Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/z7a60R3T0a2nrvGfnrmI_NOMtX4.roa
File: z7a60R3T0a2nrvGfnrmI_NOMtX4.roa (raw, json)
Hash identifier: PKGprnABet+QyPx7jyH2+gTAI+WUcXOhOyS17C8TUXQ=
Subject key identifier: CF:B6:BA:D1:1D:D3:D1:AD:A7:AE:F1:9F:9E:B9:88:FC:D3:8C:B5:7E
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 01DD4A56
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/z7a60R3T0a2nrvGfnrmI_NOMtX4.roa
Signing time: Thu 30 Jun 2022 12:44:02 +0000
ROA not before: Thu 30 Jun 2022 12:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 193.187.255.0/24 maxlen: 24
2a12:3e80:200::/40 maxlen: 40
2a12:3e80::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31279702 (0x1dd4a56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jun 30 12:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfb6bad11dd3d1ada7aef19f9eb988fcd38cb57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:5e:34:2c:51:ac:17:79:8d:3b:ba:c0:69:
40:34:73:77:64:5c:20:5a:83:a3:fc:a0:22:e5:17:
eb:39:00:48:f3:a7:0b:db:d9:93:4f:ce:95:b3:7d:
bc:ec:f5:79:e5:6f:04:92:72:33:d9:5c:19:c6:42:
5a:7c:0f:3e:cb:ef:65:ce:1d:69:1d:08:8f:3e:1b:
f2:b1:dd:5e:21:b8:e2:24:4e:ca:9e:d5:a7:9c:9f:
d7:64:d7:ef:91:a8:f1:e0:ae:3a:2d:ec:4e:59:16:
7a:fe:af:99:ac:60:7a:d4:90:be:3e:ef:ba:fd:05:
fc:41:9a:a4:32:16:01:75:89:05:d4:8d:8f:6d:a3:
52:7e:21:7f:52:22:b3:0b:3a:61:59:1f:60:da:df:
02:c6:49:e1:d4:fb:b2:10:29:53:c0:25:cd:4d:43:
35:ea:c8:e2:e9:6a:0f:6b:20:d6:02:86:4b:5e:b8:
44:64:4b:fe:38:d1:0e:03:cd:83:01:62:58:b5:94:
89:44:c0:e0:87:08:9f:bc:2c:83:61:2a:63:f0:70:
3d:16:88:70:89:fe:dc:e3:a5:56:9a:d7:33:d2:b7:
3e:54:7d:ab:5a:3d:9a:69:5c:4f:de:f9:7e:04:1a:
33:3e:0f:23:86:51:8b:9f:44:db:c9:59:21:3a:4e:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:BA:D1:1D:D3:D1:AD:A7:AE:F1:9F:9E:B9:88:FC:D3:8C:B5:7E
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/z7a60R3T0a2nrvGfnrmI_NOMtX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.255.0/24
IPv6:
2a12:3e80::/40
2a12:3e80:200::/40
Signature Algorithm: sha256WithRSAEncryption
40:ba:7c:34:76:fe:0a:09:13:58:09:09:35:28:fd:da:5d:a8:
13:0a:4f:7b:3a:72:e4:6f:48:ee:30:8d:2e:d7:d2:7d:4f:f8:
2f:fa:88:95:70:92:22:cb:81:48:19:6d:6c:e5:fc:15:89:b3:
6b:c0:ef:25:89:15:89:e2:2a:5c:4d:71:06:ce:3d:73:52:2a:
8b:b5:3c:66:27:7d:57:f0:71:53:8f:92:40:e6:61:13:da:1e:
90:fa:8f:37:ec:e2:89:20:6e:3f:0a:2c:5d:eb:a8:d1:53:83:
da:b8:2b:42:64:5e:cd:b2:64:44:41:1d:69:ef:21:cd:b5:1c:
18:0f:17:ac:3e:b6:ac:35:e7:d1:23:bf:fa:3a:a5:5e:41:18:
55:f8:72:9b:48:d4:4b:53:c9:68:fc:80:d1:02:62:84:ab:07:
5e:fe:e5:f6:e2:be:e3:c1:97:7b:c2:1c:80:66:09:fb:de:27:
1b:83:49:4b:09:13:6d:50:56:fc:bb:c9:50:66:7f:ed:e8:20:
2b:63:2d:a2:52:dc:b2:80:55:72:93:60:78:2a:b3:3a:dc:c5:
35:59:47:d3:0e:8f:fa:64:59:94:60:3a:0a:e1:d9:91:65:64:
49:f0:5c:b1:b8:0b:8a:d2:6e:d5:73:b0:72:3b:de:93:ef:1c:
13:15:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org