Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/1aZzczqwYve_XATBBBUyB0kS4vw.roa
File: 1aZzczqwYve_XATBBBUyB0kS4vw.roa (raw, json)
Hash identifier: ZXRx3Dl1TJ7pPka64dWPRZohJE/IrpZkbq/5VgxNmgA=
Subject key identifier: D5:A6:73:73:3A:B0:62:F7:BF:5C:04:C1:04:15:32:07:49:12:E2:FC
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01822756E85D1E22ACBDE349FE5096B47A01
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/1aZzczqwYve_XATBBBUyB0kS4vw.roa
Signing time: Fri 22 Jul 2022 19:16:23 +0000
ROA not before: Fri 22 Jul 2022 19:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.204.183.0/24 maxlen: 24
91.204.182.0/24 maxlen: 24
91.204.182.0/23 maxlen: 23
91.204.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:27:56:e8:5d:1e:22:ac:bd:e3:49:fe:50:96:b4:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jul 22 19:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5a673733ab062f7bf5c04c1041532074912e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:03:38:d1:cc:28:d5:40:8a:0f:4c:aa:b0:
52:46:10:3e:ff:be:72:2d:a6:e7:73:58:be:89:b5:
b0:bf:af:f2:1a:b2:32:fc:6f:16:a9:b9:17:49:c6:
92:74:b3:25:b3:47:be:44:6a:86:12:a0:67:15:12:
17:86:3c:2b:c5:83:ae:fa:e9:38:fe:ee:24:ab:9c:
4b:c2:d1:35:5d:10:82:54:61:9e:90:6d:c3:de:ec:
b2:14:62:62:32:d1:2f:fc:11:2d:ae:e8:b5:e1:e1:
ae:94:f5:c5:bd:c3:5c:e6:95:34:46:d4:3f:4e:e0:
fd:e1:97:8d:5c:55:c0:a4:ed:45:e3:4d:94:88:bc:
1b:4a:21:ca:98:e4:a6:a8:d9:62:b6:6a:8b:59:8b:
2e:e6:86:ea:72:26:e2:81:b2:f3:35:fa:56:03:38:
7d:73:81:37:08:dd:5a:cf:33:51:34:c0:6d:f3:82:
55:a0:35:e0:3b:87:f4:5e:38:37:a9:f1:35:75:0c:
3e:bd:03:eb:49:eb:6c:0c:a3:b5:b0:17:50:28:49:
52:d8:31:0c:06:0a:36:48:55:b7:f6:7f:2c:72:0c:
e8:49:f8:f3:8b:c4:fc:7f:83:0b:7d:f2:6b:d2:27:
20:66:57:bd:78:53:a4:a6:93:08:0d:84:ec:56:0f:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:73:73:3A:B0:62:F7:BF:5C:04:C1:04:15:32:07:49:12:E2:FC
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/1aZzczqwYve_XATBBBUyB0kS4vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.180.0/24
91.204.182.0/23
Signature Algorithm: sha256WithRSAEncryption
70:8e:63:72:6c:9b:bc:c8:95:e4:36:58:19:eb:7f:4a:77:aa:
cd:36:5e:a0:72:2d:d1:00:1d:55:70:92:55:4d:96:2a:72:b7:
2c:f0:3f:b4:b2:0b:af:35:76:9c:37:80:1b:d5:56:91:29:27:
b1:bc:34:ec:f7:0d:6a:fc:7e:86:26:a2:e7:f8:75:d0:fa:14:
88:77:0f:6a:68:21:19:e9:29:3d:2d:cc:45:59:9f:1f:65:a6:
a0:af:9a:ee:d1:10:53:3c:4e:c4:c6:c9:8a:c6:f5:a2:e0:15:
44:3b:c1:10:5a:ac:f4:c6:b2:95:71:40:c8:27:55:d7:81:ad:
3a:af:7a:c2:5f:f1:88:65:56:de:51:8c:a5:3d:8a:84:17:df:
7f:60:9f:aa:da:21:79:fa:f7:a5:06:95:62:9c:42:28:e0:1e:
32:a4:81:52:26:6b:6a:64:fd:96:a4:17:ec:bd:a3:a3:4f:84:
f3:f7:08:4a:e1:41:e4:2f:1b:ab:5a:8d:0a:c7:9d:7b:27:28:
5b:1d:c6:48:0f:b3:44:b7:a6:57:54:df:c4:46:30:22:f4:19:
f0:0d:f2:0b:39:e0:87:4b:05:cb:fc:cc:8e:65:41:b5:54:b8:
f5:e6:b3:a3:00:1a:0b:f0:e8:1f:3b:4a:b3:2b:48:ae:7d:b1:
f1:63:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org