Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Z2CpORYph6zwJcTBXTf406TLHDQ.roa
File: Z2CpORYph6zwJcTBXTf406TLHDQ.roa (raw, json)
Hash identifier: zhTuZQFs9m1qOghjN59FABoP+/U7IwXoIwnt4k2HwEI=
Subject key identifier: 67:60:A9:39:16:29:87:AC:F0:25:C4:C1:5D:37:F8:D3:A4:CB:1C:34
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 381001E1
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Z2CpORYph6zwJcTBXTf406TLHDQ.roa
Signing time: Sat 01 Jan 2022 02:57:32 +0000
ROA not before: Sat 01 Jan 2022 02:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 194.230.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940573153 (0x381001e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 02:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6760a939162987acf025c4c15d37f8d3a4cb1c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:b6:2d:b9:a9:96:a8:87:38:66:ca:f1:f8:
40:73:79:a2:23:ae:d6:6e:3c:03:21:e3:36:33:5e:
92:48:f0:fb:61:88:7a:f7:80:e5:e2:b9:83:e3:75:
42:db:84:02:1a:50:00:7e:8a:d8:8d:ef:f7:bd:d7:
e1:a4:e4:16:a7:19:5f:20:0a:f7:c8:90:aa:03:af:
5d:88:7f:7e:97:93:0a:61:80:74:3e:2c:8a:25:0e:
50:76:da:37:09:17:bc:50:9f:67:4b:16:c5:49:9b:
43:a6:62:0c:19:ba:34:14:76:b5:bc:06:fe:6e:c1:
23:e0:62:02:ae:a0:39:3b:78:33:41:fb:0b:88:43:
66:b8:c1:39:7e:42:7a:86:7b:f5:99:ab:84:b6:ed:
5f:4a:ae:0d:55:d6:a9:54:ef:ae:2f:dd:00:93:7b:
44:65:65:a5:bd:f7:90:ed:03:92:dc:75:2d:35:d4:
90:d1:6a:78:b6:9e:76:e0:95:4d:69:fb:f4:e4:f1:
a1:14:8a:b4:0f:ba:9f:59:5f:37:43:96:41:51:9e:
40:00:f7:a7:10:5d:cf:e4:e3:d1:8e:66:eb:91:61:
cd:9f:ee:f4:14:b7:b8:70:4d:08:9c:4d:1e:9c:a7:
8d:7c:a9:f9:d5:02:12:d1:bc:29:6f:a6:af:d3:65:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:60:A9:39:16:29:87:AC:F0:25:C4:C1:5D:37:F8:D3:A4:CB:1C:34
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/Z2CpORYph6zwJcTBXTf406TLHDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.230.56.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bc:28:85:29:b3:1e:a5:c2:c3:34:fa:c4:54:b8:f9:6a:fa:
a8:f7:a3:18:8d:27:ca:65:82:9c:e9:9b:48:57:c2:7c:39:b0:
26:40:23:44:a2:bf:34:dd:0a:7e:4b:66:e4:26:3e:bc:c6:b2:
73:81:22:8b:5c:31:44:fe:e8:e3:b5:67:b2:8f:9a:ae:d6:4c:
7c:cb:20:10:bd:70:58:48:f7:ff:fc:79:62:1c:aa:29:1c:95:
f8:82:5d:a0:7d:93:df:b8:dc:83:47:6a:c2:8a:6a:e5:0c:fb:
96:8c:32:cf:96:d9:4d:89:9a:92:27:ec:5a:60:74:a5:ff:9f:
2f:81:a2:fe:39:00:4f:65:17:b7:a8:a6:41:35:d5:92:ae:e5:
0f:b2:64:25:7b:90:96:e3:02:c9:5a:e9:37:9d:cc:ad:69:86:
99:87:7d:3e:05:65:1e:6f:13:c4:1c:07:04:d7:7e:5b:12:45:
a6:f5:6d:12:81:0d:e4:1b:17:aa:4b:04:5d:57:02:75:02:7a:
57:b5:89:e9:84:cd:8c:ed:30:2b:85:fe:6d:e8:83:3b:d9:48:
81:b2:37:73:f0:52:15:d0:c2:8b:86:c8:54:6f:00:03:84:b0:
99:42:a2:98:e8:7a:71:7d:43:b8:d6:d8:af:fb:33:bb:91:53:
29:9f:6e:c0
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOBAB4TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MTVkYmMwMDQzM2UyOWYyYWRlYjAzOGZlYTJmYmQ3MDQ4ZmI2MzJmMB4XDTIyMDEw
MTAyNTczMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjc2MGE5MzkxNjI5
ODdhY2YwMjVjNGMxNWQzN2Y4ZDNhNGNiMWMzNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANK/ti25qZaohzhmyvH4QHN5oiOu1m48AyHjNjNekkjw+2GI
eveA5eK5g+N1QtuEAhpQAH6K2I3v973X4aTkFqcZXyAK98iQqgOvXYh/fpeTCmGA
dD4siiUOUHbaNwkXvFCfZ0sWxUmbQ6ZiDBm6NBR2tbwG/m7BI+BiAq6gOTt4M0H7
C4hDZrjBOX5CeoZ79ZmrhLbtX0quDVXWqVTvri/dAJN7RGVlpb33kO0Dktx1LTXU
kNFqeLaeduCVTWn79OTxoRSKtA+6n1lfN0OWQVGeQAD3pxBdz+Tj0Y5m65FhzZ/u
9BS3uHBNCJxNHpynjXyp+dUCEtG8KW+mr9NlvEcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRnYKk5FimHrPAlxMFdN/jTpMscNDAfBgNVHSMEGDAWgBQRXbwAQz4p8q3r
A4/qL71wSPtjLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VWMjhBRU0tS2ZLdDZ3T1A2aS05Y0VqN1l5OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvNjVhNzFkLTAyMzYtNDRkNS04Y2U5LTIyOWI0YWU3NDJkZS8x
L1oyQ3BPUllwaDZ6d0pjVEJYVGY0MDZUTEhEUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
NjVhNzFkLTAyMzYtNDRkNS04Y2U5LTIyOWI0YWU3NDJkZS8xL0VWMjhBRU0tS2ZL
dDZ3T1A2aS05Y0VqN1l5OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMLmODANBgkqhkiG9w0BAQsFAAOC
AQEAArwohSmzHqXCwzT6xFS4+Wr6qPejGI0nymWCnOmbSFfCfDmwJkAjRKK/NN0K
fktm5CY+vMayc4Eii1wxRP7o47Vnso+artZMfMsgEL1wWEj3//x5YhyqKRyV+IJd
oH2T37jcg0dqwopq5Qz7lowyz5bZTYmakifsWmB0pf+fL4Gi/jkAT2UXt6imQTXV
kq7lD7JkJXuQluMCyVrpN53MrWmGmYd9PgVlHm8TxBwHBNd+WxJFpvVtEoEN5BsX
qksEXVcCdQJ6V7WJ6YTNjO0wK4X+beiDO9lIgbI3c/BSFdDCi4bIVG8AA4SwmUKi
mOh6cX1DuNbYr/szu5FTKZ9uwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org