Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z1WJ2KaGuxrM-V74djy4_7MyZBc.roa
File: z1WJ2KaGuxrM-V74djy4_7MyZBc.roa (raw, json)
Hash identifier: 03d7ymuJcv9fDcnGyf4JNonvsRF20wWk4/cW/1GS0bE=
Subject key identifier: CF:55:89:D8:A6:86:BB:1A:CC:F9:5E:F8:76:3C:B8:FF:B3:32:64:17
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AECD948
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z1WJ2KaGuxrM-V74djy4_7MyZBc.roa
Signing time: Sat 01 Jan 2022 13:57:49 +0000
ROA not before: Sat 01 Jan 2022 13:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28982
IP address blocks: 82.143.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720165192 (0x2aecd948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf5589d8a686bb1accf95ef8763cb8ffb3326417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:9e:9a:b6:a7:5f:bf:c4:2c:a4:80:52:e4:
63:e6:4a:34:a8:80:92:f6:3b:cc:eb:fd:2b:cc:1f:
a9:fb:c6:90:82:4b:68:bf:1b:80:10:50:f1:c6:a6:
21:30:b2:4c:61:4f:7a:47:5c:66:6e:22:dc:53:d2:
47:0f:b8:58:59:e7:da:3b:32:5b:58:ef:f3:5f:8e:
b0:93:21:e8:fa:14:c3:75:7c:de:9a:c6:04:8f:89:
9e:ce:02:a1:b9:4c:05:5f:67:54:e2:65:52:91:8b:
26:97:cc:d3:f0:3a:6b:f5:66:cd:11:47:08:76:5e:
3d:58:5e:a3:9e:d4:2f:f6:ca:22:5b:4e:c1:ea:fd:
1a:f3:2c:29:bd:01:37:b4:12:70:91:49:55:61:f8:
cb:e3:99:06:9a:64:d4:94:ae:13:83:13:43:d3:8d:
89:30:db:83:a6:44:71:1a:f4:85:50:86:69:4e:3d:
41:e1:0a:c7:14:db:d1:bb:8e:cf:7a:aa:de:99:5e:
04:c0:21:0a:ea:31:bb:0d:a8:72:68:92:27:da:af:
46:68:d6:63:05:06:ce:37:0d:d4:8d:03:03:47:31:
aa:34:57:c9:fc:cb:7f:c8:e9:25:af:f4:19:db:c2:
f6:f0:67:ed:30:22:23:9b:c6:5e:82:4e:6e:c3:7e:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:55:89:D8:A6:86:BB:1A:CC:F9:5E:F8:76:3C:B8:FF:B3:32:64:17
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z1WJ2KaGuxrM-V74djy4_7MyZBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.143.128.0/18
Signature Algorithm: sha256WithRSAEncryption
54:40:cd:15:79:5b:71:4f:d4:df:eb:f6:0f:de:a9:44:ef:11:
c1:d5:74:51:56:fc:7c:09:9c:cc:c3:dc:85:68:a9:3f:24:ea:
f6:f7:81:89:e2:9f:24:0c:0b:f2:96:6f:01:24:03:1c:fc:ec:
8f:eb:16:a3:ac:ee:78:d5:3e:66:d7:2a:35:31:4d:1d:a8:09:
a8:c5:45:01:51:41:71:28:21:53:2e:bc:2e:6a:75:e7:f8:f8:
06:72:bc:79:f5:9a:4c:4c:16:ff:b3:17:57:59:83:30:ed:83:
59:2d:c1:ce:65:64:b8:64:b2:9d:22:78:26:8f:77:5a:c4:c2:
26:c0:e6:9e:9b:5a:b7:be:d2:ab:48:73:bf:ff:02:5e:d4:b9:
6f:d9:21:ce:59:78:9c:ba:c2:b0:50:44:39:d2:0f:f0:84:d0:
eb:18:68:ce:07:22:ab:59:6f:b1:63:a2:d9:90:a1:18:ad:ad:
5a:f2:c7:e7:27:a7:1c:99:7b:d9:21:d8:f6:14:4f:a8:f4:54:
d5:16:74:0d:f5:09:cd:7d:b2:f7:fa:fc:0b:b1:f5:39:db:64:
de:bf:a5:77:ac:3f:ca:72:67:b8:b2:a5:40:02:ea:2f:c8:24:
c6:31:5b:97:ea:96:15:78:74:25:c1:61:1f:0e:7d:97:4d:d3:
ad:db:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org