Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/H_ZRdxC12wfskofgUMUO--NTBZU.roa
File: H_ZRdxC12wfskofgUMUO--NTBZU.roa (raw, json)
Hash identifier: vs3VpNE9msMFN8qOF/5hn1jKRb3FVBEBKUpnJkDDyDs=
Subject key identifier: 1F:F6:51:77:10:B5:DB:07:EC:92:87:E0:50:C5:0E:FB:E3:53:05:95
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01861C9CE668B195B354B955889B3A8598F6
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/H_ZRdxC12wfskofgUMUO--NTBZU.roa
Signing time: Sat 04 Feb 2023 13:28:10 +0000
ROA not before: Sat 04 Feb 2023 13:28:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50204
IP address blocks: 91.197.236.0/22 maxlen: 24
195.214.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:9c:e6:68:b1:95:b3:54:b9:55:88:9b:3a:85:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 4 13:28:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ff6517710b5db07ec9287e050c50efbe3530595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:cc:c2:87:22:fb:13:41:4b:df:6e:37:91:
cf:a6:3c:b3:88:eb:49:85:88:09:b9:fd:61:e4:38:
e2:9c:09:bb:94:ed:c3:ba:6a:6f:f0:91:90:22:a9:
d5:68:37:fa:69:8f:c5:5e:49:37:6b:9c:99:c6:05:
dc:56:2e:0e:53:a5:c5:26:f8:c0:4e:1e:a2:c9:f7:
36:3b:4c:14:53:63:bb:20:33:3d:5b:e0:67:72:85:
2c:6c:1f:34:0d:f6:1a:e2:32:62:3f:a6:c4:40:bd:
fa:2f:42:08:6a:ff:58:aa:45:33:a1:b9:99:43:ad:
46:5f:70:39:b7:d7:0a:97:9c:e4:fc:20:31:f6:62:
7c:a8:ae:09:91:d7:97:be:53:e7:a0:8c:d0:fb:28:
10:6c:54:b5:fe:1f:d1:da:48:f4:42:2e:c3:36:9a:
00:3c:53:b5:a3:5d:ba:05:23:41:21:88:cd:76:a5:
69:4f:e0:21:ba:f2:86:2e:b8:7f:42:13:21:f8:b6:
73:cc:06:01:24:16:45:21:cd:de:cb:ed:2a:59:7d:
c8:a5:6b:81:c9:cc:97:af:51:d2:2a:91:bb:ea:77:
8a:f8:d2:97:fc:4e:25:86:fe:b6:51:ad:c1:9e:72:
59:0a:8d:e8:40:07:ef:87:5e:a6:d8:b3:1e:e9:57:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:51:77:10:B5:DB:07:EC:92:87:E0:50:C5:0E:FB:E3:53:05:95
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/H_ZRdxC12wfskofgUMUO--NTBZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.236.0/22
195.214.236.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ea:92:a9:7f:8f:1f:2e:15:68:e0:68:ab:62:48:01:49:2b:
08:0e:17:3e:ef:73:33:59:6c:67:9d:b2:97:eb:af:4a:a6:47:
94:07:d0:71:47:c7:a8:ae:54:5b:15:fb:b1:0a:16:c8:7e:61:
ae:61:b3:fb:17:89:4b:ce:08:30:74:11:6d:6d:03:48:4d:80:
96:4e:d0:ef:db:ab:3e:63:04:8d:ae:68:d4:81:55:67:7d:5b:
04:6f:f2:02:5b:34:a1:bc:b2:74:9d:fb:3a:16:9c:80:5d:bf:
0b:e8:8d:4b:50:ec:9a:f6:0f:c3:f7:53:fd:ac:7e:06:fe:c2:
59:f5:31:cd:70:23:7d:84:58:99:7b:d1:e1:c7:3a:d7:6c:48:
b7:dd:dd:32:a9:de:bb:a6:94:c5:ab:eb:ce:d2:14:8f:35:e3:
f4:91:9f:fe:91:de:49:34:11:f2:79:14:44:d9:af:8a:ba:a1:
11:ea:28:03:d8:95:f6:0d:70:a8:21:7d:9e:0e:c2:8a:e5:ed:
11:7c:fc:f7:92:0c:3b:17:39:2f:e4:e5:b4:c1:41:02:4d:95:
bf:10:e5:60:47:64:ee:93:55:2a:32:49:ce:0f:a8:e8:f0:9d:
2f:0a:f2:93:fb:1a:59:8e:b0:fb:fe:7a:3d:c4:5d:98:10:34:
45:3b:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:34 2025 by rpki-client