Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/zCFafvZxqbjkdbk3red-GylWRdk.roa
File: zCFafvZxqbjkdbk3red-GylWRdk.roa (raw, json)
Hash identifier: 96Ne5DXsyJbzjZLloRPASv3eMM5PV0AP5zBosUrthho=
Subject key identifier: CC:21:5A:7E:F6:71:A9:B8:E4:75:B9:37:AD:E7:7E:1B:29:56:45:D9
Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Certificate serial: 06CF734A
Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/zCFafvZxqbjkdbk3red-GylWRdk.roa
Signing time: Sat 01 Jan 2022 13:58:55 +0000
ROA not before: Sat 01 Jan 2022 13:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57623
IP address blocks: 91.233.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114258762 (0x6cf734a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Validity
Not Before: Jan 1 13:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc215a7ef671a9b8e475b937ade77e1b295645d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:cd:ac:0c:7e:a0:14:38:6c:59:05:49:8f:
2b:db:51:c4:6e:00:19:79:b2:46:f4:4d:2d:72:49:
51:1f:d5:11:61:9f:9f:56:60:fa:ab:1d:06:06:8b:
4e:ef:77:06:6a:9a:43:b2:1e:61:68:f2:c1:e2:d5:
03:37:79:20:0e:23:a9:50:b7:8d:99:30:9c:21:76:
34:5f:8a:e7:b4:9a:f0:e7:bd:de:b1:7c:f0:e3:9a:
3f:73:db:c2:eb:41:cb:e1:74:5a:f0:7d:33:b5:46:
3c:28:57:05:8e:6e:3e:ad:84:45:5b:6f:f3:4a:55:
c0:b6:ed:18:f9:bb:e9:97:79:88:59:85:00:45:eb:
e6:0f:49:dc:cd:95:3b:2b:c9:d0:5a:c1:8a:7e:a5:
5d:92:0c:f0:fc:c5:a7:0f:01:fc:1f:44:20:b2:3a:
81:c9:23:ef:c0:f0:41:7c:42:7a:2e:62:28:d5:3e:
5c:b8:7c:0a:3f:46:63:2c:f5:53:9b:7e:19:74:e8:
16:2a:eb:9b:75:c8:6b:14:f1:60:99:43:47:0c:e9:
04:47:f0:69:92:84:05:47:ca:ed:91:de:18:cb:c1:
2a:18:6e:46:a7:ad:c5:b3:c7:d4:7d:ea:16:af:87:
8d:bc:1b:52:4f:d5:59:a8:2b:45:b8:b8:34:ff:58:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:21:5A:7E:F6:71:A9:B8:E4:75:B9:37:AD:E7:7E:1B:29:56:45:D9
X509v3 Authority Key Identifier:
keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/zCFafvZxqbjkdbk3red-GylWRdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e5:38:26:5c:a6:4b:9e:3f:90:fd:95:90:94:c5:38:e0:ac:
30:63:6d:44:d7:82:e6:bf:cf:64:a7:0c:4d:49:5c:43:46:c8:
0e:77:f4:52:23:52:56:48:5e:86:79:68:d6:ac:20:ab:05:78:
23:9b:6d:f8:de:09:c1:92:3d:f0:c1:5e:31:bb:2f:02:69:b3:
fd:0b:24:69:34:3a:30:a8:08:a3:d8:06:45:21:62:35:54:1f:
84:59:c2:83:57:3b:99:f8:fb:31:a3:7a:c9:8c:c6:e5:7e:88:
fb:ca:59:77:8c:6d:6d:71:56:53:a1:bb:4e:44:41:03:65:09:
20:39:f6:27:c2:71:09:d0:e7:45:31:48:4d:ca:75:9b:e2:b1:
41:a3:52:11:f8:bc:1b:20:18:89:6a:19:d4:3f:59:77:31:bf:
f5:0d:9d:f9:6c:2e:0f:6a:b5:8c:55:fc:c3:33:a7:55:3e:43:
55:fc:46:d5:1f:9e:ee:ee:08:f3:85:20:80:8c:a3:e6:6e:bb:
84:f2:30:ee:56:02:97:3e:82:f6:d5:04:61:9d:cc:e6:10:cb:
2d:4a:b3:08:9f:2b:2d:3f:3a:7b:60:b8:4c:08:66:9d:ce:2b:
81:6b:15:71:28:70:19:df:ab:80:50:0f:a3:b3:d6:0b:fd:31:
f6:cf:a5:2c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBs9zSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZDQ3MjhiZDFmNWQxMzZkNzY4YmYxNzUzNDYxYzUzZGE0NTc0NmNiMB4XDTIyMDEw
MTEzNTg1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2MyMTVhN2VmNjcx
YTliOGU0NzViOTM3YWRlNzdlMWIyOTU2NDVkOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANsszawMfqAUOGxZBUmPK9tRxG4AGXmyRvRNLXJJUR/VEWGf
n1Zg+qsdBgaLTu93BmqaQ7IeYWjyweLVAzd5IA4jqVC3jZkwnCF2NF+K57Sa8Oe9
3rF88OOaP3PbwutBy+F0WvB9M7VGPChXBY5uPq2ERVtv80pVwLbtGPm76Zd5iFmF
AEXr5g9J3M2VOyvJ0FrBin6lXZIM8PzFpw8B/B9EILI6gckj78DwQXxCei5iKNU+
XLh8Cj9GYyz1U5t+GXToFirrm3XIaxTxYJlDRwzpBEfwaZKEBUfK7ZHeGMvBKhhu
RqetxbPH1H3qFq+HjbwbUk/VWagrRbi4NP9YiRsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTMIVp+9nGpuOR1uTet534bKVZF2TAfBgNVHSMEGDAWgBRdRyi9H10TbXaL
8XU0YcU9pFdGyzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hVY292UjlkRTIxMmlfRjFOR0hGUGFSWFJzcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvZGJlNzczLWJlZmMtNGE3Ny1iNTEzLTVlMjM2NzI2NzNkMi8x
L3pDRmFmdlp4cWJqa2RiazNyZWQtR3lsV1Jkay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
ZGJlNzczLWJlZmMtNGE3Ny1iNTEzLTVlMjM2NzI2NzNkMi8xL1hVY292UjlkRTIx
MmlfRjFOR0hGUGFSWFJzcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvpozANBgkqhkiG9w0BAQsFAAOC
AQEATOU4JlymS54/kP2VkJTFOOCsMGNtRNeC5r/PZKcMTUlcQ0bIDnf0UiNSVkhe
hnlo1qwgqwV4I5tt+N4JwZI98MFeMbsvAmmz/QskaTQ6MKgIo9gGRSFiNVQfhFnC
g1c7mfj7MaN6yYzG5X6I+8pZd4xtbXFWU6G7TkRBA2UJIDn2J8JxCdDnRTFITcp1
m+KxQaNSEfi8GyAYiWoZ1D9ZdzG/9Q2d+WwuD2q1jFX8wzOnVT5DVfxG1R+e7u4I
84UggIyj5m67hPIw7lYClz6C9tUEYZ3M5hDLLUqzCJ8rLT86e2C4TAhmnc4rgWsV
cShwGd+rgFAPo7PWC/0x9s+lLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org