Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZDOjZrvphpsGpKu4s04ec8CcCyw.roa
File: ZDOjZrvphpsGpKu4s04ec8CcCyw.roa (raw, json)
Hash identifier: zZBV8NNNKNN20Vr3fjncqhg2I2jjpkr8N8HWFd2bWBg=
Subject key identifier: 64:33:A3:66:BB:E9:86:9B:06:A4:AB:B8:B3:4E:1E:73:C0:9C:0B:2C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0184A58B41251EF09D54DC0487005246DFAC
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZDOjZrvphpsGpKu4s04ec8CcCyw.roa
Signing time: Wed 23 Nov 2022 17:31:17 +0000
ROA not before: Wed 23 Nov 2022 17:31:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54641
IP address blocks: 91.186.204.0/22 maxlen: 24
91.186.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a5:8b:41:25:1e:f0:9d:54:dc:04:87:00:52:46:df:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 23 17:31:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6433a366bbe9869b06a4abb8b34e1e73c09c0b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:21:2c:cc:bd:9f:8a:0d:de:03:f0:18:ae:
6a:83:e2:c8:f7:96:81:ac:25:93:12:4e:c4:fe:2a:
8b:b0:29:3d:df:9c:d3:cf:52:76:9b:c6:c0:47:da:
5b:36:5c:a4:d9:89:2e:74:93:2c:98:70:5a:4a:56:
fa:60:04:93:74:1c:2d:be:eb:77:16:58:d6:88:eb:
42:b0:4b:d2:29:6b:29:a0:76:7d:e1:a1:30:5d:4e:
86:b3:6c:dd:c3:42:59:a5:e0:68:8f:2a:35:7a:0e:
f2:2e:de:66:a3:e9:6a:a1:e8:3b:11:69:55:83:cf:
b4:85:fe:79:c8:77:35:1d:84:38:8b:c3:3b:9c:d3:
1d:20:b2:da:97:f1:83:0b:5c:0a:33:32:3f:81:f3:
4b:d6:34:c3:06:13:90:24:66:19:39:2c:0d:0e:a7:
0e:95:4d:21:34:89:2d:94:31:97:f0:8f:bf:4d:4e:
ee:7b:0b:3c:d0:3b:57:95:c7:91:05:08:5b:68:e9:
fc:66:0b:9f:b3:9b:b6:db:a2:41:5c:47:bf:e9:7c:
ae:f6:8e:74:36:3e:98:71:d0:93:25:7a:e1:38:59:
0a:23:ee:3f:b4:5a:a7:88:4a:a2:ea:f3:a3:17:de:
5c:38:37:08:61:88:46:b4:4e:96:ba:3a:8b:1b:63:
15:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:A3:66:BB:E9:86:9B:06:A4:AB:B8:B3:4E:1E:73:C0:9C:0B:2C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZDOjZrvphpsGpKu4s04ec8CcCyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.204.0-91.186.211.255
Signature Algorithm: sha256WithRSAEncryption
19:ee:1f:fa:c0:74:b0:b6:fb:2d:d0:1b:47:11:e1:4f:ae:8e:
14:dc:00:2e:1b:96:56:13:92:e9:5f:cc:75:77:c6:48:4a:09:
6f:4c:31:e6:7e:ae:78:3b:90:f2:91:78:7b:8e:58:af:cd:6f:
57:62:c5:cf:4e:77:bc:58:81:e8:92:1c:a4:13:27:94:46:76:
4d:5f:29:94:26:8b:70:2c:43:d3:82:7e:a9:d3:45:e9:46:d2:
66:16:5a:98:3f:ec:00:13:2a:f3:eb:a5:59:97:dc:93:8c:e4:
b4:88:5f:57:13:36:48:1a:46:9c:33:db:16:f4:f7:e8:e3:15:
2e:45:c9:74:0f:25:d2:08:32:86:fc:24:8a:42:5d:66:03:f2:
e6:a5:1a:4f:d2:92:b7:c9:17:e7:61:36:86:03:fe:46:1a:ec:
4b:0e:75:20:b4:48:0f:12:7e:9a:8a:34:23:ab:a4:e0:85:99:
34:c7:b9:1b:0f:88:d1:5a:6f:fd:5c:61:4d:d1:ac:d5:8c:fe:
0e:6c:c3:4e:7a:c2:72:b5:07:0f:24:77:45:15:77:bc:59:44:
0f:a8:49:c5:db:58:47:f1:99:45:10:3e:c3:85:51:3a:be:18:
51:a5:36:88:da:b4:2a:9b:c3:89:d2:01:5f:46:4b:0e:3f:07:
7f:a2:19:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org