Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/ZhjfGnaiNEiMtVbSVX5-5BQdSF8.roa
File: ZhjfGnaiNEiMtVbSVX5-5BQdSF8.roa (raw, json)
Hash identifier: IdgEs6TB/7RcaTgLvpbQ8V6wfxhIEp+ujwF1E49p6hU=
Subject key identifier: 66:18:DF:1A:76:A2:34:48:8C:B5:56:D2:55:7E:7E:E4:14:1D:48:5F
Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial: 01A613
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/ZhjfGnaiNEiMtVbSVX5-5BQdSF8.roa
Signing time: Thu 12 May 2022 10:21:01 +0000
ROA not before: Thu 12 May 2022 10:21:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133199
IP address blocks: 194.41.36.0/24 maxlen: 24
194.41.37.0/24 maxlen: 24
194.41.58.0/24 maxlen: 24
194.41.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108051 (0x1a613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Validity
Not Before: May 12 10:21:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6618df1a76a234488cb556d2557e7ee4141d485f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:40:c9:fc:b6:e8:49:5e:69:17:92:6b:9f:
8e:ce:70:90:af:c5:b1:46:e9:f3:91:12:1c:86:14:
4e:63:ea:23:c3:e7:24:59:57:af:b2:49:38:79:0f:
4b:8f:6c:27:59:41:2b:9e:11:3f:18:9d:b6:a8:77:
dc:6e:eb:b2:7f:17:cf:f0:3e:f0:68:18:35:9b:78:
e8:ca:60:e0:ee:6f:df:f1:97:1c:8e:98:5c:40:94:
8a:25:71:35:7c:b4:2b:69:d4:59:81:ed:d4:07:61:
45:05:c0:2a:6e:32:26:5d:06:3e:7d:98:9d:89:51:
1f:c3:c0:31:16:65:69:ab:f3:8a:59:c9:f1:69:8d:
2e:c3:3e:4f:5e:22:35:f9:c0:07:df:41:54:eb:9f:
4f:ba:97:5e:98:c8:36:77:5e:31:e2:98:18:71:21:
fc:6d:bb:b6:af:88:4d:80:72:49:fa:e6:ae:0e:39:
e1:f1:af:6a:35:0f:e3:0c:3b:6d:43:e1:19:39:8e:
43:af:6c:85:42:51:7f:6d:a5:9e:9a:e4:bf:7f:d3:
82:aa:a4:62:90:e7:85:b9:1a:52:6e:ee:5c:36:1d:
5e:85:27:52:cc:9e:88:a1:7c:9d:b1:6f:cb:e3:bf:
3b:1f:70:77:3a:07:77:99:7b:a3:0e:3a:43:d3:54:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:18:DF:1A:76:A2:34:48:8C:B5:56:D2:55:7E:7E:E4:14:1D:48:5F
X509v3 Authority Key Identifier:
keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/ZhjfGnaiNEiMtVbSVX5-5BQdSF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.36.0/23
194.41.58.0/23
Signature Algorithm: sha256WithRSAEncryption
32:26:a0:72:0e:a1:2c:45:6a:b8:b7:94:70:da:9a:0d:15:16:
2d:b2:21:73:07:e0:1a:5c:93:36:4a:33:80:94:45:b9:f0:89:
81:63:ab:be:3a:33:81:2b:b7:ce:1d:00:39:27:c4:7d:6b:ee:
8b:3b:23:08:ae:db:2a:f2:1b:a0:ad:e2:ad:62:c6:8d:b9:79:
78:09:d5:4f:10:03:66:90:b6:ff:4f:1f:74:21:4a:88:53:5c:
83:d3:cb:94:6a:49:ca:d1:e9:6a:c6:9c:1c:2d:68:13:30:21:
b1:e2:bc:18:8b:3f:c7:68:f5:bf:5e:25:d3:e3:5f:d7:05:9d:
77:6c:81:68:9d:86:6c:29:62:02:40:a9:2e:bc:77:31:99:20:
86:3c:31:b0:e1:fb:09:7b:34:ff:8d:68:47:1e:ce:0b:68:aa:
5e:db:62:6a:4d:f3:9e:37:ec:29:96:f3:d5:9b:15:32:16:16:
e7:20:01:08:27:a5:e8:df:2d:e8:ef:2d:b3:5f:0c:f9:7e:17:
af:2e:31:95:f6:8f:cf:69:40:ff:f4:fa:2d:4d:b6:4f:6b:7f:
8d:a4:44:86:23:eb:88:94:fe:fa:5f:9c:79:49:d3:34:00:f4:
ed:11:a2:1c:c3:bf:e1:35:6b:47:96:29:e7:4b:ce:bb:d3:93:
77:89:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:36 2024 by rpki-client on console-fra.rpki-client.org