Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/ZlXjmbNTyA5JiHk90LhnruXlJSM.roa
File: ZlXjmbNTyA5JiHk90LhnruXlJSM.roa (raw, json)
Hash identifier: OzQTpjoWf4pwd16q8JyLIZxfQHH2RHIFKQpe9U55DZ4=
Subject key identifier: 66:55:E3:99:B3:53:C8:0E:49:88:79:3D:D0:B8:67:AE:E5:E5:25:23
Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial: 018AFF04EBDAA19B25A9BD85C52EC01684BC
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/ZlXjmbNTyA5JiHk90LhnruXlJSM.roa
Signing time: Thu 05 Oct 2023 08:47:07 +0000
ROA not before: Thu 05 Oct 2023 08:47:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62446
IP address blocks: 91.197.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:04:eb:da:a1:9b:25:a9:bd:85:c5:2e:c0:16:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Validity
Not Before: Oct 5 08:47:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6655e399b353c80e4988793dd0b867aee5e52523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:09:73:66:b4:e8:2b:29:7e:57:98:1d:c6:
6c:44:83:45:a6:ba:81:60:be:e6:21:09:b8:62:ad:
8c:2d:f5:e9:e0:a1:3c:89:70:53:6b:89:60:0b:9c:
cc:48:ac:bf:00:6b:e7:77:76:1d:e4:82:1f:d6:1e:
68:b0:c5:6d:e2:ea:99:72:b2:9a:1b:9b:29:50:1b:
27:2b:06:74:b5:a3:df:40:96:58:37:d0:80:b7:03:
36:64:63:a1:b9:35:d2:a9:d4:1d:56:96:58:68:b9:
55:7b:22:ed:f4:a4:ee:ba:7a:ee:86:89:b1:f6:85:
07:cd:8f:ee:6a:ad:38:87:bf:c9:3f:08:8e:1b:4d:
f9:4c:7d:4b:05:ae:27:b6:c7:2e:ed:9e:27:33:66:
0c:8f:54:bb:50:c5:7d:c3:c6:53:a4:98:45:82:e2:
ab:3b:6b:a3:bf:1e:33:69:d2:2b:fc:92:72:5e:bd:
ec:65:eb:2b:b6:4a:f3:69:d6:ee:1c:44:a2:a1:ef:
19:f5:28:ec:57:3a:9c:78:3c:a2:b1:fa:e4:56:01:
73:aa:10:3b:53:72:41:e6:3a:e6:83:53:2f:77:ab:
99:71:3c:59:a2:4b:bd:2f:ee:88:b7:ee:92:82:03:
ee:3a:55:e3:62:23:07:ce:76:04:ba:94:29:d2:b1:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:E3:99:B3:53:C8:0E:49:88:79:3D:D0:B8:67:AE:E5:E5:25:23
X509v3 Authority Key Identifier:
keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/ZlXjmbNTyA5JiHk90LhnruXlJSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.57.0/24
Signature Algorithm: sha256WithRSAEncryption
73:2a:1c:e7:0c:fe:d5:cb:27:f4:bb:fc:cc:80:c9:a4:ed:21:
bf:27:89:4f:4a:85:8c:34:30:03:57:9f:49:9a:39:61:bb:43:
05:18:88:c5:f4:9e:b8:11:8c:9a:b7:19:29:4d:84:c3:4b:f9:
34:a6:1e:67:d1:d7:d1:f2:e4:d1:f7:13:a8:d7:69:e3:27:9b:
13:a2:57:2b:73:ab:6c:84:fc:20:bb:83:65:c7:02:9f:15:d8:
4b:37:1c:f5:04:8f:d2:ff:06:93:6d:ab:d1:60:dc:25:42:24:
f0:b4:6b:99:06:d5:8a:e1:67:e4:f2:c9:6a:0d:f0:5d:09:5f:
9e:c2:90:e7:26:e1:02:87:11:2c:96:89:f5:31:03:78:f5:b9:
c5:86:9a:7b:7b:8e:fc:a5:64:6b:83:24:09:d8:30:18:21:f9:
78:36:11:50:41:d4:59:8c:2b:58:0d:2b:0b:d0:9d:4f:3d:8a:
e7:6f:01:95:74:7e:83:a5:1f:14:72:47:25:b7:cb:15:ef:51:
01:a7:2c:68:24:44:82:f2:5b:1b:fd:2b:df:d6:e9:a7:32:45:
86:3f:29:e8:16:0a:c8:10:12:88:4c:96:98:65:c0:74:0c:a2:
d8:0e:da:4e:a3:ae:56:6c:6e:b7:64:67:51:fb:49:af:d7:f3:
c5:b2:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:02 2025 by rpki-client