Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/VhzKi-d5ZhZT8hiloiETnKotDB0.roa
File: VhzKi-d5ZhZT8hiloiETnKotDB0.roa (raw, json)
Hash identifier: rpHCKsahYVXakntDDhOuTVOoRjFJ8LIHQ74ZWB/lZbM=
Subject key identifier: 56:1C:CA:8B:E7:79:66:16:53:F2:18:A5:A2:21:13:9C:AA:2D:0C:1D
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 446A592B
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/VhzKi-d5ZhZT8hiloiETnKotDB0.roa
Signing time: Sat 01 Jan 2022 03:58:15 +0000
ROA not before: Sat 01 Jan 2022 03:58:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5377
IP address blocks: 193.252.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1147820331 (0x446a592b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=561cca8be779661653f218a5a221139caa2d0c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:8f:df:1e:9c:03:35:4d:2e:47:71:20:a3:
64:0c:67:b5:fc:e7:b7:46:c8:58:5f:3c:0c:ee:4e:
c7:84:f9:ca:61:f1:25:b8:8c:3b:81:56:01:b3:24:
05:64:f8:ef:7f:c6:0b:18:9f:b8:ea:96:ff:62:2a:
82:97:c6:52:5a:5e:9c:23:b2:68:37:ba:2d:11:9e:
62:a2:a6:03:b2:71:79:ed:e6:9f:5f:02:8e:fc:b3:
88:d4:73:99:d9:1a:6f:2c:c2:56:31:7c:ed:0c:3c:
1c:19:86:40:34:5d:02:56:df:da:c7:1e:15:1f:94:
27:00:3e:d5:a4:8b:ed:a2:e5:69:6d:9c:31:a6:48:
aa:c5:00:af:e1:a6:c4:fe:ad:9f:df:3e:58:7c:f6:
5c:36:7f:2a:fd:66:43:14:42:ca:53:0c:ba:13:87:
fc:a7:e0:5e:5a:72:5e:e7:09:38:e2:87:73:db:15:
55:44:83:ea:7b:9f:7a:f8:2a:4e:8a:24:ef:5a:81:
6a:92:30:e3:f0:97:93:c4:f2:e7:3c:2f:e0:75:66:
ca:2d:22:51:7b:d4:03:4c:10:e4:99:72:c7:35:fb:
ad:46:f8:8d:86:d9:76:39:ab:a8:ab:59:c9:7b:d4:
ff:e6:d2:75:4b:05:ee:61:cd:eb:78:ed:c7:35:24:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1C:CA:8B:E7:79:66:16:53:F2:18:A5:A2:21:13:9C:AA:2D:0C:1D
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/VhzKi-d5ZhZT8hiloiETnKotDB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.252.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:29:ae:8a:36:f9:c4:66:2b:d2:f5:44:d0:21:ba:22:04:c1:
5b:c6:6f:47:f7:e3:60:f5:da:37:d3:86:05:06:73:bc:ee:40:
7f:50:c4:f6:a9:7e:ed:2e:58:ad:ee:4b:82:26:af:1a:03:4b:
4d:1a:c9:b6:86:79:0d:10:96:19:d7:0f:2a:c3:70:28:1b:d4:
1f:b0:26:c5:fd:31:1f:ab:ee:6d:56:eb:b9:e9:1c:6d:92:74:
cb:27:58:2e:fa:96:3f:b1:95:42:f3:4d:90:71:03:60:f6:75:
b9:e0:4b:e7:1e:f4:7c:3a:78:38:b5:64:f6:7c:9c:88:bb:41:
04:f0:90:64:c3:13:02:4c:37:dd:37:ae:3b:b1:4f:16:92:d1:
e2:0d:d8:00:b9:e2:77:23:50:17:ca:08:9c:6c:bd:5c:85:2f:
1c:7b:d6:f7:f3:bb:94:8b:89:42:6f:3b:67:94:00:2d:82:56:
f8:ae:8d:8a:4f:a8:5f:fd:54:24:1b:76:8c:a5:9a:09:61:30:
45:b5:15:48:41:0e:ae:03:c4:74:6e:74:ab:02:85:34:71:81:
34:f4:fe:88:19:d2:27:b6:d5:f5:9d:9f:42:55:c9:4c:fd:be:
d6:61:a9:b6:98:d7:d9:94:6c:e8:cd:dc:6b:a0:ef:26:dc:a7:
71:60:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org