Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ZCQV5Mg_MQ9xzJi1us8GHzAb8t4.roa
File: ZCQV5Mg_MQ9xzJi1us8GHzAb8t4.roa (raw, json)
Hash identifier: WSgJNeKGeA1HtXY+NkYnp1eUnbpTmHzCCz3VpN0TTxk=
Subject key identifier: 64:24:15:E4:C8:3F:31:0F:71:CC:98:B5:BA:CF:06:1F:30:1B:F2:DE
Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial: 10A65784
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ZCQV5Mg_MQ9xzJi1us8GHzAb8t4.roa
Signing time: Sat 01 Jan 2022 13:00:39 +0000
ROA not before: Sat 01 Jan 2022 13:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200505
IP address blocks: 185.126.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279336836 (0x10a65784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Validity
Not Before: Jan 1 13:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=642415e4c83f310f71cc98b5bacf061f301bf2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:cc:90:37:44:ac:31:58:26:54:49:e5:55:
bf:b1:91:eb:63:eb:37:3e:7d:f1:6d:02:8c:46:b1:
1e:50:d9:45:fa:16:b7:ef:28:83:23:b6:21:6c:91:
f9:4a:96:b7:dd:2b:ac:83:94:cd:fc:fd:72:2f:2f:
6e:6f:ed:d6:06:fc:72:78:cb:36:ba:75:43:46:34:
a9:35:6c:0f:a0:4f:20:06:96:65:0c:e2:fd:a2:5a:
30:dd:58:c0:e4:0f:ef:f4:ce:58:0a:7f:1e:10:f9:
3c:f5:f2:ca:08:62:07:73:44:9c:00:ff:82:a8:09:
e9:75:80:d1:26:2f:8c:70:09:c0:49:52:5f:4c:bb:
55:17:60:d8:2b:7a:df:4d:20:4a:5d:43:8d:b7:f5:
a9:2c:60:f4:79:66:6e:9e:f8:85:3f:bd:ea:c5:b3:
55:f6:bf:97:d4:13:fa:6b:01:1c:a0:fa:0f:c6:27:
92:3e:7f:fc:86:8c:33:ed:b1:4d:68:a7:dc:e2:10:
51:bf:0d:55:d4:3b:72:12:72:ac:96:70:f7:4f:b6:
8d:75:d1:c2:eb:6e:12:0d:c6:35:85:00:ac:d7:fe:
b4:09:53:cf:4f:8c:89:be:f3:60:99:f1:2b:03:82:
b8:7a:43:64:3e:71:88:90:1d:fd:7a:ac:a6:cf:62:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:15:E4:C8:3F:31:0F:71:CC:98:B5:BA:CF:06:1F:30:1B:F2:DE
X509v3 Authority Key Identifier:
keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/ZCQV5Mg_MQ9xzJi1us8GHzAb8t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.94.0/24
Signature Algorithm: sha256WithRSAEncryption
17:00:90:24:c1:ee:a4:20:ee:1e:18:9e:54:65:b9:0e:7e:98:
58:c4:17:f0:cb:e2:36:18:06:e5:8e:31:2d:58:f5:b3:6f:ad:
37:22:71:b3:f0:f9:86:fb:ff:2e:b4:3f:a3:a2:ab:71:f7:c5:
a6:e8:e7:da:d0:10:46:2a:97:58:59:35:02:4e:fa:a1:8f:90:
e7:1f:f0:55:90:a9:d0:e5:5a:e7:2f:e9:c6:c7:cd:be:16:8f:
05:23:06:7e:b7:15:de:bf:49:f4:e0:81:84:f0:8e:8d:5c:92:
5c:70:4f:c1:ad:fb:ba:b6:81:70:66:e2:09:9d:e7:db:2e:22:
10:0e:7a:b9:8f:e9:d9:85:31:3f:e0:72:c8:73:56:4d:09:72:
60:72:37:0f:ac:00:e6:51:23:1e:eb:2e:5c:ca:36:f0:0b:76:
bd:a0:b1:07:3d:92:c6:cd:dd:63:ed:a2:7b:37:50:fd:eb:8d:
80:26:4b:e1:96:d4:ee:06:92:3c:8c:f1:73:48:60:ca:09:50:
bc:69:76:f5:f4:21:8f:b2:c3:ad:27:33:dc:94:29:19:73:ff:
61:f0:5d:8f:86:05:1a:29:fb:1d:f1:5d:7b:91:7a:5e:92:b4:
30:bd:5e:a7:2f:4a:d0:4e:62:27:b9:02:e2:68:25:53:a2:4a:
27:64:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:48 2024 by rpki-client on console-ams.rpki-client.org