Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ZCMEXEIAqAFmmAEJMkQ2xfiDATY.roa
File: ZCMEXEIAqAFmmAEJMkQ2xfiDATY.roa (raw, json)
Hash identifier: 3WMtDIm5U/YT48pfVSVF5LKx/d/5ALgD+LgZXU6bPy4=
Subject key identifier: 64:23:04:5C:42:00:A8:01:66:98:01:09:32:44:36:C5:F8:83:01:36
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 4232005D
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ZCMEXEIAqAFmmAEJMkQ2xfiDATY.roa
Signing time: Tue 18 Jan 2022 15:24:22 +0000
ROA not before: Tue 18 Jan 2022 15:24:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197540
IP address blocks: 94.154.148.0/22 maxlen: 22
185.158.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110573149 (0x4232005d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 18 15:24:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6423045c4200a80166980109324436c5f8830136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:d3:94:05:ac:b3:18:d3:8a:36:70:1b:09:
9d:61:4a:19:69:26:4d:24:b2:18:90:25:00:e9:e6:
63:a2:d2:24:3c:14:53:f3:6c:f1:fd:ee:8b:73:36:
20:a4:39:c4:32:70:6e:96:2f:fe:a1:9b:ec:df:b7:
2b:b6:0d:6a:77:12:11:16:62:eb:f1:8c:92:38:f4:
90:1b:5d:85:38:c2:bb:7e:1c:3d:2e:30:1b:7a:50:
e6:9c:0c:11:6b:54:84:bc:c1:f0:a8:fa:7e:b5:58:
58:9a:3a:b7:fe:a9:bd:2e:6d:ca:5e:ac:c3:11:87:
63:e8:e0:9e:59:71:9a:2c:e9:f0:a3:e7:f7:28:6d:
aa:8c:28:32:f9:ee:81:da:27:58:ba:1e:0e:b1:05:
16:29:33:e0:3e:0b:39:de:10:ed:20:00:4a:21:e4:
e5:0f:11:b7:94:52:8d:ac:02:5d:b0:63:2d:bc:39:
20:c4:ed:63:44:71:b6:d4:59:5c:90:b2:f6:58:10:
54:83:73:c5:c7:a0:9d:6f:da:c1:90:a5:aa:f7:08:
2e:17:a4:a2:54:98:f6:02:df:ee:4a:74:f8:b8:70:
81:0c:23:c4:2c:eb:5d:ba:4e:11:8c:53:84:b5:de:
e9:81:d1:15:3c:a3:e3:6d:e3:ba:74:dd:1d:a6:a2:
82:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:23:04:5C:42:00:A8:01:66:98:01:09:32:44:36:C5:F8:83:01:36
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/ZCMEXEIAqAFmmAEJMkQ2xfiDATY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.148.0/22
185.158.212.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f6:23:8e:42:c6:01:0c:19:ab:38:6d:f8:53:8c:11:da:d9:
f2:7b:f3:d1:e7:8c:5e:e9:8c:08:26:31:4c:65:39:a2:a1:ae:
72:25:97:df:34:14:25:67:11:fb:6e:87:0f:d2:15:a3:a2:b7:
e5:a0:1e:85:2b:80:3b:2b:d2:92:a9:fa:33:89:c0:15:f5:dc:
9b:6f:37:bc:e1:73:6a:78:d3:8a:7e:19:1b:2d:a3:50:66:92:
3f:be:83:cb:88:af:ae:ab:52:db:e0:eb:0a:e8:1e:4e:79:c2:
aa:87:91:bd:52:c8:2b:9c:7f:63:c2:ce:10:b8:ff:f2:a4:bf:
01:b0:89:68:02:43:67:e5:8c:78:2a:25:70:a4:a9:3c:b4:ac:
c6:a3:3e:44:8b:34:1d:c6:11:ce:a5:c2:7f:2e:17:25:14:5d:
68:ea:01:13:55:01:20:19:52:0d:39:0d:cc:7d:ac:85:17:74:
5c:22:67:74:f1:03:70:06:b1:44:8f:83:91:a0:6f:56:1b:16:
8f:c3:37:35:07:9e:74:5d:63:36:28:62:fc:7c:82:59:9a:d3:
c4:5a:80:80:d6:18:31:8d:e4:c4:ae:f9:b8:f7:64:66:c1:a5:
e6:7c:56:93:e0:07:60:98:70:4a:ce:60:41:d0:d8:07:61:a8:
1b:94:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:44 2024 by rpki-client on console-fra.rpki-client.org