Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/zQVHKfAPaJ5w5OVelF1Rvq2gnvY.roa
File: zQVHKfAPaJ5w5OVelF1Rvq2gnvY.roa (raw, json)
Hash identifier: fLBKsJFtwSX2X603QUGdrmTXc1s+RyE9jrMMpKXc0tw=
Subject key identifier: CD:05:47:29:F0:0F:68:9E:70:E4:E5:5E:94:5D:51:BE:AD:A0:9E:F6
Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial: 07354F03
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/zQVHKfAPaJ5w5OVelF1Rvq2gnvY.roa
Signing time: Sat 01 Jan 2022 02:53:58 +0000
ROA not before: Sat 01 Jan 2022 02:53:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199408
IP address blocks: 91.194.0.0/23 maxlen: 23
91.194.14.0/23 maxlen: 23
91.194.14.0/24 maxlen: 24
91.194.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120934147 (0x7354f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Validity
Not Before: Jan 1 02:53:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd054729f00f689e70e4e55e945d51beada09ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:61:5b:aa:ee:0e:2a:3d:30:11:f2:4c:01:
3a:e5:de:1d:48:d3:38:15:eb:da:30:50:f6:2d:c0:
4e:9a:95:80:3d:c2:7c:95:42:f6:d6:f4:b0:26:9e:
a6:63:47:6a:ca:21:cc:db:2a:59:92:80:86:64:e1:
e2:08:ae:2d:22:c3:73:07:3f:98:05:72:01:43:84:
31:ae:78:35:68:8b:bd:a7:0a:b2:fc:ae:fa:c7:1e:
c6:62:49:0b:55:e2:a4:24:23:3d:3b:10:2f:5d:19:
2c:2e:da:cd:29:de:a8:4d:fc:66:87:75:c1:db:4b:
ca:bb:ff:7e:2b:95:4f:e1:74:ac:a0:85:22:ae:2e:
d0:71:a2:a6:57:72:04:15:b5:d4:4a:45:fb:26:53:
da:56:84:55:fd:7d:df:e8:99:36:64:c5:e8:75:0d:
79:96:bf:a7:10:1d:be:69:fe:e6:ee:9c:91:47:72:
77:c7:11:bd:c7:8a:fb:48:c0:cc:f5:99:ae:b1:8a:
78:eb:b3:a8:66:54:d1:b0:aa:55:eb:b8:48:9e:1c:
89:57:55:50:87:fa:8b:04:73:d1:ae:da:40:92:47:
07:ce:2e:50:9b:03:4a:b6:f9:66:fa:f5:aa:a9:44:
be:5f:50:3e:a8:bc:ba:1e:58:17:ec:18:f7:1f:b9:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:05:47:29:F0:0F:68:9E:70:E4:E5:5E:94:5D:51:BE:AD:A0:9E:F6
X509v3 Authority Key Identifier:
keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/zQVHKfAPaJ5w5OVelF1Rvq2gnvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.0.0/23
91.194.14.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:ae:bc:fb:87:21:8a:79:64:86:5c:3c:35:0b:5e:c8:ce:e4:
bb:98:b5:21:b3:65:e5:5b:7f:d4:cb:1a:bb:23:ba:be:3c:61:
60:6e:1c:d6:63:6c:7f:b8:18:61:c3:f4:b3:73:49:e5:01:7b:
2c:c8:94:fb:e2:d8:6f:be:ff:11:a5:52:fb:17:e3:0c:7f:a9:
ae:06:90:c5:e0:90:cc:36:2b:e3:6e:ba:28:86:dd:3e:65:f1:
33:9d:36:c1:7e:a2:d0:91:55:4d:f1:4a:fd:e5:0f:42:f7:0c:
d7:45:25:5a:70:eb:ae:76:0c:34:45:8d:5b:9d:03:32:2e:a5:
49:82:55:69:f1:e2:18:d4:53:6a:5b:62:6a:56:0c:3f:4e:0c:
5f:d7:b9:ff:fa:91:48:fe:c8:6f:ca:34:a7:64:86:bb:a0:d7:
3b:13:7c:6d:0d:78:a0:93:7b:0c:d1:c5:e1:b7:e7:34:2d:6e:
82:ad:97:82:73:16:2a:48:59:66:a1:2f:12:63:84:71:58:90:
f9:e5:88:5e:66:bb:6b:4a:70:c1:28:41:31:3e:5c:00:bb:f2:
8d:4f:d8:b6:01:2b:45:fb:45:19:68:d5:dc:17:cb:c5:14:fa:
44:cb:96:ea:a3:20:ed:89:c8:52:fc:8f:21:6f:0c:2b:94:0f:
bc:4f:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:46 2024 by rpki-client on console-fra.rpki-client.org