Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zO2Cj8QXSbu7rFY-_fHqr5eenTM.roa
File: zO2Cj8QXSbu7rFY-_fHqr5eenTM.roa (raw, json)
Hash identifier: K0WKcM09qGImNa7Cv0oCwbLLa1aJ5cV/JpICCCS9EJE=
Subject key identifier: CC:ED:82:8F:C4:17:49:BB:BB:AC:56:3E:FD:F1:EA:AF:97:9E:9D:33
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0183F01A8198E57D6701EA35B5AD73782AFB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zO2Cj8QXSbu7rFY-_fHqr5eenTM.roa
Signing time: Wed 19 Oct 2022 11:56:52 +0000
ROA not before: Wed 19 Oct 2022 11:56:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133206
IP address blocks: 193.36.84.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:1a:81:98:e5:7d:67:01:ea:35:b5:ad:73:78:2a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 19 11:56:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cced828fc41749bbbbac563efdf1eaaf979e9d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:a5:00:97:52:25:dc:0c:6f:6d:df:6d:b1:
0b:0e:ad:ed:18:7e:13:78:fb:36:02:60:94:2e:cd:
f0:72:09:3a:6f:bf:aa:fc:11:10:9b:e0:fd:4c:ed:
9e:95:f8:14:22:fe:ad:d4:ed:5f:49:ac:84:03:ea:
4f:e1:23:bf:89:ba:79:cc:07:30:7c:d3:4b:8c:20:
e1:80:c3:1d:6c:2a:2e:b5:e3:ca:6a:27:8e:e2:46:
7e:52:68:c8:0d:be:ff:c9:67:96:cb:ab:7d:6d:6f:
98:bc:11:12:cc:ad:e4:1c:3c:43:41:25:7c:05:ab:
94:58:57:75:80:d5:d4:48:a4:59:66:1a:30:0e:27:
d4:a7:8f:c2:f7:97:cf:bd:c1:17:d3:10:b3:ce:c2:
1a:78:1f:91:e9:01:83:f6:95:58:08:cb:86:bb:35:
65:83:db:55:29:43:38:8f:16:b7:3a:31:02:ce:36:
ad:dd:7a:ed:9e:11:41:6a:cb:7b:90:57:c1:56:be:
57:b6:c8:e4:6a:94:e6:1b:f3:c1:43:55:09:f7:c8:
bb:21:a5:09:2a:e4:12:ea:df:d5:c7:ea:0a:f9:8b:
32:2c:df:cd:67:b4:6f:85:71:f8:d7:95:3f:cf:4f:
31:c9:53:b7:96:1f:e0:85:c3:f9:67:df:03:c8:74:
fb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:82:8F:C4:17:49:BB:BB:AC:56:3E:FD:F1:EA:AF:97:9E:9D:33
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/zO2Cj8QXSbu7rFY-_fHqr5eenTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:5d:25:12:2e:8e:98:7a:08:5b:76:9d:72:43:d3:5c:03:33:
67:17:a2:6d:8e:70:1e:4c:1a:ce:70:29:54:1c:d5:d5:fd:ca:
d8:43:ca:4e:66:16:22:09:45:0a:93:a1:25:02:ed:f6:e5:e0:
73:30:c6:b1:44:3f:45:42:76:23:57:d2:94:cb:c4:83:e0:45:
8f:57:3c:ab:15:62:bc:6d:33:22:0b:2a:f3:5d:cc:a0:40:f0:
cc:c6:65:33:c1:72:04:47:4a:b2:77:bc:22:84:f7:2d:f1:27:
b0:17:e7:b0:d3:65:5d:d9:12:69:12:c9:81:2c:91:e5:bc:b1:
a2:90:df:da:ef:78:77:dd:f3:45:6e:79:54:f6:eb:ab:2a:b4:
b9:76:ea:b6:79:3e:ab:2d:a5:82:6e:1a:ee:00:aa:45:22:bb:
c0:f0:37:8e:a4:6d:bc:bb:f7:dc:64:61:e7:8b:3a:34:e5:a7:
8d:8a:78:7a:8e:65:74:79:ef:73:4a:51:be:a5:86:17:1a:f8:
d7:e9:24:19:72:12:f5:03:63:10:f8:63:4e:d5:a5:58:5a:f3:
8c:08:6a:f1:a0:ab:7e:16:26:3e:22:35:48:07:38:e5:c8:96:
80:10:d7:88:d0:c6:02:9a:0c:ba:0e:4a:35:4b:0f:ae:dc:9f:
e6:25:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:17 2024 by rpki-client on console-ams.rpki-client.org