Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zC1bKaGt2lF3AdFvzzQBmUTHS8s.roa
File: zC1bKaGt2lF3AdFvzzQBmUTHS8s.roa (raw, json)
Hash identifier: 9/anBanwriti60HeU8xsbnsR14DOsJiRzcwTe/l5Rug=
Subject key identifier: CC:2D:5B:29:A1:AD:DA:51:77:01:D1:6F:CF:34:01:99:44:C7:4B:CB
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0184CCE17E4F8A9F80A37BFD3A0BD60825AC
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zC1bKaGt2lF3AdFvzzQBmUTHS8s.roa
Signing time: Thu 01 Dec 2022 08:50:40 +0000
ROA not before: Thu 01 Dec 2022 08:50:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 91.193.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cc:e1:7e:4f:8a:9f:80:a3:7b:fd:3a:0b:d6:08:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Dec 1 08:50:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc2d5b29a1adda517701d16fcf34019944c74bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0e:2e:7e:3c:0a:0c:49:b6:6e:0c:6e:bb:b8:
88:e8:54:d6:d5:df:be:93:37:41:fe:a5:12:76:09:
85:ce:09:28:78:c8:07:4e:2a:4a:e4:17:96:b5:5e:
a5:93:c8:f1:d0:71:32:c5:95:5b:56:c5:75:1b:46:
31:2b:b6:85:78:ad:a1:39:31:33:7a:ef:ad:37:b4:
fb:d1:cc:07:ff:80:2e:3a:b7:3b:80:a7:10:2d:94:
60:76:08:93:c0:65:33:0d:bf:02:aa:3a:94:30:7f:
80:d3:86:7a:f2:48:f5:0a:91:ed:d3:04:45:b3:10:
d9:3f:9e:b2:8a:b4:18:65:24:dc:7d:a6:03:3f:9b:
94:ac:4a:83:0e:1b:4b:89:05:10:6f:ab:03:a2:7c:
64:a6:2a:d1:56:86:ce:8b:aa:0c:56:0d:db:f4:8b:
a8:4a:34:fa:25:5c:78:f3:09:50:26:8a:6e:95:bf:
8d:e8:e1:04:6e:e9:cb:6b:5b:5a:15:2a:ce:e8:84:
27:04:a1:c0:bc:6d:e4:a9:62:7e:c7:65:fa:7c:1d:
55:5d:90:e0:16:9e:71:cf:62:54:e1:00:f2:21:9e:
50:4e:b7:28:12:f3:28:4b:ba:c2:c8:9b:5e:eb:4f:
a2:e3:e2:22:1b:09:c9:93:99:f2:c8:cb:af:9d:cc:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:5B:29:A1:AD:DA:51:77:01:D1:6F:CF:34:01:99:44:C7:4B:CB
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zC1bKaGt2lF3AdFvzzQBmUTHS8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d8:ff:f6:4f:25:b5:6b:55:c0:20:a1:57:4e:b7:a7:8f:5c:
f1:11:84:85:1c:bb:94:d7:dc:73:7e:ee:de:a3:49:a8:88:47:
3f:26:6c:59:bd:90:89:02:da:05:8d:ca:1f:82:34:80:b9:02:
1c:91:c2:7d:73:4f:c4:b5:5c:48:75:43:eb:73:59:42:6f:31:
d9:b9:d0:5a:3a:c7:02:35:a2:47:b4:e4:22:15:82:7f:fd:2b:
d3:ae:85:85:de:a9:94:76:11:8a:c1:2c:d5:b9:21:fc:18:8e:
ab:7f:68:e4:b2:c5:5e:5a:cd:f9:e7:33:6b:52:2e:74:16:15:
15:f7:7a:b9:a0:a5:a0:3f:61:27:b3:4e:21:fb:c3:41:d1:39:
96:88:19:10:64:2d:5f:cc:3b:98:fd:38:31:12:5b:0f:ce:15:
d2:83:a7:29:1d:e9:6c:f4:a2:a3:52:79:53:b6:e2:23:14:64:
bb:a4:d4:9d:02:5f:3a:55:e5:bc:fc:c5:2d:de:54:7f:f7:8c:
f0:53:23:3a:c3:87:95:cc:87:74:3d:27:97:70:97:3b:85:10:
a2:3a:40:fa:94:0c:59:18:71:0e:be:9c:4b:48:9e:72:1d:b5:
0b:68:3e:c7:e4:2a:eb:71:fa:a0:e5:f2:1a:4c:90:73:1b:b2:
e2:85:22:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:31 2024 by rpki-client on console-ams.rpki-client.org