Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/frZvJ5g-CogSGW46H0VEBfwmuB8.roa
File: frZvJ5g-CogSGW46H0VEBfwmuB8.roa (raw, json)
Hash identifier: lAKIZQQcAAwEthKi/a3oBpO72QplXcciHWikxjf4MwU=
Subject key identifier: 7E:B6:6F:27:98:3E:0A:88:12:19:6E:3A:1F:45:44:05:FC:26:B8:1F
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 04F92630
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/frZvJ5g-CogSGW46H0VEBfwmuB8.roa
Signing time: Sat 01 Jan 2022 02:51:35 +0000
ROA not before: Sat 01 Jan 2022 02:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50572
IP address blocks: 91.238.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83437104 (0x4f92630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Jan 1 02:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eb66f27983e0a8812196e3a1f454405fc26b81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:9c:6c:cf:99:5d:41:a2:93:88:b2:d1:da:
fd:34:be:92:ba:20:86:a1:fd:20:ec:84:81:32:85:
0e:e4:b3:18:9d:b0:77:35:c5:20:ef:fa:ab:73:39:
31:bc:54:6b:8e:32:c4:08:e2:ed:b6:50:59:51:03:
9b:42:ea:74:be:a9:2f:75:69:56:e0:16:a7:d6:f9:
f3:29:41:20:b5:8d:2f:9e:53:a8:13:b9:a0:af:57:
a3:64:20:13:c0:47:70:72:23:3b:c4:83:ec:e1:64:
16:94:82:8b:66:ac:15:d3:18:18:16:04:6d:60:62:
4f:e1:fa:c5:93:64:02:a4:96:4b:10:c1:a3:3b:85:
ba:eb:6f:60:de:17:3f:3e:72:d1:a7:04:03:0e:fd:
d5:71:dd:b8:22:24:fe:7b:fb:c7:6e:31:e7:2f:71:
07:bc:58:d5:da:11:8e:73:0b:e7:a7:48:c8:35:ae:
28:1f:71:ba:d4:51:ef:01:18:d9:47:a2:9d:16:04:
eb:cf:fb:0e:4b:1c:6a:7d:40:cb:70:cf:29:cf:28:
3f:49:9d:d6:f7:35:4d:99:c4:cb:90:d0:63:2e:78:
b6:0b:31:ce:70:93:d9:65:b8:96:56:1b:68:22:49:
02:ed:c6:2a:c7:83:69:66:06:53:21:76:37:d6:9e:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B6:6F:27:98:3E:0A:88:12:19:6E:3A:1F:45:44:05:FC:26:B8:1F
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/frZvJ5g-CogSGW46H0VEBfwmuB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.51.0/24
Signature Algorithm: sha256WithRSAEncryption
45:45:1d:99:3f:6b:58:70:b6:fa:52:f8:f1:99:6e:92:cc:fb:
d3:b0:64:d3:2c:2b:7c:34:3c:63:26:bf:e2:28:30:2a:02:f3:
ff:1e:1f:8d:2e:f5:42:e6:52:03:e5:1a:e4:82:c0:e8:90:eb:
ae:6f:ab:68:73:62:37:68:8a:65:cf:d6:b6:77:b7:68:1c:c3:
75:c5:30:94:01:53:31:6e:28:f1:5b:a8:67:15:b1:77:c3:00:
da:59:52:29:30:11:12:e8:95:1d:35:9b:7a:d7:a7:0d:43:ae:
12:2e:d6:98:7e:60:f3:bb:26:e2:76:ba:45:7e:d6:c5:f1:d7:
05:6b:d2:d3:7b:d8:7a:e6:eb:40:13:99:d6:4b:b5:05:c1:52:
ef:eb:91:27:08:18:02:8f:d1:09:de:2e:71:92:28:2a:7d:bf:
b6:04:d1:72:c2:62:ff:c7:de:28:93:48:e8:ad:1b:0f:92:54:
5c:b9:7d:65:73:95:41:04:90:c5:55:60:2e:16:02:87:b6:37:
e3:ce:38:b0:e6:01:c7:bb:f7:c7:09:c2:66:f4:06:ee:ef:c9:
96:8b:48:32:d1:d4:3f:a7:49:c4:78:e5:0e:fc:78:a5:3f:da:
24:7d:0b:35:cb:f2:0d:bd:15:49:33:a4:0c:cb:76:45:ee:f5:
3e:08:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:07 2025 by rpki-client