Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zv37na5hKTQbpab8RzgQKdA9Kd4.roa
File: zv37na5hKTQbpab8RzgQKdA9Kd4.roa (raw, json)
Hash identifier: 8yBgLAtCN1bvYasYl3XkhjbSJngzd3XQnaJjyoDdZz0=
Subject key identifier: CE:FD:FB:9D:AE:61:29:34:1B:A5:A6:FC:47:38:10:29:D0:3D:29:DE
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 38C72F9E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zv37na5hKTQbpab8RzgQKdA9Kd4.roa
Signing time: Tue 17 May 2022 05:30:34 +0000
ROA not before: Tue 17 May 2022 05:30:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210853
IP address blocks: 88.203.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952577950 (0x38c72f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:30:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cefdfb9dae6129341ba5a6fc47381029d03d29de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:61:de:7b:04:56:96:03:ed:1e:83:4d:e8:
32:e4:1d:82:0e:b2:04:5f:db:a8:75:19:87:b2:a7:
86:b1:44:7d:33:9e:b0:8b:dc:71:d8:c3:16:f6:25:
0b:b4:29:c1:63:0e:0f:c8:24:d5:8e:c4:c8:fa:4b:
cb:15:f7:86:2d:ed:bb:10:a1:a4:e0:71:bb:ce:46:
2e:b6:dc:ba:a5:19:39:6a:cb:61:97:4a:95:b0:8f:
f8:eb:68:00:b4:cf:ca:83:5a:61:f3:12:b2:10:0d:
29:4d:99:53:f5:bc:3a:03:74:4a:28:00:fc:30:00:
8b:bd:74:10:b2:65:20:8c:a1:f2:1c:1b:0c:db:57:
92:cd:1c:36:18:83:80:6c:a1:54:30:90:b0:93:30:
73:c2:fc:93:f3:22:cb:74:24:ce:2f:1a:7d:e2:37:
77:51:62:7f:56:0a:de:c4:0e:8d:be:be:c0:ba:70:
e3:ac:63:38:3c:0a:cd:8d:a6:76:4e:3e:dc:85:bb:
46:1f:48:a9:18:3b:0f:76:76:e6:ef:a5:04:8e:d5:
95:c0:23:1f:ec:b3:01:20:98:d7:72:ab:a6:a9:2d:
4c:3a:87:0f:0a:cf:92:ab:7e:3e:15:85:0c:e7:45:
77:89:bb:eb:7b:20:ca:5b:88:36:72:f3:72:e9:ed:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:FB:9D:AE:61:29:34:1B:A5:A6:FC:47:38:10:29:D0:3D:29:DE
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/zv37na5hKTQbpab8RzgQKdA9Kd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.203.177.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b7:be:4d:f1:5d:06:e7:9c:a9:7f:f9:5d:b9:b7:21:52:eb:
7f:24:7e:02:c3:c1:97:75:b8:54:0d:91:be:38:cf:c7:b8:31:
79:55:03:70:8e:28:81:55:22:b3:5f:c9:96:ee:e7:37:ec:18:
1c:bb:df:e2:11:3d:1a:d1:bb:a2:28:0b:f1:b0:93:fe:b8:90:
13:9c:9f:b1:3d:2d:11:77:35:01:a0:44:da:cc:ad:c5:16:ea:
ca:7a:87:f6:dc:b0:2e:4e:64:38:2f:3d:65:92:d7:f1:c3:ec:
39:42:28:49:6e:bc:b8:f6:40:3e:64:88:9e:01:2a:6b:93:f0:
91:35:f3:c3:50:f9:50:ae:a0:38:ac:57:ef:97:fc:c5:2b:c0:
07:9f:70:8b:f3:e7:ae:77:76:b7:49:03:d7:7b:00:f4:68:e3:
ea:d5:72:91:c7:87:88:40:0e:b2:cd:3b:ee:d8:7a:24:10:49:
36:2c:0b:48:9b:94:d4:f4:bf:3f:f7:dc:38:36:6a:70:93:36:
a9:3d:f7:01:05:4a:9b:06:a6:6a:fc:03:a5:c9:25:2c:f4:1b:
dc:2b:11:05:31:d7:e8:e3:58:ae:9a:52:af:2e:49:78:fb:7c:
12:85:d7:fb:cf:e6:8d:e2:a5:94:3f:ab:f8:15:7b:0c:c9:c5:
e0:04:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:21 2023 by rpki-client on console-fra.rpki-client.org