Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/ZRwYiKCxtnO_ngJFQ345Y2TITi0.roa
File: ZRwYiKCxtnO_ngJFQ345Y2TITi0.roa (raw, json)
Hash identifier: znOVsk4U4+BS+YSPFn6OVk9lgcCn7tjjD1K3naRuDmc=
Subject key identifier: 65:1C:18:88:A0:B1:B6:73:BF:9E:02:45:43:7E:39:63:64:C8:4E:2D
Certificate issuer: /CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Certificate serial: 4DD6EE
Authority key identifier: E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/ZRwYiKCxtnO_ngJFQ345Y2TITi0.roa
Signing time: Fri 04 Mar 2022 06:36:17 +0000
ROA not before: Fri 04 Mar 2022 06:36:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 91.132.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5101294 (0x4dd6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e140a047c8b30adc6d9ee326a669dfd011d9b5d3
Validity
Not Before: Mar 4 06:36:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=651c1888a0b1b673bf9e0245437e396364c84e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:6a:e4:f5:aa:59:da:62:95:94:4c:ab:c3:
61:ea:13:2c:1c:97:d0:f2:a9:cf:45:94:65:16:b2:
2d:25:3d:28:92:ec:7a:3d:13:28:56:f4:fc:79:d9:
63:7a:e4:a3:d3:47:a2:e1:ca:2e:46:15:14:0f:22:
67:a5:2b:c8:bf:97:44:3e:75:1f:fb:ce:7d:5c:e9:
ac:a1:60:53:e0:f8:ff:01:89:97:0b:4e:4f:d1:a2:
e8:8f:92:32:60:88:34:fa:2a:26:b8:7c:3a:35:51:
e1:92:5d:7e:3c:ed:d7:9e:a7:0c:89:02:87:9d:ec:
48:3a:f9:40:d1:ac:35:03:2a:82:8c:c6:01:e7:f3:
3d:1d:73:fc:af:fd:56:2c:05:a9:f1:f1:f0:34:81:
dd:af:ff:64:8a:a9:1f:86:6d:75:9f:4e:4e:fa:f6:
d4:8d:34:6e:f9:69:dd:26:b9:a9:18:c8:62:9d:69:
2b:f3:0b:77:33:8a:8c:02:39:b9:59:32:ef:29:3b:
08:01:77:4c:b7:df:60:ab:19:c5:d6:71:74:bb:ee:
46:10:0c:b0:a9:61:76:8a:57:25:35:09:a7:c2:d3:
0f:0c:2d:a1:60:1d:76:a5:34:82:d7:72:ce:b7:5c:
b8:44:8b:00:ea:d0:ec:8a:4e:bf:ea:b3:35:3c:02:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:18:88:A0:B1:B6:73:BF:9E:02:45:43:7E:39:63:64:C8:4E:2D
X509v3 Authority Key Identifier:
keyid:E1:40:A0:47:C8:B3:0A:DC:6D:9E:E3:26:A6:69:DF:D0:11:D9:B5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UCgR8izCtxtnuMmpmnf0BHZtdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/ZRwYiKCxtnO_ngJFQ345Y2TITi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f85b7c-4ad6-427d-93ed-a6f1e495f1be/1/4UCgR8izCtxtnuMmpmnf0BHZtdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.227.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0b:b8:ed:43:62:7f:75:66:90:f9:4f:74:a9:b5:f0:ea:35:
2d:b8:bf:bc:d7:69:72:ac:9e:9d:ba:04:d6:ff:17:f3:d3:8c:
35:04:d4:46:b8:30:eb:82:61:db:b0:ea:4a:2a:15:b9:f3:c3:
e6:54:55:23:84:93:05:ad:d4:23:88:fa:e0:4d:fd:3b:38:f9:
4a:41:df:9e:cd:fc:dd:f2:cd:48:7e:bf:ee:e3:00:db:dd:fd:
b5:8c:73:92:26:c3:db:20:d3:5e:2d:27:ec:09:5b:d2:65:91:
bf:80:1f:e6:5c:fb:bc:31:b0:13:9a:84:89:82:a3:b7:24:05:
41:5a:b4:c0:80:da:ce:84:84:0d:a5:a4:db:dd:b1:59:a2:ce:
1c:3d:d3:72:47:04:19:15:1b:3f:de:f3:f7:49:3c:8a:ab:ff:
cb:a6:03:b0:36:d0:7b:34:6f:5c:b0:22:43:5c:96:02:ff:94:
a6:17:46:e0:c0:78:8b:ba:4c:8f:3f:f8:74:7c:64:63:01:de:
a4:19:1f:a7:68:1c:19:19:43:88:c1:c5:eb:3b:77:77:d3:d0:
ed:03:e8:40:73:14:4b:e2:e6:f4:ef:5e:db:09:72:09:0d:d5:
98:bc:ef:4b:fe:9b:5c:c9:a8:6c:29:07:42:c4:4d:ef:86:9a:
a1:c3:62:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:48 2023 by rpki-client on console-fra.rpki-client.org