Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zxYnwBGG9Bm_zoC_zyStWFg67Eo.roa
File: zxYnwBGG9Bm_zoC_zyStWFg67Eo.roa (raw, json)
Hash identifier: XbwWA1FdrSjgFjw1ON4I7NV8Tvrxm6wVsMS9gRGRg8M=
Subject key identifier: CF:16:27:C0:11:86:F4:19:BF:CE:80:BF:CF:24:AD:58:58:3A:EC:4A
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 014CE52C
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zxYnwBGG9Bm_zoC_zyStWFg67Eo.roa
Signing time: Wed 29 Jun 2022 13:04:02 +0000
ROA not before: Wed 29 Jun 2022 13:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 194.50.82.0/24 maxlen: 24
185.187.46.0/23 maxlen: 23
92.42.20.0/22 maxlen: 22
194.50.52.0/24 maxlen: 24
194.50.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21816620 (0x14ce52c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jun 29 13:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf1627c01186f419bfce80bfcf24ad58583aec4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:75:84:c7:21:2b:4a:71:5b:7a:37:8d:76:
1e:74:d4:6e:82:49:ab:e8:ed:2e:77:90:37:8b:51:
ef:30:95:6e:39:fb:c3:f7:d0:11:95:64:a0:d8:50:
d6:69:dd:92:52:ac:b9:f4:86:e0:59:82:7e:a5:66:
73:f1:d3:4e:a0:eb:6e:4e:a7:ed:9a:bb:e5:4b:12:
ba:57:b7:22:90:49:1a:c2:90:7b:b4:0e:74:be:68:
93:ed:2e:2f:fb:6b:1b:d8:5e:e7:9e:49:08:65:19:
82:3c:65:63:94:e1:10:5d:da:d3:4e:9c:6a:6e:23:
51:a8:b1:7d:7b:5d:b7:d0:58:cd:dd:04:f6:24:69:
d9:60:42:6b:6e:2d:19:47:b8:48:42:8a:fc:85:17:
1b:f0:c6:7c:e1:63:05:e0:05:2f:1b:f7:6e:b6:02:
6c:44:97:5e:cb:49:a3:98:63:2e:75:7d:22:f0:50:
e9:24:3f:1f:51:4c:f7:0a:3a:b0:84:98:1d:3e:ba:
18:71:e6:31:c3:3a:83:f7:88:81:76:12:1e:a7:7e:
1f:fd:52:c1:54:04:43:8d:36:e6:37:27:4e:8e:df:
bb:25:14:99:5a:2a:21:63:df:d7:ee:d7:50:f6:88:
2a:5e:3a:b1:e8:09:78:c9:e9:78:62:99:27:29:80:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:16:27:C0:11:86:F4:19:BF:CE:80:BF:CF:24:AD:58:58:3A:EC:4A
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/zxYnwBGG9Bm_zoC_zyStWFg67Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
185.187.46.0/23
194.50.52.0/24
194.50.59.0/24
194.50.82.0/24
Signature Algorithm: sha256WithRSAEncryption
56:01:11:79:ae:22:ff:94:b1:4a:6c:93:0e:01:56:22:4a:b3:
e5:44:f9:61:19:14:6b:7a:e1:a9:3f:5d:3e:48:37:6b:89:ca:
b6:24:76:1f:5e:ba:3b:8f:12:b6:e2:6f:c1:fa:25:bd:e5:a7:
82:04:87:ad:66:ec:ee:90:fe:4a:3a:1e:ed:6b:2e:02:75:3c:
a7:6c:e8:3b:be:6e:e4:27:e1:33:87:c0:96:6e:6c:92:90:75:
01:e9:31:bf:3e:ea:14:ae:ec:3b:3b:47:c8:3c:0c:e8:f1:22:
ff:f1:44:5b:de:8a:87:72:77:f2:a0:09:41:35:61:07:8d:18:
c8:a1:e0:51:b2:7e:6e:c3:39:af:8f:23:be:cd:47:4b:b7:4b:
dc:18:23:da:67:a8:ce:52:f8:c7:dc:a5:d2:ff:ec:e9:f5:d3:
0c:65:7e:39:e6:13:5c:48:a0:d9:99:a2:10:0f:21:d4:c3:76:
f9:55:dd:15:f4:43:42:89:cf:cf:7e:01:27:c5:f3:32:1c:e1:
86:b6:c3:4e:46:88:58:c5:ef:9c:82:df:80:56:74:6c:c7:11:
88:45:1c:5d:7e:a1:aa:fe:2e:9e:72:3b:ee:6f:f7:7f:d3:03:
6d:3c:a7:26:1d:2d:e4:41:7d:58:8e:5b:5a:c4:36:47:bf:b1:
00:0e:d4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:59 2024 by rpki-client on console-fra.rpki-client.org