMgOo+E5lZTgQ=
Subject key identifier: 64:AE:66:01:71:B2:F2:D2:D4:C7:6D:E5:51:B2:08:17:33:51:A4:66
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 18A7E3E2
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/ZK5mAXGy8tLUx23lUbIIFzNRpGY.roa
Signing time: Sat 01 Jan 2022 00:58:59 +0000
ROA not before: Sat 01 Jan 2022 00:58:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198286
IP address blocks: 91.233.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413656034 (0x18a7e3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Jan 1 00:58:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64ae660171b2f2d2d4c76de551b208173351a466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:12:07:41:aa:5a:fb:d9:f0:13:d5:b2:94:
a2:04:ba:2b:33:e1:74:d8:36:d2:ec:ef:12:35:47:
3f:cd:3a:cd:56:aa:cb:9c:ec:19:9b:7f:cf:ea:cc:
e8:bc:e9:45:0c:5d:55:34:d3:09:75:84:57:13:d5:
8e:8e:12:e2:ff:eb:ec:11:b7:cc:f1:dc:ec:bc:3c:
4e:c6:9c:f6:8b:d7:b4:78:60:53:58:c1:70:62:28:
f6:53:a3:f6:e1:f7:23:fe:42:0a:f2:fd:bf:a9:96:
42:e9:ca:80:ae:9b:21:17:85:da:3d:10:2a:93:28:
a6:4e:90:de:e3:3f:95:af:ca:8b:d8:a6:ee:c4:ea:
ad:cd:88:9c:1c:99:b3:cd:53:19:b0:8f:c3:fb:4e:
4f:dd:b9:cd:a3:94:0a:33:63:43:e6:3c:ea:ba:8f:
d7:17:0a:c5:5b:7a:10:bb:89:d6:e7:12:47:8f:38:
7e:36:6b:da:dc:24:d9:d3:bb:b4:66:3e:d8:92:61:
fa:17:b4:13:6b:c5:8c:93:66:28:3c:9a:f0:0d:f3:
a7:f6:b9:57:73:24:2d:bf:70:4e:14:2a:7f:29:11:
dc:71:ab:4f:a9:12:f3:f7:59:d7:20:57:3f:0d:31:
4f:d3:7f:d8:00:ad:e5:ab:a0:46:7c:8b:d4:d4:6b:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AE:66:01:71:B2:F2:D2:D4:C7:6D:E5:51:B2:08:17:33:51:A4:66
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/ZK5mAXGy8tLUx23lUbIIFzNRpGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d6:11:15:60:e8:bb:3f:dc:ef:e8:52:69:18:c3:9b:58:9b:
e7:36:32:84:1d:9c:7e:d1:08:6e:42:8e:62:12:21:6e:0d:a4:
27:d4:b5:89:22:85:30:99:53:f7:4e:e2:d6:72:54:1e:a0:52:
d2:f5:bb:c9:f6:ab:7c:b5:ce:87:08:b1:6a:c5:ef:0a:ea:00:
11:d2:2d:5c:06:cf:c6:c7:da:dc:98:8f:8b:48:88:d1:f9:1d:
df:d8:f8:ad:55:3f:76:7d:49:68:3e:25:dc:a2:cf:0a:3e:d1:
07:a8:20:81:8d:53:c8:1e:c9:99:e8:8f:3a:00:69:cc:c8:ca:
de:99:0e:57:1d:20:ba:a4:c9:01:da:9b:b7:76:96:47:4a:f3:
79:a2:58:cc:a3:65:0a:b6:a5:1b:e3:dc:e1:84:79:c8:ad:02:
cf:87:a1:93:bd:3c:92:03:5b:e2:e9:38:7a:b3:71:05:af:f9:
5c:a1:45:14:ed:fd:11:05:5b:09:21:b7:de:91:17:e7:43:ef:
da:f9:e1:5d:20:ee:c1:48:f9:f1:27:01:1b:6a:10:47:9c:f1:
84:9e:9f:39:cf:83:0d:bb:1b:72:82:93:65:6e:57:ed:fe:7e:
0f:29:47:20:a6:63:f0:f0:df:7e:89:f7:cf:45:3b:a7:d3:98:
63:b0:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:46 2024 by rpki-client on console-fra.rpki-client.org