Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/ZyFJbcxV_RVaM0a2DRWrzmV5-eQ.roa
File: ZyFJbcxV_RVaM0a2DRWrzmV5-eQ.roa (raw, json)
Hash identifier: W/Gol+w4xvM5tFGfT4DBL1+/3ZY9s/p8ikf10DDbKHU=
Subject key identifier: 67:21:49:6D:CC:55:FD:15:5A:33:46:B6:0D:15:AB:CE:65:79:F9:E4
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 01848021B66116DD49A6B2CDDE8AFD60EC88
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/ZyFJbcxV_RVaM0a2DRWrzmV5-eQ.roa
Signing time: Wed 16 Nov 2022 11:10:03 +0000
ROA not before: Wed 16 Nov 2022 11:10:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 91.206.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:21:b6:61:16:dd:49:a6:b2:cd:de:8a:fd:60:ec:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Nov 16 11:10:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6721496dcc55fd155a3346b60d15abce6579f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:9e:a7:75:4d:e8:b7:f0:52:24:2e:7c:83:
4c:9d:df:5b:be:43:39:44:e5:d4:dd:ea:8f:33:ee:
a7:c0:55:fd:e4:b5:f3:84:c7:da:82:ac:82:e3:a0:
c8:de:f6:df:b8:ee:8f:cf:63:c1:3f:35:7c:ca:17:
1e:3f:ee:d2:da:c7:4d:90:b9:2c:8d:e6:84:01:3e:
81:30:86:58:64:5f:e1:21:09:70:1b:70:91:96:59:
9f:99:55:de:fd:4c:90:f7:dd:c8:80:55:70:18:c1:
9e:b3:ec:1b:e9:49:d9:98:02:ad:d5:96:73:87:7d:
ef:aa:eb:c2:a8:92:2d:a3:74:4b:1d:a4:0a:59:ac:
c5:6c:1c:99:da:af:84:29:b3:af:f6:54:38:31:8a:
b6:31:ee:41:14:eb:13:2d:61:d9:c2:9f:75:42:77:
ed:2d:48:fc:1e:08:1d:5d:af:d7:a9:d3:50:8a:dc:
fd:23:74:8d:17:c1:04:e8:ad:92:eb:26:6f:f2:cf:
0b:20:97:e3:cf:79:92:ff:cf:76:aa:ac:06:ea:a9:
f0:7d:ec:0f:73:f4:00:f9:f8:dc:da:61:8e:76:28:
2c:0b:85:0e:33:2c:2e:45:86:79:bf:a6:40:a1:53:
f4:d8:3e:c0:14:1a:43:08:dc:7c:e8:43:f4:ee:8f:
96:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:49:6D:CC:55:FD:15:5A:33:46:B6:0D:15:AB:CE:65:79:F9:E4
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/ZyFJbcxV_RVaM0a2DRWrzmV5-eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:21:06:a0:21:a3:49:76:df:56:41:d8:2a:ad:7c:9f:f0:51:
21:46:bc:83:7c:e7:b5:7b:f9:b8:fa:09:76:d4:06:62:66:c8:
1c:69:0d:c8:66:b7:62:39:a2:8a:78:80:32:d3:c3:98:99:a7:
fa:5a:a7:1f:f2:75:83:04:d4:c5:e6:4a:ad:56:c8:2b:e7:73:
72:dd:0e:f6:b8:2f:65:25:25:d4:d6:47:1d:61:d3:cd:77:bb:
4b:7c:54:9c:0c:a1:3c:21:40:c7:8c:da:b0:90:8b:d7:15:e9:
06:0b:58:6f:33:21:eb:98:e0:61:96:ea:68:55:20:74:76:7d:
15:9d:1c:f4:30:89:da:28:fa:c1:b9:e9:a2:c9:03:ba:90:f8:
b0:dd:a4:bb:d8:b4:2b:63:79:28:4f:36:44:34:2d:71:81:b0:
99:67:1c:99:1d:cd:35:f6:2e:a0:45:72:68:4e:fd:ad:14:bb:
ca:87:ed:97:87:16:c7:81:83:28:e2:c2:a9:51:e3:54:4f:fb:
89:82:e6:10:52:ad:1b:08:01:f6:fd:43:c9:e5:90:e3:1a:56:
ae:bb:c8:57:4e:2b:77:54:47:b0:1c:7d:d2:67:9c:3f:37:71:
fe:8e:79:b9:05:1b:70:85:15:45:cf:13:ad:59:9f:de:b5:f4:
d5:43:2e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org