Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/ZXmu84sGr5WoCUAbo8N-ck2Fl94.roa
File: ZXmu84sGr5WoCUAbo8N-ck2Fl94.roa (raw, json)
Hash identifier: lKQ5WMBz81KmXKc0OmIs9qA81pqYDNahzB4bcge0+YA=
Subject key identifier: 65:79:AE:F3:8B:06:AF:95:A8:09:40:1B:A3:C3:7E:72:4D:85:97:DE
Certificate issuer: /CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Certificate serial: 015F36D9
Authority key identifier: D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/ZXmu84sGr5WoCUAbo8N-ck2Fl94.roa
Signing time: Sat 01 Jan 2022 06:01:35 +0000
ROA not before: Sat 01 Jan 2022 06:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44730
IP address blocks: 91.213.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23017177 (0x15f36d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d55d3921850a5fff07eca260a36ef92101f2d85c
Validity
Not Before: Jan 1 06:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6579aef38b06af95a809401ba3c37e724d8597de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:af:e1:79:02:91:2c:e3:53:19:c1:17:0f:
6e:0e:2b:97:8f:13:86:33:61:6d:4c:43:eb:25:71:
68:ee:a5:ba:af:2a:1d:e7:d2:35:39:0b:61:bc:37:
18:c5:fd:e6:b9:a9:49:3f:1b:53:29:eb:3f:d7:53:
6c:09:bc:68:34:92:92:d4:bb:3f:5e:70:f4:63:35:
7d:c6:9e:c7:94:ff:79:31:02:ea:fa:90:47:de:66:
46:c6:62:6e:7a:1b:2f:bc:1a:a1:5d:38:54:97:9d:
e5:d7:bf:ee:c8:d8:d6:82:27:3b:9d:27:bb:12:fd:
1d:57:44:c3:95:02:4c:a3:8e:60:74:45:99:05:01:
b6:2a:fc:23:41:1e:11:5a:1b:a6:c4:2b:3d:15:e9:
2c:14:4d:f2:58:ec:db:45:ab:fd:a4:b6:d2:42:20:
07:40:af:6c:11:64:57:ca:fe:0e:d5:9f:1f:43:21:
62:50:83:07:92:37:de:00:bf:c3:7a:98:b4:33:e0:
4f:09:f2:a1:b1:b6:8f:06:bd:a5:63:ac:ca:dc:6f:
6c:2c:ed:70:01:c6:ae:55:f9:38:b3:3d:c6:0a:7e:
57:75:61:52:c1:82:30:1e:5a:44:0e:11:8c:91:b4:
57:4e:48:4f:71:c5:ae:57:82:88:24:33:82:ec:34:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:AE:F3:8B:06:AF:95:A8:09:40:1B:A3:C3:7E:72:4D:85:97:DE
X509v3 Authority Key Identifier:
keyid:D5:5D:39:21:85:0A:5F:FF:07:EC:A2:60:A3:6E:F9:21:01:F2:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V05IYUKX_8H7KJgo275IQHy2Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/ZXmu84sGr5WoCUAbo8N-ck2Fl94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dd1331-622a-4848-b340-d3163e9b0136/1/1V05IYUKX_8H7KJgo275IQHy2Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:af:0b:03:0a:20:52:82:cf:71:9a:e4:74:c1:7d:ce:82:24:
6b:ed:c5:0d:a8:ce:52:06:75:6b:bd:9f:58:63:32:f5:9b:c8:
5c:7c:5b:4c:a3:f9:66:28:eb:33:5d:d3:61:c2:a2:36:37:d5:
34:e4:39:0e:b3:29:1e:b5:bf:aa:22:cf:84:89:40:97:70:25:
e8:0d:49:c7:e6:d5:69:97:f9:78:69:59:c1:69:83:c7:39:bf:
a5:10:c5:82:df:1f:18:fc:6d:a9:d2:60:18:d6:b2:9c:de:1d:
33:6a:3a:3f:f5:c1:eb:42:17:96:bf:1b:8f:9f:02:3c:9d:2c:
85:ec:d0:3d:f9:7b:a8:fc:f2:dd:0b:87:48:01:05:52:8b:ef:
42:db:91:88:9e:eb:db:39:03:f5:12:d9:3b:a4:25:09:4c:e4:
5d:f6:34:83:b0:76:cd:d5:cc:3b:15:0d:e7:7c:7b:82:fe:70:
0a:53:ee:30:40:47:ee:26:6e:3b:e3:d5:71:f9:0e:19:f3:16:
6c:12:a0:7a:97:a2:25:5f:55:72:c2:4a:4f:05:75:79:57:18:
4d:01:80:e0:32:dd:21:c6:8a:bf:67:f5:32:92:fe:74:ce:c0:
08:28:33:43:de:79:cf:1b:df:6c:c9:e2:00:ef:c7:4c:00:97:
5f:53:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:55 2023 by rpki-client on console-fra.rpki-client.org