Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zFZ5jna9NVmVqxz-cZPCLoSHWHY.roa
File: zFZ5jna9NVmVqxz-cZPCLoSHWHY.roa (raw, json)
Hash identifier: MUJSE0/yd0fea5RdoTmWmoLbM8ghyUpZV6MLC8PjEtU=
Subject key identifier: CC:56:79:8E:76:BD:35:59:95:AB:1C:FE:71:93:C2:2E:84:87:58:76
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018200FD822D0DEBDBCB5FE4C315116CC4CE
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zFZ5jna9NVmVqxz-cZPCLoSHWHY.roa
Signing time: Fri 15 Jul 2022 08:33:09 +0000
ROA not before: Fri 15 Jul 2022 08:33:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39005
IP address blocks: 95.157.192.0/18 maxlen: 18
88.219.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:fd:82:2d:0d:eb:db:cb:5f:e4:c3:15:11:6c:c4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 15 08:33:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc56798e76bd355995ab1cfe7193c22e84875876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:30:10:1f:68:a0:a1:e6:64:21:ec:de:93:
04:fa:42:da:dc:b8:7f:e7:46:f0:1e:eb:d6:ae:be:
23:09:64:9e:f3:cf:dc:d5:07:76:ab:2a:1c:58:b5:
d8:dc:82:3f:fe:94:5c:5e:dc:89:cc:53:ec:e9:6c:
40:9f:c0:73:41:0d:50:a7:92:d9:e2:e5:75:02:59:
02:33:7f:bf:a6:d6:c4:5c:3b:2b:22:6b:37:ad:0b:
cf:e7:17:2d:b9:66:ca:b9:73:0d:a8:a1:31:b5:69:
05:07:0f:8b:ae:63:2c:3b:9e:dd:3c:f4:1c:2c:be:
94:e6:8c:1e:11:d5:db:86:55:95:11:f0:4f:5b:98:
b5:28:40:c6:d3:28:87:0c:6d:4f:ad:c7:6c:e7:2a:
47:b5:7a:6b:3a:29:1e:15:43:86:5d:15:47:9c:ed:
d3:d5:5d:68:49:be:2b:88:4d:a9:b6:e5:6f:56:5e:
96:22:df:f5:4e:12:31:cf:04:04:e3:52:a1:e3:d6:
be:6b:24:52:76:4e:97:86:88:bf:43:a1:c9:c1:41:
bb:c3:26:af:53:74:89:fe:e4:fc:28:7c:69:96:45:
bc:11:b0:03:3c:b7:ca:ce:32:f0:d4:f2:d7:66:b6:
f0:a4:c6:d7:de:b3:bf:47:e4:9d:96:54:bd:f6:af:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:56:79:8E:76:BD:35:59:95:AB:1C:FE:71:93:C2:2E:84:87:58:76
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/zFZ5jna9NVmVqxz-cZPCLoSHWHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.219.0.0/16
95.157.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8a:30:0c:f4:95:0e:37:00:ae:4f:ca:6a:d0:09:c8:12:50:53:
03:1c:66:22:a7:c0:a9:62:54:72:34:25:b2:e7:7d:0b:82:d4:
11:7a:c3:96:25:83:5c:19:60:88:53:aa:6a:26:c9:cc:f5:57:
e9:a5:cc:38:1b:b3:0c:00:51:97:d3:4a:37:73:ec:25:25:5e:
29:4e:89:f2:4d:ad:b1:b6:7e:5d:aa:7b:81:f2:20:f7:b9:4f:
fc:70:c0:9c:88:64:be:a3:2a:c9:13:c4:4d:b4:f6:25:5c:d3:
17:28:0c:fe:a1:d4:af:27:5a:6e:f2:95:57:db:8e:fb:36:60:
2e:f8:68:e9:34:8b:11:1f:a1:43:23:f9:55:85:32:ee:c5:51:
cb:69:24:af:6f:06:a1:6d:1f:3a:bb:f8:80:4b:49:05:83:f2:
44:e5:5e:0a:9e:b9:e9:00:95:41:46:c8:b7:46:6f:fb:a5:d4:
3f:bd:0e:0c:d4:3a:d2:a4:98:10:77:53:a9:53:cc:a0:7a:a7:
83:8e:29:84:2b:71:49:4f:17:a3:22:22:de:dd:fd:f6:e5:54:
54:a1:6f:f6:fa:51:e4:79:4e:60:df:2d:1c:c5:1a:83:fd:54:
51:0d:65:eb:bf:48:de:ef:79:c3:c1:2f:c8:e5:1e:ff:2b:12:
29:81:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org