Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/zRP7ncCOy-szPatUedUdIgZJjWY.roa
File: zRP7ncCOy-szPatUedUdIgZJjWY.roa (raw, json)
Hash identifier: 02fGKLk0Y9rQ5xX/7NQerHLEKPP2+5lms8OgbMTDzOE=
Subject key identifier: CD:13:FB:9D:C0:8E:CB:EB:33:3D:AB:54:79:D5:1D:22:06:49:8D:66
Certificate issuer: /CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Certificate serial: 0186DA53D8EF614575208EFD29CC73A949E2
Authority key identifier: 83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/zRP7ncCOy-szPatUedUdIgZJjWY.roa
Signing time: Mon 13 Mar 2023 09:36:13 +0000
ROA not before: Mon 13 Mar 2023 09:36:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.217.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:53:d8:ef:61:45:75:20:8e:fd:29:cc:73:a9:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Validity
Not Before: Mar 13 09:36:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd13fb9dc08ecbeb333dab5479d51d2206498d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ba:eb:2c:a4:7e:2c:64:3a:cf:1e:c7:75:79:
8b:25:da:e6:ed:73:f6:56:79:77:7c:57:e9:62:09:
7c:15:dd:e5:f3:9e:c8:e6:36:09:5e:ad:a5:de:98:
14:93:2f:b9:b2:54:12:07:aa:b4:bd:e5:46:b6:e1:
72:f0:73:84:b7:aa:31:ee:a9:87:36:99:88:d2:b6:
8b:8b:e1:84:4c:43:13:b5:c0:a8:21:08:e8:65:14:
b2:c9:58:33:18:d0:af:83:e0:23:2f:6b:9a:13:54:
d1:6b:5b:31:bc:72:f3:0d:8d:44:2f:96:c6:f1:19:
2b:47:c9:53:77:c7:c2:e9:0b:c7:c3:65:11:ca:fb:
20:91:cb:97:e1:68:fb:1c:d5:03:6f:f2:17:a0:34:
d7:b0:3c:20:a2:43:da:a3:0c:d0:90:cf:e5:e0:d2:
cc:80:7d:28:db:73:bb:80:8e:89:0c:ac:48:f4:b6:
69:b4:bf:1b:90:75:7f:c3:f7:1e:7b:3d:2c:78:19:
9d:b0:da:80:33:c4:8d:6b:c7:ab:37:36:a8:11:d0:
e1:58:93:5c:ce:92:ea:52:72:4b:ac:db:21:92:7c:
7b:61:a5:0d:4f:b5:dc:c4:bb:bd:fc:32:33:35:e8:
0c:eb:6f:54:97:ba:de:23:a5:e2:57:53:b0:6e:ec:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:FB:9D:C0:8E:CB:EB:33:3D:AB:54:79:D5:1D:22:06:49:8D:66
X509v3 Authority Key Identifier:
keyid:83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/zRP7ncCOy-szPatUedUdIgZJjWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f6:d9:26:c8:bc:d3:b1:e8:b0:dc:ef:d3:18:01:1b:90:79:
6b:ba:ac:7c:69:21:72:bf:f8:13:9c:bf:14:eb:a1:6c:f9:df:
d0:61:11:e3:45:63:55:08:99:fa:6e:27:55:e3:51:63:b8:eb:
ab:3f:97:b2:95:05:83:35:7d:3f:5e:d2:b0:b9:35:a8:81:ea:
e9:46:23:91:12:df:d5:e4:f9:22:7a:e3:2f:1a:cc:01:e1:26:
47:80:a1:d2:3f:3f:f4:36:3e:82:27:80:f2:8b:63:fc:50:69:
88:01:c0:20:f4:69:ea:9b:ae:0c:e9:6b:c5:78:a0:77:33:3c:
9b:7e:eb:28:fb:e9:ea:2e:71:81:6d:40:1c:87:d8:26:4d:fb:
39:08:a3:19:1c:10:0e:0b:64:7e:05:49:17:21:a0:00:22:aa:
a3:14:6b:07:0e:ad:f3:71:18:9d:a9:1c:7a:36:fd:9f:e7:84:
0b:e2:e9:5d:0b:fd:32:f2:e9:14:22:6b:79:05:42:4c:0b:be:
52:ef:70:d0:8f:3b:16:52:e9:7c:1c:1d:c6:ab:99:fb:62:8b:
81:f8:62:75:2c:e6:e7:fa:68:c3:04:66:d1:82:97:f8:ab:b4:
55:44:09:0d:c1:f7:90:a7:10:4e:38:b6:6b:e2:e6:a5:f8:1b:
5e:5d:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:38 2025 by rpki-client