Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/zAvO6HCLeUgmdAl4h1dUDk4DEW8.roa
File: zAvO6HCLeUgmdAl4h1dUDk4DEW8.roa (raw, json)
Hash identifier: tlwrWWruzY1Tvb+KG14ir9EnZvrfryLX5csBvqtyDNA=
Subject key identifier: CC:0B:CE:E8:70:8B:79:48:26:74:09:78:87:57:54:0E:4E:03:11:6F
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 03A4989F
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/zAvO6HCLeUgmdAl4h1dUDk4DEW8.roa
Signing time: Sat 01 Jan 2022 09:54:30 +0000
ROA not before: Sat 01 Jan 2022 09:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56544
IP address blocks: 91.225.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61118623 (0x3a4989f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Jan 1 09:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0bcee8708b7948267409788757540e4e03116f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:e2:78:33:4c:a2:3e:f8:a3:1f:e1:33:e2:
a9:80:4d:d4:4f:ac:2d:e6:76:16:55:8a:4a:1c:a8:
f6:cd:ed:13:ee:6a:c4:ce:b1:af:c6:ef:97:66:cb:
fb:f7:d3:73:6d:f8:e1:e4:19:3b:43:4b:27:1c:74:
98:cc:8c:40:05:aa:51:13:8d:98:29:27:5e:19:fb:
4f:f4:d3:6c:1c:ad:cf:30:b5:ba:6c:47:16:00:e5:
96:f3:a6:db:87:10:3d:57:fd:97:96:82:19:6c:b2:
69:c2:47:ff:b1:d3:96:8a:fb:f3:26:15:6f:fe:0d:
1b:a0:51:ce:27:0d:9c:95:7f:08:ed:e0:3b:71:57:
8d:6d:8a:71:60:35:50:03:17:80:75:4d:41:d3:60:
02:2a:18:d8:6d:4c:d5:ac:76:d8:97:da:93:26:8a:
b3:52:be:44:4d:1c:28:4f:63:c9:d2:2d:ff:3e:48:
3b:64:5e:b2:bf:fe:29:67:a0:c2:29:3a:34:ae:95:
9a:72:ab:b7:0c:8b:ba:27:2c:01:83:44:ed:7e:98:
0c:42:46:a1:42:00:07:bb:a0:09:47:e3:a0:0c:e7:
da:b2:46:2a:7a:82:ba:9e:e0:12:bb:54:5a:11:71:
09:c0:eb:0c:aa:e4:1e:fa:b7:92:0c:67:e3:09:21:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:CE:E8:70:8B:79:48:26:74:09:78:87:57:54:0E:4E:03:11:6F
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/zAvO6HCLeUgmdAl4h1dUDk4DEW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.176.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:c1:e4:0f:c3:45:61:ab:52:87:48:e7:aa:bc:8f:60:d2:97:
4c:b0:d0:0c:f2:22:1e:83:d9:ac:52:11:b7:70:4c:66:74:a8:
49:98:5f:5b:fd:6a:9f:1b:51:e9:ad:32:1f:2b:2d:ca:a4:cb:
92:a6:1c:39:02:6e:fc:88:ad:bf:31:00:71:6b:3b:a9:55:b9:
34:b6:d1:80:5e:5e:2a:1a:6b:6e:f5:a9:49:b0:5d:fc:4f:5a:
b7:d7:58:e1:c2:1a:13:34:44:84:47:93:18:65:14:98:3b:2d:
3d:e7:27:3b:a6:a5:63:a0:73:9b:f7:a2:ed:08:d1:af:87:16:
06:34:0f:48:13:6b:0e:f4:97:a7:99:e3:33:ff:c9:48:12:9c:
4f:ea:52:09:96:3c:8f:36:d9:8d:24:ce:b5:cd:e1:73:31:a4:
95:e2:aa:26:96:bb:c8:52:d0:64:ba:d8:a7:3d:4e:8c:d0:c2:
a5:27:a7:da:1b:87:c5:4f:50:8d:17:28:97:c8:de:14:a4:cf:
8b:d8:24:c2:ad:3b:4d:72:e2:ff:83:4b:5a:7c:c3:55:c2:dc:
4b:db:a3:55:40:51:f3:92:02:52:d7:ea:bf:88:e9:84:22:25:
ee:8c:a4:a9:bd:23:22:7d:db:10:01:59:47:d0:52:56:13:a7:
a9:33:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org