Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z3oiqbyg0FX3UQfIZf1b83n4SYI.roa
File: Z3oiqbyg0FX3UQfIZf1b83n4SYI.roa (raw, json)
Hash identifier: og4pTnAEUCxYZrLYzqlnGmCAIr67yTPWBCxXNeZp0Mk=
Subject key identifier: 67:7A:22:A9:BC:A0:D0:55:F7:51:07:C8:65:FD:5B:F3:79:F8:49:82
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018536D0C904577B171C7FCD75F186238833
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z3oiqbyg0FX3UQfIZf1b83n4SYI.roa
Signing time: Wed 21 Dec 2022 22:32:10 +0000
ROA not before: Wed 21 Dec 2022 22:32:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201935
IP address blocks: 193.57.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:d0:c9:04:57:7b:17:1c:7f:cd:75:f1:86:23:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 21 22:32:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=677a22a9bca0d055f75107c865fd5bf379f84982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:a9:d1:11:33:a6:59:4f:88:1e:fa:4a:be:
b2:e1:67:02:f4:73:d7:99:58:b6:c6:05:9e:af:d9:
72:a3:77:8e:b5:7d:d1:7d:e6:a2:c4:49:56:13:a1:
f0:a2:59:27:46:5d:13:2e:92:ee:91:0a:66:44:bf:
a8:6f:ae:79:ec:75:de:63:35:b6:f0:0b:fe:4b:2e:
fd:f7:6e:ee:80:e3:15:e7:cc:4c:b7:55:0b:c4:a0:
62:df:5c:4e:c5:d0:3b:d3:ba:ab:f7:5e:28:cb:74:
37:d4:a4:a7:a8:45:35:75:ac:cf:8d:a5:ff:b0:24:
fb:3e:62:c9:23:fa:ae:b7:66:49:aa:e4:40:a8:f2:
b4:42:42:27:d1:22:65:58:7b:b4:3f:a0:96:81:3d:
a0:85:73:88:d3:10:30:17:01:34:61:2b:ef:dd:74:
3b:a4:ec:40:ee:08:da:1c:6b:c3:b6:98:c4:0b:de:
e0:a6:96:1d:68:43:41:88:e6:c3:0c:1a:11:25:0f:
a8:b1:67:86:3a:2f:85:13:20:fb:51:70:40:df:e9:
57:4f:e3:44:27:d3:da:96:fe:71:2c:52:34:82:4f:
2c:d7:ad:4a:74:21:63:a3:72:a3:f2:d7:0e:df:f0:
3e:e1:98:79:b6:4f:6a:e7:79:0f:01:fe:f4:8c:4e:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7A:22:A9:BC:A0:D0:55:F7:51:07:C8:65:FD:5B:F3:79:F8:49:82
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Z3oiqbyg0FX3UQfIZf1b83n4SYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.9.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4c:63:7a:1d:38:29:2d:64:01:55:51:bd:66:ae:25:3d:ac:
95:33:9f:25:10:6c:68:04:ee:fc:a7:ee:49:71:22:5c:cb:94:
af:1f:6d:42:9d:4b:83:dc:1f:a7:65:80:78:7d:a1:c3:f2:5e:
80:1a:3e:0a:6a:ad:eb:03:64:16:86:bc:23:93:4a:dd:47:75:
da:f0:b8:52:33:2d:bf:14:b3:70:91:e8:66:df:8d:a8:a3:2e:
95:67:69:0f:30:92:f9:4f:46:fc:97:91:58:85:c8:f8:a1:73:
9d:f5:99:2d:00:fc:9f:72:9c:00:1b:e1:63:e4:05:b0:bd:e4:
5c:17:2a:75:62:da:c1:1d:5c:32:e5:60:b4:91:90:8b:91:d3:
2e:d8:ce:9d:61:41:03:90:76:1f:e8:b6:ae:b1:19:e1:d6:e8:
b4:5e:42:53:2a:63:2c:05:25:47:7c:fd:de:3c:26:34:be:48:
11:b2:fb:2b:37:f0:c7:8f:c4:4e:75:64:3d:e0:e3:17:b9:fd:
12:b6:8e:1a:cd:0d:eb:3d:6a:46:fe:fb:3a:b2:89:4f:ad:f2:
b2:b3:25:f0:ca:a2:b9:ad:14:1f:45:3c:ab:82:dd:61:da:49:
c0:88:37:d0:1c:86:41:e4:10:c9:0b:02:b7:77:64:f5:25:59:
39:38:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org