Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gzBDYmJ_P2Z2R8T0ctfKCMUwtMw.roa
File: gzBDYmJ_P2Z2R8T0ctfKCMUwtMw.roa (raw, json)
Hash identifier: 1k/iE6zqkxCR+3ovWp4bru0bq3SbykHdyFiWvA5tVh4=
Subject key identifier: 83:30:43:62:62:7F:3F:66:76:47:C4:F4:72:D7:CA:08:C5:30:B4:CC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0FA0923F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gzBDYmJ_P2Z2R8T0ctfKCMUwtMw.roa
Signing time: Tue 03 May 2022 09:06:38 +0000
ROA not before: Tue 03 May 2022 09:06:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49434
IP address blocks: 195.133.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262181439 (0xfa0923f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 3 09:06:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83304362627f3f667647c4f472d7ca08c530b4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:3d:2b:f6:5c:32:60:36:3b:1a:9b:a6:e4:
80:d5:7b:b6:59:79:51:1c:68:61:18:e8:7f:ea:a0:
e4:96:b8:f9:27:ba:7d:ce:d5:f9:61:a7:da:df:5b:
35:db:3f:a3:cd:0a:fc:36:73:c3:24:4d:77:be:70:
57:b2:ec:cc:d4:a1:60:64:ac:f3:8a:37:84:26:61:
b4:62:73:b6:5a:53:70:2a:13:e2:7e:96:87:01:db:
8c:8e:97:bc:da:9e:08:9f:60:2f:48:a4:b7:1c:7a:
3a:54:43:e2:c4:3f:d5:31:c7:e6:02:f0:64:1d:5a:
d6:bf:d7:06:0a:7c:3c:a6:6c:5c:f5:38:ed:10:0e:
76:77:d5:7f:3a:80:7a:a4:7e:87:09:a6:95:d6:b7:
bc:bd:ee:88:c3:d8:8a:dc:b1:29:88:1a:16:fc:cf:
e9:05:fa:1d:d1:6f:1b:4f:53:f6:c9:45:90:f8:f9:
78:bb:c0:8f:6d:1b:1e:97:df:87:88:26:75:02:ae:
8a:47:6d:3e:f2:ff:4f:3c:97:09:68:6b:cd:0d:af:
99:50:df:6c:9e:fe:06:82:b4:73:e4:9a:63:82:5f:
ef:4e:11:ff:bd:ee:e9:4e:d5:24:ae:8a:15:31:77:
e4:b6:d3:08:96:96:aa:db:b7:87:49:f2:57:20:33:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:43:62:62:7F:3F:66:76:47:C4:F4:72:D7:CA:08:C5:30:B4:CC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gzBDYmJ_P2Z2R8T0ctfKCMUwtMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
93:b4:6b:73:d6:1e:25:8d:23:43:b9:6f:80:24:7f:e3:7c:68:
2d:74:d8:b3:d1:e5:02:91:d4:b0:00:db:a0:03:a6:98:ad:8b:
9a:a5:d3:58:ea:35:4b:64:d3:3a:a1:ae:f9:e0:79:55:1d:aa:
c4:a9:3b:87:ab:2b:57:9c:b3:a2:31:06:8b:ea:cf:68:7f:86:
71:8a:e6:78:83:c4:f5:bf:ce:07:8c:68:c4:ca:71:07:ee:f2:
f3:45:b3:9d:b8:7a:d3:74:3e:f4:93:db:6f:50:10:1a:d1:1d:
78:a1:d3:38:4b:5a:92:74:92:ca:23:2a:c5:24:76:fa:af:55:
4a:0c:5b:d8:6f:4a:6b:20:21:e1:2e:57:a5:aa:d0:97:c4:f2:
99:98:f4:dd:97:bf:80:fa:be:7e:6a:f8:0e:12:71:63:9a:1f:
f7:8f:97:f4:c2:74:fa:40:f1:fc:5a:f2:e3:9c:bd:65:08:35:
1e:30:98:d9:22:d7:3f:10:dd:ea:e2:fb:b2:ed:6a:3d:bb:7d:
fc:af:42:cd:3e:f1:e5:bb:d0:07:36:4f:f0:5b:2c:6d:d2:5e:
c6:d7:a4:ce:80:42:fa:1c:25:61:99:3e:18:c6:a6:43:a8:dd:
e0:12:51:86:b7:64:cb:0b:19:48:e3:ac:70:97:c5:98:dd:00:
df:3c:d1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org