Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZDo-hM5SXyFXYAHbYAIqQBBAunQ.roa
File: ZDo-hM5SXyFXYAHbYAIqQBBAunQ.roa (raw, json)
Hash identifier: Jxm4eTqJRJFhJIcFrWhyukMbvT1xH4fU6+M2PieNk6s=
Subject key identifier: 64:3A:3E:84:CE:52:5F:21:57:60:01:DB:60:02:2A:40:10:40:BA:74
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 4480BBB1
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZDo-hM5SXyFXYAHbYAIqQBBAunQ.roa
Signing time: Sat 01 Jan 2022 03:58:30 +0000
ROA not before: Sat 01 Jan 2022 03:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31180
IP address blocks: 195.6.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149287345 (0x4480bbb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=643a3e84ce525f21576001db60022a401040ba74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:b8:60:7f:4b:cd:2d:0a:95:77:39:8e:1a:
61:50:fb:10:c8:19:ea:ad:9b:93:db:68:a3:6a:14:
ee:85:0b:f4:0e:da:86:48:97:48:94:fc:44:90:4a:
5b:71:fd:9b:4c:bc:33:c5:89:7e:ef:77:08:e4:34:
0c:9f:ee:8d:51:3d:1f:4c:b5:4e:24:5c:f5:69:10:
80:18:99:82:a4:b1:cb:7e:20:ba:c7:15:e6:80:01:
21:d3:bb:83:95:5b:5f:cf:62:24:ab:75:cf:6f:98:
35:2e:98:f2:28:e8:82:04:a7:20:7e:63:ea:a2:39:
45:b0:b6:b9:64:ef:89:79:60:b2:b3:72:54:e5:08:
e1:97:dc:a4:d0:93:5e:f8:e8:69:42:0f:04:31:e5:
2c:a0:b9:b0:bf:eb:27:24:16:4b:94:91:da:8b:21:
8e:b8:cd:33:56:91:9d:be:18:89:9b:16:5a:b0:b5:
3b:a7:9e:36:ea:50:71:2e:2f:c7:6a:9a:4b:58:06:
e3:9a:44:56:16:db:08:c2:54:74:c1:15:b3:68:82:
64:cd:32:45:07:6f:81:89:29:e4:b7:34:dd:d1:d6:
ae:2d:40:a5:60:23:b2:34:03:9e:57:bf:43:42:d5:
99:b0:9e:22:a2:76:5a:2c:f3:19:de:9b:14:37:dc:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3A:3E:84:CE:52:5F:21:57:60:01:DB:60:02:2A:40:10:40:BA:74
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ZDo-hM5SXyFXYAHbYAIqQBBAunQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.6.3.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5f:3e:95:c5:e1:8d:56:92:b2:c0:07:3f:0f:22:ab:00:d0:
0f:10:b2:bc:f3:c1:51:2a:5e:bc:37:f2:b9:b9:e8:2a:c1:0b:
98:ec:60:a4:bc:ad:fd:35:64:fc:9a:78:82:de:52:26:a9:47:
b2:88:d3:bb:08:1e:e5:5b:2f:ad:b1:93:de:c7:07:63:23:7d:
b9:8a:93:f6:3d:40:df:bd:5d:69:af:5c:ea:35:b6:b5:6b:2f:
b8:b8:40:4b:73:fd:eb:78:50:0d:6e:ca:60:73:11:e7:67:18:
8d:00:5f:d7:29:1d:83:b1:f9:08:81:57:b7:6b:21:b1:3b:ed:
f4:52:74:1a:ed:9d:fb:17:a4:30:88:6b:3f:58:c7:f8:49:67:
2a:e2:7b:ca:18:8f:27:9e:a4:c5:b3:59:e2:46:05:67:2a:4d:
0f:5c:1b:15:87:30:df:74:14:40:0e:4a:f2:88:d0:86:87:0f:
e2:56:fb:a3:19:10:26:1c:31:3b:c8:cc:5b:bb:39:dd:04:e8:
45:cf:7f:ed:5a:26:cb:c1:3f:18:10:6f:d4:86:b9:d1:cc:42:
38:38:25:7d:16:f0:30:62:91:1d:7c:55:25:1d:c0:6e:37:39:
b6:89:26:12:8a:c6:5f:9e:a3:dd:66:fd:3a:df:fa:c0:7d:25:
ba:3a:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org