Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Z2vHJats4MXXIeWNp5DRo-YWdB0.roa
File: Z2vHJats4MXXIeWNp5DRo-YWdB0.roa (raw, json)
Hash identifier: dFZcp2oO07MEAXdxAUzxa0XOVd+gk66XA7akbOz/xxw=
Subject key identifier: 67:6B:C7:25:AB:6C:E0:C5:D7:21:E5:8D:A7:90:D1:A3:E6:16:74:1D
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 448F4DA5
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Z2vHJats4MXXIeWNp5DRo-YWdB0.roa
Signing time: Sat 01 Jan 2022 03:58:38 +0000
ROA not before: Sat 01 Jan 2022 03:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47818
IP address blocks: 217.109.108.0/24 maxlen: 24
194.2.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150242213 (0x448f4da5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=676bc725ab6ce0c5d721e58da790d1a3e616741d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:98:ec:0c:f8:c9:25:a9:60:44:cf:7d:a0:
c2:84:bd:de:b8:68:04:5d:fe:30:46:4d:40:43:14:
50:ca:9b:30:5c:d7:03:e1:77:e7:77:e1:89:b5:ca:
30:e3:ee:3f:99:12:2e:a4:62:da:35:bb:fb:d0:a3:
20:67:85:91:c5:5c:6c:03:da:bd:9c:0a:71:e7:65:
a9:1c:27:8a:2d:24:8c:93:94:f7:61:77:a7:15:34:
12:be:2b:67:0b:52:ee:8c:34:67:3f:10:61:2c:d3:
fd:12:aa:78:9f:41:82:41:0e:c5:d3:ab:46:6f:1b:
dd:f8:a1:f6:71:4b:c8:d6:59:9f:c2:64:8e:91:8e:
cb:0d:5c:75:84:76:99:77:41:72:b3:f9:ad:b5:5a:
ea:63:c1:bd:80:3c:3d:aa:ce:11:37:af:23:ef:e6:
ba:f2:c8:d8:a4:bc:14:a1:6a:79:b5:ee:63:6c:af:
37:c5:9f:ca:03:cc:f6:83:2b:58:b4:1e:77:d4:b2:
52:32:ef:b2:4e:39:28:5e:b6:3f:c3:38:f3:8a:86:
57:de:1e:c1:a1:8a:a1:06:34:44:a0:fb:d1:00:8d:
f1:c4:99:fe:90:60:0f:9a:28:24:ad:b0:b5:a5:44:
32:b9:1a:39:f5:7e:3d:6d:bf:7f:e0:95:9e:4a:f9:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:C7:25:AB:6C:E0:C5:D7:21:E5:8D:A7:90:D1:A3:E6:16:74:1D
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Z2vHJats4MXXIeWNp5DRo-YWdB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.2.42.0/24
217.109.108.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:74:d9:80:9a:5e:53:57:d2:d8:8b:99:f2:26:1e:a1:74:57:
4e:01:1a:2b:a6:ec:cc:3a:ce:0c:38:17:20:87:dc:26:15:72:
21:ea:12:0b:0a:d1:f6:1c:df:f1:ba:34:90:34:8f:f7:7a:dc:
82:9c:a2:a4:80:0c:19:3f:96:43:a5:0c:5d:62:36:ca:35:56:
32:fc:47:85:9b:43:12:9e:41:b3:a3:a4:26:79:7f:e8:9a:3f:
c9:f8:95:96:ed:13:77:1e:9f:74:a9:66:16:de:a9:16:8d:58:
7c:6b:05:80:94:74:b7:4e:b6:ef:f5:2c:94:6a:c6:32:63:5c:
4f:32:bf:4d:e0:e0:cc:79:cf:09:14:18:99:5b:fd:8f:20:2c:
cf:a8:05:c9:1e:1b:02:6e:5c:4a:a2:18:89:ca:18:07:6d:a2:
d1:c2:6a:92:85:b6:a8:da:d9:e2:6b:d1:61:23:e5:b9:19:10:
f6:af:a8:f2:cb:91:c8:fd:fb:69:b0:fd:8b:5f:c8:d2:9f:33:
f7:02:f7:62:59:cb:c6:b5:6d:67:bf:ef:86:79:26:a8:06:07:
23:a8:e0:63:d7:f1:b9:1d:43:1a:33:7e:16:d7:3a:67:10:cd:
94:60:4e:b5:f1:9b:56:2c:c8:1e:92:37:7b:70:e8:d0:d8:96:
fb:c0:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org