Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/ZZnKWnqh-kiTwJfl7VYxlO8kyqU.roa
File: ZZnKWnqh-kiTwJfl7VYxlO8kyqU.roa (raw, json)
Hash identifier: QHd5Ppscj/pZLhntBqGeAAVHLKsMQmDZUha7tog5EUI=
Subject key identifier: 65:99:CA:5A:7A:A1:FA:48:93:C0:97:E5:ED:56:31:94:EF:24:CA:A5
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 057C5AD5
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/ZZnKWnqh-kiTwJfl7VYxlO8kyqU.roa
Signing time: Sat 01 Jan 2022 12:05:40 +0000
ROA not before: Sat 01 Jan 2022 12:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204895
IP address blocks: 91.204.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92035797 (0x57c5ad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 1 12:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6599ca5a7aa1fa4893c097e5ed563194ef24caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:d7:91:98:a1:b6:86:1f:57:cb:f3:7a:bb:
2f:80:bb:3b:7e:d6:e0:fb:72:d4:17:c4:ac:2d:34:
b3:8f:18:a1:51:cb:69:ff:26:41:14:45:7b:a3:33:
44:c1:33:58:6b:f1:31:7f:a3:04:05:8c:35:22:fe:
e6:44:57:19:cd:b0:a9:84:54:90:c5:4d:42:c1:ae:
58:8f:aa:5b:53:32:d8:7d:46:6b:9a:2c:66:3c:7c:
fd:83:a6:34:5a:ec:df:83:62:91:8c:1d:26:cd:62:
68:a7:3d:8d:6f:2f:04:2d:23:12:56:1c:b8:35:ab:
f7:56:ed:3b:0e:89:77:c9:b9:db:1a:85:4a:93:83:
46:ff:d2:dd:a0:4c:27:a5:17:19:a9:6f:50:fe:d9:
d4:c5:a9:43:6e:5d:20:f4:89:74:11:f7:f1:b8:94:
19:45:52:70:c2:fa:1a:1a:1d:c7:3f:12:ff:a3:f2:
c1:31:5b:19:40:ca:e7:b0:bb:cf:b5:d9:53:fc:d0:
c6:b7:78:6c:a0:c5:98:e7:1f:a5:1d:60:60:cb:d0:
31:62:d0:d2:5c:71:57:0b:cb:f5:3c:fe:80:ce:ff:
93:86:69:30:f0:89:bc:38:20:19:64:90:d7:fb:0c:
52:8c:49:d4:f8:c8:39:eb:e3:04:bb:8c:07:ad:c1:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:99:CA:5A:7A:A1:FA:48:93:C0:97:E5:ED:56:31:94:EF:24:CA:A5
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/ZZnKWnqh-kiTwJfl7VYxlO8kyqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.181.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f3:b2:ff:b8:96:a0:41:82:9d:33:c7:37:4c:d1:9c:65:fd:
0a:b0:b8:19:2d:9f:dc:0f:71:21:74:46:64:3c:31:30:ef:d8:
01:ed:49:d8:05:f7:8a:26:97:9c:01:39:d5:7f:8b:10:45:df:
57:95:d1:bb:83:ea:4a:58:06:8f:b3:48:8d:2c:63:c9:68:d2:
4b:d4:65:7d:af:e8:72:b5:a2:eb:1e:fb:86:a8:11:f6:1c:0a:
cf:12:56:31:07:9c:f2:20:09:0d:52:6b:4f:cc:84:bd:8b:26:
14:9f:58:ef:cd:b1:d3:80:ae:26:a6:cd:bc:4b:3a:08:d5:14:
8a:6a:8d:7e:e0:25:b8:18:95:91:76:b6:7c:32:fc:93:38:b5:
c7:01:5c:78:48:f5:f7:16:a0:f4:cd:93:3c:c7:fa:89:16:53:
1c:38:3b:ce:38:7e:52:e5:28:1f:e2:0f:ca:14:6e:22:ef:f3:
51:76:66:db:54:d1:69:42:15:db:a3:61:9c:ef:b8:bd:e9:f1:
8a:c9:34:de:df:d7:19:b4:10:b8:63:5d:fe:0c:ff:8a:34:f8:
43:ec:51:5f:3e:f4:9c:07:f2:4b:69:bc:23:85:51:b2:30:13:
cb:1a:59:65:cc:f0:d9:1b:7e:1b:a7:6b:7b:eb:e7:33:0b:47:
40:a8:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-ams.rpki-client.org