Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/ZPF_5JbPGdEMU7xRRt5zgObJJRk.roa
File: ZPF_5JbPGdEMU7xRRt5zgObJJRk.roa (raw, json)
Hash identifier: 8ox1yuUCUWiC01IZ8+VvZL6vaLQv0V1fJ+z7FVkBzUo=
Subject key identifier: 64:F1:7F:E4:96:CF:19:D1:0C:53:BC:51:46:DE:73:80:E6:C9:25:19
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0A79CCE9
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/ZPF_5JbPGdEMU7xRRt5zgObJJRk.roa
Signing time: Sat 01 Jan 2022 08:57:08 +0000
ROA not before: Sat 01 Jan 2022 08:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 91.151.93.0/24 maxlen: 32
213.142.149.0/24 maxlen: 32
213.142.156.0/24 maxlen: 32
91.151.90.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175754473 (0xa79cce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 08:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64f17fe496cf19d10c53bc5146de7380e6c92519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:9d:cf:7b:46:bc:f1:81:17:a9:67:f9:4a:
f2:31:5c:f9:a8:5a:a3:1c:db:d6:70:78:14:6d:7b:
3f:21:4f:0b:e6:a3:32:18:91:2c:40:4e:87:5d:8e:
7c:0e:aa:5b:95:b3:09:75:ff:c5:5c:bf:e9:6d:a9:
ae:ff:48:5e:11:2a:23:77:e5:2f:11:dd:ac:87:75:
0d:81:3d:91:72:b5:0d:d8:e3:40:f6:f8:47:a1:1f:
3a:eb:c7:04:91:ab:42:85:87:43:85:69:d3:fc:03:
73:57:7b:87:ca:01:66:af:12:3d:74:e6:4c:26:e4:
76:bc:2c:f2:9a:26:13:a4:c0:a0:e1:ac:d2:bf:79:
c6:4d:09:60:3a:59:e3:cc:58:db:06:4c:b4:92:38:
e0:fd:c1:e0:28:8a:38:25:ac:37:0a:45:7b:82:13:
8f:ff:35:68:14:3a:4e:ea:d9:4b:8d:be:dd:0a:4f:
3d:ac:7a:69:f8:c9:99:34:5f:73:17:ae:5a:07:5b:
a4:25:32:88:b2:ff:f3:5e:51:12:2f:d4:25:b1:a9:
87:42:fe:e6:7b:54:e3:75:22:cb:a1:3b:66:d5:a5:
06:87:d8:6b:4b:9c:77:14:5f:d3:5a:07:70:8f:e2:
2f:e8:94:c0:ba:8b:b1:e8:51:19:0f:c5:e9:6a:a9:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:7F:E4:96:CF:19:D1:0C:53:BC:51:46:DE:73:80:E6:C9:25:19
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/ZPF_5JbPGdEMU7xRRt5zgObJJRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.90.0/24
91.151.93.0/24
213.142.149.0/24
213.142.156.0/24
Signature Algorithm: sha256WithRSAEncryption
10:41:5f:73:f0:69:dc:1e:00:02:12:6e:6e:41:1a:0e:58:e5:
03:a9:b3:80:04:57:da:32:30:0a:76:94:89:5a:01:1e:2e:74:
83:75:43:08:db:f3:58:0f:b0:f7:59:c4:62:43:ad:72:6d:19:
ba:4a:e0:2c:a5:f2:6e:1b:05:bc:89:d0:24:77:98:0d:2f:86:
b0:dd:9a:5e:c3:9e:ef:ba:f2:60:c8:1e:ce:1a:d8:f7:ab:bc:
e1:60:0a:99:0f:a4:56:93:a0:7d:e8:07:d0:71:9d:a7:70:0b:
31:14:f4:1f:7e:ba:4d:8b:6c:d7:cc:b6:b0:f9:e9:87:ca:2b:
cd:8a:8b:71:f2:29:90:ba:ec:03:76:5e:6c:a8:74:de:6b:9a:
1d:d8:cf:b3:b8:06:e9:e2:5e:2d:a1:85:c5:12:3d:d6:5a:72:
45:a2:ac:ee:a4:94:f8:65:09:55:2f:4a:55:c4:f6:a5:03:85:
94:8e:bc:0b:5b:13:eb:4b:19:ec:4f:12:c8:85:bb:52:c5:60:
81:6a:7f:7f:6c:44:36:12:c2:a1:bb:95:24:86:10:b8:4a:47:
be:e8:95:d0:0d:d2:1e:3f:eb:fb:a4:64:3b:5a:f6:40:0b:f0:
b6:71:52:85:74:4c:25:25:c3:03:a6:59:a7:b5:17:51:63:eb:
34:d6:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:38 2024 by rpki-client on console-ams.rpki-client.org