Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/z6v-mnr3JbsepZ7nKzLRzYO_050.roa
File: z6v-mnr3JbsepZ7nKzLRzYO_050.roa (raw, json)
Hash identifier: V0Uv4RyP/BwsA5MygZDIDXJX2FEnKXRDf1ku046qWJc=
Subject key identifier: CF:AB:FE:9A:7A:F7:25:BB:1E:A5:9E:E7:2B:32:D1:CD:83:BF:D3:9D
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 01294D8F
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/z6v-mnr3JbsepZ7nKzLRzYO_050.roa
Signing time: Sat 01 Jan 2022 10:04:14 +0000
ROA not before: Sat 01 Jan 2022 10:04:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25514
IP address blocks: 195.34.90.0/23 maxlen: 23
91.218.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19484047 (0x1294d8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Jan 1 10:04:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfabfe9a7af725bb1ea59ee72b32d1cd83bfd39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:9f:a8:72:95:63:f2:f1:91:81:1f:c3:57:
27:72:1d:1c:a7:25:f2:97:eb:b9:e1:1a:1c:23:53:
21:4d:d3:79:9e:0e:14:f9:09:9f:f7:6e:1f:01:59:
91:86:67:5c:e0:6b:7d:f5:0a:f3:e6:93:c8:fd:c3:
81:39:1a:99:d7:8a:c5:e8:d3:99:21:14:94:b2:4f:
b5:91:1e:e1:99:74:4e:75:81:4f:bc:da:91:20:8b:
1b:a0:1c:fa:2a:22:fe:fc:d9:ce:f6:ee:97:f3:1b:
55:95:d2:05:29:64:93:a8:f1:01:d1:26:74:30:c2:
a2:07:f1:51:2b:ae:b8:99:05:71:6a:79:b5:88:73:
13:0d:0a:47:b6:00:a5:28:be:56:da:df:e4:b0:74:
9c:14:c3:9c:d1:fc:4d:40:e4:c2:db:da:03:ae:1e:
d7:b6:8d:37:f1:17:76:0c:65:0e:a1:9c:b1:bc:2f:
1f:3c:17:1c:82:9c:58:3b:e2:09:3e:7a:c6:3e:be:
3d:cf:d8:55:08:44:73:9d:45:ce:8d:66:dc:a1:9b:
08:21:83:c3:4e:22:d7:c1:9c:51:e3:64:bc:21:30:
55:fa:8f:f7:21:8d:98:09:89:b9:b3:69:04:84:b5:
e5:ee:90:06:ee:c4:82:65:e9:12:5e:71:82:62:90:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:FE:9A:7A:F7:25:BB:1E:A5:9E:E7:2B:32:D1:CD:83:BF:D3:9D
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/z6v-mnr3JbsepZ7nKzLRzYO_050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.12.0/22
195.34.90.0/23
Signature Algorithm: sha256WithRSAEncryption
62:db:ff:df:aa:2f:33:99:a1:da:e2:20:d0:e8:fd:e5:78:7a:
bd:c1:c0:64:7e:f2:cc:22:32:ae:35:74:cd:ff:e2:55:c7:c9:
e3:89:61:b0:ca:55:3c:f8:20:fd:f4:b1:04:4e:86:43:b2:93:
cc:b6:5e:db:3f:23:a4:f4:cf:85:42:b9:23:a4:90:94:b3:72:
f2:ee:c4:ec:bb:76:a1:7b:27:6d:0a:eb:ec:8f:14:90:cb:48:
a8:f4:5a:5b:9a:28:00:77:87:18:ca:1c:89:41:58:9b:45:b6:
b1:f9:ca:14:4c:e0:79:7c:ad:c8:1e:36:7a:dc:72:f1:9e:42:
96:48:23:c4:01:8d:74:17:42:fd:c3:b4:0f:39:cf:09:6b:00:
f6:cd:c9:fb:56:6e:41:85:aa:5e:a2:28:82:04:27:1f:ea:a2:
50:4e:c9:4d:13:53:69:27:16:6b:89:02:bb:b6:27:a3:ff:2d:
7a:62:7f:e5:ff:dc:7a:cc:3c:e9:6d:a6:e7:7d:66:72:43:2e:
e5:33:ef:4f:4b:65:47:39:69:e2:5e:45:1f:01:eb:d4:c5:ba:
2e:7e:55:ba:8a:50:f7:a5:ae:2f:d5:c5:5f:3f:38:6e:81:f6:
5d:7c:f1:d5:9f:39:31:b4:68:bf:53:f6:5e:c5:b4:01:e9:92:
d6:9b:0e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:39 2025 by rpki-client