Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/ZtqoJHVg6pwdrSeNXkScCpHzhek.roa
File: ZtqoJHVg6pwdrSeNXkScCpHzhek.roa (raw, json)
Hash identifier: cvuYoNDuq2qoCJ0F2HknmaKqqLoIZD2rjloXbhO6Gf0=
Subject key identifier: 66:DA:A8:24:75:60:EA:9C:1D:AD:27:8D:5E:44:9C:0A:91:F3:85:E9
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 057B46E5
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/ZtqoJHVg6pwdrSeNXkScCpHzhek.roa
Signing time: Sat 01 Jan 2022 15:59:57 +0000
ROA not before: Sat 01 Jan 2022 15:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206314
IP address blocks: 91.226.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91965157 (0x57b46e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Jan 1 15:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66daa8247560ea9c1dad278d5e449c0a91f385e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:f2:e6:ef:37:5a:88:57:19:4b:6f:80:91:
bd:fb:a1:c1:f7:d8:86:e6:44:ed:09:65:22:f5:55:
45:0a:4b:2c:da:0a:67:94:42:45:2b:33:07:a5:bc:
07:f9:a6:3f:58:b4:1e:73:f5:03:4c:e1:cd:b7:e4:
42:bc:c2:4c:df:90:69:af:8a:28:97:b8:a3:92:2d:
51:3c:23:04:6e:e9:d3:e9:c0:ec:59:e1:7a:d3:aa:
a9:68:e4:5b:b4:35:25:81:fe:1e:cd:98:30:de:c1:
ce:a6:e8:02:f8:0f:43:3e:58:29:4c:41:17:93:12:
ab:c4:01:95:39:f7:8b:c2:32:16:50:02:64:5c:21:
9a:19:e2:33:f1:39:97:98:7b:b6:8e:2c:c1:2f:4f:
89:49:a6:71:fd:27:a8:08:3f:75:44:37:a9:5e:7e:
e3:8f:c4:1c:f7:7f:31:92:55:f0:c2:2b:2b:59:ea:
bd:ac:eb:d8:fc:2a:74:17:4e:24:50:99:d9:c0:2b:
d9:6f:45:9e:3e:74:81:c7:eb:3a:6e:47:60:b0:1a:
5e:f5:8f:51:16:8e:15:af:45:50:fa:7f:23:62:12:
53:61:75:5f:6a:75:ca:4d:cd:c1:e7:00:7b:29:e4:
70:a2:70:97:79:96:27:ec:e9:05:e2:d9:14:3c:1f:
30:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:A8:24:75:60:EA:9C:1D:AD:27:8D:5E:44:9C:0A:91:F3:85:E9
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/ZtqoJHVg6pwdrSeNXkScCpHzhek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:75:b1:b0:bd:70:20:df:89:67:78:42:4a:bf:da:21:4f:85:
c8:1c:89:ef:1d:26:ba:4a:db:d7:a3:96:08:d1:a8:46:bd:cc:
22:d7:e2:e0:63:1b:b2:50:b3:0f:da:d3:37:ad:e2:8c:4e:db:
2a:97:0f:68:02:54:5e:22:45:90:96:0e:a5:0a:c2:ea:22:a3:
d1:c4:25:3c:25:0d:a5:91:78:34:b6:33:f0:76:2a:d2:e7:2e:
ee:84:48:f3:f8:f0:19:03:a2:57:6d:5d:c2:14:e6:f6:82:58:
3d:c8:d5:5a:6e:ad:16:03:f0:c9:60:4c:25:4f:b3:cc:d8:95:
ea:ee:65:66:42:5c:d7:77:1f:1e:2c:d7:fd:37:62:75:fb:a7:
78:e3:99:93:3b:49:79:8b:d3:b5:c1:82:36:6d:0c:8f:7d:97:
65:f9:d1:cd:e7:25:b4:c6:e9:8a:77:2b:1b:30:fe:a3:8c:91:
85:9d:5a:6e:2e:e1:40:d5:ef:28:6a:13:8d:8c:53:bb:54:e9:
bc:bb:a6:f0:60:cb:7c:bd:60:da:20:1c:74:9f:03:23:46:28:
a3:89:13:b0:46:f3:3c:97:e9:06:ca:13:b3:be:18:26:85:20:
ac:7f:f2:c2:80:ac:0c:e1:fa:4d:d5:1c:54:50:2e:d5:1e:a2:
d6:7d:be:85
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBXtG5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWQ3ZjgxN2Q3ZTZkZWQ1NmVkZWRjNDQ0ODhjZDQxYzA1MmEwZGM1MB4XDTIyMDEw
MTE1NTk1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjZkYWE4MjQ3NTYw
ZWE5YzFkYWQyNzhkNWU0NDljMGE5MWYzODVlOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL4J8ubvN1qIVxlLb4CRvfuhwffYhuZE7QllIvVVRQpLLNoK
Z5RCRSszB6W8B/mmP1i0HnP1A0zhzbfkQrzCTN+Qaa+KKJe4o5ItUTwjBG7p0+nA
7FnhetOqqWjkW7Q1JYH+Hs2YMN7BzqboAvgPQz5YKUxBF5MSq8QBlTn3i8IyFlAC
ZFwhmhniM/E5l5h7to4swS9PiUmmcf0nqAg/dUQ3qV5+44/EHPd/MZJV8MIrK1nq
vazr2PwqdBdOJFCZ2cAr2W9Fnj50gcfrOm5HYLAaXvWPURaOFa9FUPp/I2ISU2F1
X2p1yk3NwecAeynkcKJwl3mWJ+zpBeLZFDwfMDcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRm2qgkdWDqnB2tJ41eRJwKkfOF6TAfBgNVHSMEGDAWgBT+1/gX1+be1W7e
3ERIjNQcBSoNxTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L190ZjRGOWZtM3RWdTN0eEVTSXpVSEFVcURjVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWEvNGYwNTUxLTY5MjItNDViZi05N2QzLTdjZjlhNWZiNmE5Yy8x
L1p0cW9KSFZnNnB3ZHJTZU5Ya1NjQ3BIemhlay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEv
NGYwNTUxLTY5MjItNDViZi05N2QzLTdjZjlhNWZiNmE5Yy8xL190ZjRGOWZtM3RW
dTN0eEVTSXpVSEFVcURjVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlvi7DANBgkqhkiG9w0BAQsFAAOC
AQEAL3WxsL1wIN+JZ3hCSr/aIU+FyByJ7x0mukrb16OWCNGoRr3MItfi4GMbslCz
D9rTN63ijE7bKpcPaAJUXiJFkJYOpQrC6iKj0cQlPCUNpZF4NLYz8HYq0ucu7oRI
8/jwGQOiV21dwhTm9oJYPcjVWm6tFgPwyWBMJU+zzNiV6u5lZkJc13cfHizX/Tdi
dfuneOOZkztJeYvTtcGCNm0Mj32XZfnRzecltMbpincrGzD+o4yRhZ1abi7hQNXv
KGoTjYxTu1TpvLum8GDLfL1g2iAcdJ8DI0Yoo4kTsEbzPJfpBsoTs74YJoUgrH/y
woCsDOH6TdUcVFAu1R6i1n2+hQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:42 2024 by rpki-client on console-ams.rpki-client.org