Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Z6vdpE0ani-zrvJWUgOnvZwuOyc.roa
File: Z6vdpE0ani-zrvJWUgOnvZwuOyc.roa (raw, json)
Hash identifier: oofR7Jv4G+0UGY2CMGarCKCsmCKkPa2hEDVoFyqOpeU=
Subject key identifier: 67:AB:DD:A4:4D:1A:9E:2F:B3:AE:F2:56:52:03:A7:BD:9C:2E:3B:27
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 09D8B9EC
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Z6vdpE0ani-zrvJWUgOnvZwuOyc.roa
Signing time: Sat 02 Jul 2022 07:42:25 +0000
ROA not before: Sat 02 Jul 2022 07:42:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9384
IP address blocks: 91.186.204.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165198316 (0x9d8b9ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 2 07:42:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67abdda44d1a9e2fb3aef2565203a7bd9c2e3b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:66:9a:72:a6:58:e4:6e:0e:81:06:1e:38:
9e:05:cc:ae:31:09:88:16:af:68:5d:16:26:42:75:
06:3d:5d:05:02:92:21:82:f7:82:4e:31:94:09:a1:
f4:e8:2f:9a:e0:da:11:e5:32:ab:7b:64:be:1d:cc:
d7:00:23:86:ec:56:7b:24:93:18:7c:9b:fc:8d:f5:
39:b8:1a:a8:a9:12:eb:e1:91:8c:fa:a5:35:f2:49:
cc:63:e1:1e:d0:13:d5:6c:e8:43:e4:8a:a8:28:64:
85:f7:df:b2:0e:ab:5e:16:f3:96:e9:5f:3c:30:59:
bb:d1:f4:ca:b3:ea:5d:80:21:8e:d8:00:75:af:81:
c4:72:dd:5d:72:5a:47:28:cc:2c:2d:f0:6f:b5:7a:
f3:10:7e:d9:00:b7:4e:27:b7:6b:fb:b6:e9:a0:ed:
d8:0d:21:75:2a:03:9e:d4:9f:49:68:5d:86:0c:65:
7c:9a:9d:3f:63:40:4e:b8:00:3d:d9:20:8d:03:ca:
eb:21:31:79:47:da:61:4b:55:49:1e:c2:fa:f9:9a:
11:ea:8c:81:37:01:f1:6e:d6:5f:c3:52:df:d3:9d:
92:13:ec:05:5f:ae:e3:98:ae:c0:bd:16:c6:7b:d0:
07:eb:3d:58:7d:df:5e:27:9f:8d:76:74:31:46:e5:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:DD:A4:4D:1A:9E:2F:B3:AE:F2:56:52:03:A7:BD:9C:2E:3B:27
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/Z6vdpE0ani-zrvJWUgOnvZwuOyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.204.0/22
Signature Algorithm: sha256WithRSAEncryption
38:af:d6:37:72:da:2e:99:4c:85:14:54:c1:bf:17:ee:9f:33:
47:4b:68:86:d0:9a:c7:f3:f2:21:0b:d6:3d:ac:43:a4:41:61:
7b:48:28:a9:04:d3:66:0c:03:50:84:88:6e:34:10:1f:c7:61:
45:15:e3:33:8c:3e:e6:60:0f:3f:15:75:53:19:67:7b:ea:bd:
ba:f6:b4:cb:72:a9:06:4d:6a:89:5d:ed:50:21:38:6c:f2:9f:
b2:12:65:3d:d3:3e:4d:6a:0b:91:4a:0c:a9:91:33:f0:5e:04:
98:88:41:44:8f:50:18:2a:44:7c:4a:8e:ad:d2:cd:bd:27:14:
77:2b:24:6c:ba:8b:e6:b9:70:d6:55:39:00:e4:b8:9c:5a:4e:
a0:9c:aa:d0:52:8f:7f:ac:d8:8c:0a:08:a0:d3:90:a5:5d:47:
2b:03:03:b7:2f:82:82:52:04:4c:0c:18:7c:25:ee:19:fc:92:
86:cf:5c:a6:e7:5e:2a:63:c4:88:a9:7e:35:1b:ff:7d:87:7b:
6f:bd:6e:89:45:a9:d0:27:68:81:4d:09:59:c7:ed:d7:2f:fd:
4c:ca:c4:9d:76:bc:5f:3d:e6:b9:d6:d1:8a:52:ec:24:5e:b5:
c0:0e:9d:e9:ca:4d:2c:ef:9d:18:35:9b:be:67:53:52:d5:ee:
33:ce:be:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org