Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/zMzSd16X8fFJqnUb2XEWZbEiEXY.roa
File: zMzSd16X8fFJqnUb2XEWZbEiEXY.roa (raw, json)
Hash identifier: CaM6/xU/EPcN1YuUUdLM5BSruBtY51AB1Hm0I0cpV8E=
Subject key identifier: CC:CC:D2:77:5E:97:F1:F1:49:AA:75:1B:D9:71:16:65:B1:22:11:76
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 018C9A7F882C874EF8C9B846EE1A678E0640
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/zMzSd16X8fFJqnUb2XEWZbEiEXY.roa
Signing time: Sun 24 Dec 2023 06:24:58 +0000
ROA not before: Sun 24 Dec 2023 06:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43754
IP address blocks: 91.207.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9a:7f:88:2c:87:4e:f8:c9:b8:46:ee:1a:67:8e:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Dec 24 06:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccccd2775e97f1f149aa751bd9711665b1221176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:5c:e4:e6:f6:9c:4f:e1:d2:e2:4d:a8:95:
0a:86:67:b9:7f:1c:38:d3:4c:47:a6:29:9a:91:f7:
aa:f3:8c:7a:8d:e2:4a:5b:1e:3f:0b:77:9a:97:36:
9b:d0:f9:4d:7c:fc:a0:0f:f0:bb:5b:e6:9f:4e:3f:
3a:09:b8:62:49:8a:26:25:85:46:b7:56:cc:3a:ca:
fb:c5:f8:de:00:8c:a9:20:47:ce:40:84:31:f1:f0:
27:34:c7:22:2d:88:ac:80:61:c5:a1:87:c2:e1:ff:
40:c2:33:67:88:ad:63:5a:c6:85:86:f1:43:b8:c9:
06:4f:1a:e2:31:c8:9b:62:03:6a:a6:2a:5f:c9:86:
50:22:d6:d4:0a:cf:49:f1:e9:1a:9a:74:e0:c6:ae:
c0:34:5e:41:90:8b:20:21:c8:09:47:1d:aa:92:f6:
bd:ee:6e:f1:b7:74:19:12:5c:e1:98:6b:be:6c:2c:
43:69:55:c0:f0:85:49:5c:e2:1f:c5:4a:7e:4f:e6:
ae:d5:c7:04:fe:af:dd:05:8f:9e:10:c2:ff:9b:39:
d3:b5:ef:a6:b2:7f:c8:43:f9:19:7e:95:1f:1d:85:
9f:f3:2f:d4:c3:ee:24:c6:da:24:e6:ee:ad:c8:d3:
6f:9c:e7:f8:21:92:4d:ad:3e:8b:d1:18:fd:b4:3d:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:D2:77:5E:97:F1:F1:49:AA:75:1B:D9:71:16:65:B1:22:11:76
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/zMzSd16X8fFJqnUb2XEWZbEiEXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.205.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cc:60:c2:43:a7:bb:ba:76:fb:56:13:c9:2e:86:17:41:e5:
e3:e5:96:65:68:01:46:d7:70:cd:95:3c:40:a0:eb:a7:b9:54:
5b:76:4b:7e:09:1c:2e:46:50:eb:db:c2:93:8d:62:eb:bb:47:
0d:f9:a8:c9:05:dd:07:99:c0:f7:29:9f:a8:f8:c4:74:15:7e:
11:d7:04:7c:59:b3:ac:4b:5b:4d:82:71:bc:59:f2:65:9d:5c:
2d:ef:25:fb:f3:c3:8b:49:f7:39:6c:d8:cf:74:1a:06:bb:1d:
19:22:7b:be:af:a4:57:eb:db:3f:53:7a:dc:f2:58:15:65:82:
fb:6d:ff:3a:6f:35:e0:62:74:6f:af:4f:b7:17:53:d6:f5:f8:
ac:0f:23:38:24:e6:19:62:17:cd:56:2d:3d:49:8d:8a:e6:ba:
dd:a3:27:e4:9c:50:cf:2e:b5:4e:d4:d7:62:85:a1:47:4f:66:
35:d1:8a:19:29:de:d0:de:a5:61:5d:39:f8:13:e4:a5:41:7d:
e9:ec:95:33:86:d1:e6:1c:0a:cb:fc:53:3a:f5:49:f9:93:87:
78:59:bd:24:d5:3a:45:93:da:eb:c1:fc:98:fb:5d:41:2c:a1:
59:1a:67:1f:6b:59:df:f1:3a:08:3e:f6:48:2b:ec:a8:f7:17:
1f:fd:71:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyaf4gsh074ybhG7hpnjgZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NjIzYTg0NThlZmYzNDdkNDI0MzQ4NTg4ODI5ZWUxMzdi
NDVhM2YwHhcNMjMxMjI0MDYyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2NjZDI3NzVlOTdmMWYxNDlhYTc1MWJkOTcxMTY2NWIxMjIxMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y5c5Ob2nE/h0uJNqJUKhme5fxw4
00xHpimakfeq84x6jeJKWx4/C3ealzab0PlNfPygD/C7W+afTj86CbhiSYomJYVG
t1bMOsr7xfjeAIypIEfOQIQx8fAnNMciLYisgGHFoYfC4f9AwjNniK1jWsaFhvFD
uMkGTxriMcibYgNqpipfyYZQItbUCs9J8ekamnTgxq7ANF5BkIsgIcgJRx2qkva9
7m7xt3QZElzhmGu+bCxDaVXA8IVJXOIfxUp+T+au1ccE/q/dBY+eEML/mznTte+m
sn/IQ/kZfpUfHYWf8y/Uw+4kxtok5u6tyNNvnOf4IZJNrT6L0Rj9tD2DjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzM0ndel/HxSap1G9lxFmWxIhF2MB8GA1UdIwQY
MBaAFIZiOoRY7/NH1CQ0hYiCnuE3tFo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgt
NmMyOGJiNDBkNTJlLzEvek16U2QxNlg4ZkZKcW5VYjJYRVdaYkVpRVhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8zOWRiNGQtZTkzZi00MTM5LWFhZDgtNmMyOGJiNDBkNTJl
LzEvaG1JNmhGanY4MGZVSkRTRmlJS2U0VGUwV2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8/NMA0G
CSqGSIb3DQEBCwUAA4IBAQB5zGDCQ6e7unb7VhPJLoYXQeXj5ZZlaAFG13DNlTxA
oOunuVRbdkt+CRwuRlDr28KTjWLru0cN+ajJBd0HmcD3KZ+o+MR0FX4R1wR8WbOs
S1tNgnG8WfJlnVwt7yX788OLSfc5bNjPdBoGux0ZInu+r6RX69s/U3rc8lgVZYL7
bf86bzXgYnRvr0+3F1PW9fisDyM4JOYZYhfNVi09SY2K5rrdoyfknFDPLrVO1Ndi
haFHT2Y10YoZKd7Q3qVhXTn4E+SlQX3p7JUzhtHmHArL/FM69Un5k4d4Wb0k1TpF
k9rrwfyY+11BLKFZGmcfa1nf8ToIPvZIK+yo9xcf/XER
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:51 2025 by rpki-client