Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/ZF3q-OBTxXx_fN2dIeDSqOiAvIA.roa
File: ZF3q-OBTxXx_fN2dIeDSqOiAvIA.roa (raw, json)
Hash identifier: tt4MObke4dcKobF4lV1RQoT2YGlAcWXrsXbhF3GfizM=
Subject key identifier: 64:5D:EA:F8:E0:53:C5:7C:7F:7C:DD:9D:21:E0:D2:A8:E8:80:BC:80
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 06ADDE88
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/ZF3q-OBTxXx_fN2dIeDSqOiAvIA.roa
Signing time: Sat 01 Jan 2022 13:05:55 +0000
ROA not before: Sat 01 Jan 2022 13:05:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29075
IP address blocks: 91.226.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112057992 (0x6adde88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Jan 1 13:05:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=645deaf8e053c57c7f7cdd9d21e0d2a8e880bc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:db:5c:b0:fc:5d:92:8d:e7:c1:9d:85:b5:
99:95:66:4b:d5:59:33:37:ff:d5:fa:4c:c2:fc:3a:
ae:16:7d:54:f7:24:ff:2a:62:e2:3f:75:fc:c9:8a:
a7:bf:e4:b9:4c:7d:64:28:87:f7:1d:e6:03:55:2a:
b0:d3:51:63:4c:92:a9:ba:f3:7f:37:70:a3:92:32:
5f:8d:32:b2:09:65:9b:5f:c1:ac:f9:6f:ec:1d:2e:
31:69:f2:10:77:c1:43:2f:95:16:0b:da:e8:30:16:
85:d2:8c:e5:2c:7a:dd:16:7e:ee:db:c8:d7:db:60:
e5:6a:ab:b5:8e:35:6d:83:e5:30:ef:be:ec:d4:27:
2a:a1:9f:fe:56:79:ca:89:e3:fb:50:69:0b:92:94:
cf:ae:13:eb:a3:6d:70:c8:d1:44:62:19:03:8b:cc:
b5:25:e3:ee:bc:ac:83:81:fd:91:1e:af:54:6e:b8:
a1:2a:17:26:af:88:50:c0:1f:9f:a3:e0:16:9b:e6:
4c:a5:f9:b4:9f:c3:7a:fe:64:53:fd:e6:f7:26:f3:
17:b0:70:6e:62:7a:eb:36:1f:bd:d2:e1:cf:dc:ba:
bc:f8:01:d9:6e:13:23:ba:06:bf:c8:c1:17:13:0b:
8f:aa:35:c9:fb:92:8e:6b:2c:d1:13:22:2d:be:3f:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5D:EA:F8:E0:53:C5:7C:7F:7C:DD:9D:21:E0:D2:A8:E8:80:BC:80
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/ZF3q-OBTxXx_fN2dIeDSqOiAvIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.98.0/24
Signature Algorithm: sha256WithRSAEncryption
36:53:88:45:26:d7:bd:0c:f8:2f:f3:ab:ab:9a:ff:95:53:46:
12:52:32:ed:4d:4d:7d:72:66:09:1c:d7:bd:c2:b8:aa:a9:c8:
c4:f7:d9:7a:44:d1:ce:bb:da:0c:43:bb:0d:df:d7:b5:af:2c:
28:bc:48:32:1c:44:09:84:8b:1f:8e:b3:49:89:bf:e9:ae:d3:
88:10:d2:3d:55:9c:b5:bb:e4:bb:52:6a:55:57:a3:e7:86:06:
ab:6a:bd:f8:be:3a:1d:65:d7:06:9c:35:d1:1c:90:19:a2:8f:
68:cf:73:56:c3:94:c7:b4:62:bd:b8:88:bc:aa:0d:fe:93:d5:
11:28:e6:8c:34:a7:3c:48:48:83:6d:78:ee:e1:cd:e7:eb:c9:
33:e0:c9:e2:36:2d:12:82:20:3c:5a:4b:11:6a:bf:78:01:86:
4a:da:0a:fb:b9:e8:03:2e:71:e1:12:08:cb:4f:9e:c6:35:c9:
ae:06:ed:96:14:64:88:be:6a:ff:34:30:35:04:bb:33:ce:61:
e0:75:df:80:b6:1d:ab:0f:0f:ea:70:1f:2a:6e:d4:9e:1e:99:
63:52:37:6e:e6:9c:72:f7:9d:ff:8e:0c:b7:6f:23:b4:e4:15:
2f:06:a4:db:e7:e4:75:c7:f6:1f:c3:67:13:b5:22:06:bc:27:
b7:be:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:12 2025 by rpki-client