Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/qZif5Wer0EWbpJ8Ha6P-pFOP2lU.roa
File: qZif5Wer0EWbpJ8Ha6P-pFOP2lU.roa (raw, json)
Hash identifier: +wejjtBTHD0WzbevehHquWlXn8wQCnwPA4PGe6tNXIc=
Subject key identifier: A9:98:9F:E5:67:AB:D0:45:9B:A4:9F:07:6B:A3:FE:A4:53:8F:DA:55
Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Certificate serial: 07EE02CA
Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/qZif5Wer0EWbpJ8Ha6P-pFOP2lU.roa
Signing time: Sat 01 Jan 2022 02:50:46 +0000
ROA not before: Sat 01 Jan 2022 02:50:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51559
IP address blocks: 91.227.4.0/24 maxlen: 24
91.227.5.0/24 maxlen: 24
91.227.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133038794 (0x7ee02ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b
Validity
Not Before: Jan 1 02:50:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9989fe567abd0459ba49f076ba3fea4538fda55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:f1:f9:cc:4f:6d:ba:61:3b:fd:5d:4f:98:
a0:54:4d:84:62:18:96:91:86:56:e4:af:90:70:d7:
0c:b3:8a:40:12:99:ae:ca:20:4c:ff:26:b1:4c:bd:
7a:80:e8:94:0e:ed:98:2c:d6:c1:15:e3:dd:e5:76:
db:34:ba:89:96:c4:b6:d3:91:26:de:44:99:e2:ab:
b9:61:c2:c2:33:26:d8:fd:47:36:85:c6:be:52:e5:
ea:fc:a4:ee:7e:3b:fa:4e:06:f6:28:e7:a8:5c:a6:
81:28:1b:72:fe:54:ef:93:f2:58:4c:20:36:ab:2b:
cf:8b:44:f7:a3:e2:15:cd:94:b5:3f:cd:84:54:7c:
29:0a:1d:cc:e4:65:af:25:50:7d:f9:ef:a7:e1:45:
4b:9f:8f:f9:15:ba:85:6a:fa:75:37:35:65:08:b4:
bb:10:0d:b3:38:dd:ee:69:d9:3c:68:12:76:82:42:
9d:77:9f:73:64:6f:e4:76:a1:fc:8e:a8:3c:fb:80:
75:19:50:90:a8:69:a6:d2:88:49:aa:b3:dd:63:0b:
bf:ac:6e:2f:f4:59:57:a4:5a:a8:97:03:2b:b1:a2:
f0:02:2a:7f:fe:69:a3:d2:ee:4b:c6:8a:0f:ed:d5:
04:17:4b:08:5f:bb:49:9b:15:95:24:6c:9a:b6:49:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:9F:E5:67:AB:D0:45:9B:A4:9F:07:6B:A3:FE:A4:53:8F:DA:55
X509v3 Authority Key Identifier:
keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/qZif5Wer0EWbpJ8Ha6P-pFOP2lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.4.0-91.227.6.255
Signature Algorithm: sha256WithRSAEncryption
69:e6:23:17:76:de:2b:df:4e:df:bc:00:5b:e4:50:86:64:3b:
b4:db:91:b2:6e:ac:91:25:66:d2:63:c7:e4:94:44:28:cd:a1:
da:ad:8c:3e:44:c9:38:9e:26:52:fa:39:41:70:1d:8d:73:99:
46:c6:48:64:14:0d:85:6c:54:8c:c2:ae:38:aa:40:eb:ff:07:
57:24:3b:d4:68:1b:6a:2d:7b:7c:b1:8c:29:99:17:33:cb:e9:
a0:57:aa:ce:26:be:94:96:e0:87:51:e8:70:a3:2e:d9:e9:e4:
64:f2:d0:8d:a8:55:72:b4:9c:6c:56:5a:76:5d:8a:33:d9:e2:
49:c1:b5:31:ef:97:07:fd:5b:db:eb:7e:7d:61:c7:1b:94:14:
fe:12:1d:73:a8:4f:50:b5:07:5e:42:3b:0f:de:91:1d:6d:3a:
9b:1d:35:68:37:b7:34:56:e5:d9:f7:ed:62:3a:8b:c1:bb:f2:
7a:b4:51:34:4c:4e:4a:a4:32:26:b0:79:26:15:e7:8b:2c:68:
86:ca:e2:ae:5a:cc:89:48:dc:2c:da:30:6e:2c:58:03:c0:20:
79:4f:21:11:8a:59:99:a2:76:e8:ef:e1:f4:25:59:e7:21:47:
66:87:f5:ec:93:ac:8f:38:7e:16:5a:6a:7b:ab:8b:37:90:06:
81:cf:13:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:15 2024 by rpki-client on console-fra.rpki-client.org