Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/z-oPTZuWcyTX_SaWXhiRzTz9zzg.roa
File: z-oPTZuWcyTX_SaWXhiRzTz9zzg.roa (raw, json)
Hash identifier: bOmKI1dRTBrgflQDiJt63lbjMtYM0to+JKQBy4bUbxM=
Subject key identifier: CF:EA:0F:4D:9B:96:73:24:D7:FD:26:96:5E:18:91:CD:3C:FD:CF:38
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: EA03A2
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/z-oPTZuWcyTX_SaWXhiRzTz9zzg.roa
Signing time: Sat 01 Jan 2022 01:52:06 +0000
ROA not before: Sat 01 Jan 2022 01:52:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24971
IP address blocks: 91.216.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15336354 (0xea03a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Jan 1 01:52:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfea0f4d9b967324d7fd26965e1891cd3cfdcf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:b0:f0:a8:be:e2:74:e9:8d:4e:40:4b:81:
9c:7f:fe:f3:30:d8:f6:a0:9c:7d:a0:eb:6f:6f:7c:
04:ac:b8:59:bb:1f:2f:06:75:a1:33:43:12:af:52:
27:f0:a8:aa:07:57:0b:88:ea:10:a6:de:4c:12:2a:
77:51:44:8b:16:e2:2f:5b:29:bd:62:1d:86:7b:b8:
6f:66:91:f1:5c:25:c6:a1:1c:e9:88:3a:ae:7a:0f:
dc:fa:15:7f:d4:f6:4a:3c:a0:ff:99:66:99:48:01:
a3:a9:d9:8f:45:80:e1:21:87:de:bc:04:37:ce:71:
c4:3c:89:bf:52:2d:bc:85:ac:7a:5c:a0:7a:8f:a4:
43:cd:3d:8c:1f:9a:01:ec:45:49:53:05:2a:08:dc:
fd:36:20:50:e9:73:8f:23:13:7f:26:cd:1d:5b:2e:
1d:66:fa:10:e8:3e:e1:a9:04:62:e5:84:3f:17:9c:
07:2e:dc:2e:88:66:12:9d:ec:96:76:89:4a:06:8d:
37:c6:e8:33:d3:b8:99:92:d7:e4:52:40:d7:99:9a:
cd:e8:0d:04:45:56:a9:5c:65:8a:02:af:a5:d1:81:
71:35:0a:e0:ba:0a:0d:98:e5:e3:9b:2d:f4:c8:7d:
34:cd:d4:de:50:a9:85:52:34:d2:1a:45:d2:1e:da:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:0F:4D:9B:96:73:24:D7:FD:26:96:5E:18:91:CD:3C:FD:CF:38
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/z-oPTZuWcyTX_SaWXhiRzTz9zzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.179.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:8f:ec:66:d4:49:33:2e:3e:8c:c8:03:68:1e:4d:e2:ae:71:
bc:08:36:11:35:d7:69:e3:de:0d:e5:47:fd:2b:95:04:8e:00:
5b:8a:de:98:48:cf:79:12:2d:1d:8e:61:31:ed:c0:a1:4a:f6:
e7:2d:f4:52:a1:25:de:f1:68:f2:f1:de:64:77:21:e0:d0:ba:
fe:4c:d9:f2:b4:61:b9:01:53:60:b8:31:8e:36:2c:c6:55:8b:
4a:9c:1c:bf:bf:b3:db:15:d2:5e:93:14:0b:d9:9f:2c:d8:12:
8c:3e:57:45:ec:94:87:5f:4c:84:e9:1b:d0:7f:b0:de:4f:4a:
53:0c:da:0e:0b:d6:a0:f2:8a:72:e8:81:af:f1:60:42:25:61:
4f:6d:01:47:c8:8d:ba:42:37:b4:3a:51:12:53:26:d9:76:34:
34:4f:4d:8c:0a:ac:9d:c0:82:a9:0d:51:84:29:61:09:e3:27:
69:19:c6:df:f8:3b:93:41:93:77:3f:9e:46:29:c3:c8:72:97:
88:83:0c:cc:5a:4b:7f:d4:4b:f6:3f:55:2e:b0:64:cb:06:d9:
2c:6d:ec:cb:65:a6:4d:2a:8b:80:44:25:64:23:1b:b1:a3:b9:
96:64:76:eb:2a:b9:2f:47:1f:e1:95:68:0e:26:21:be:75:0e:
3a:ec:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:54 2023 by rpki-client on console-fra.rpki-client.org