Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pZByE4RIWb7tAV0I9_KZQb0iOYE.roa
File: pZByE4RIWb7tAV0I9_KZQb0iOYE.roa (raw, json)
Hash identifier: otQPECNObjJSpKcoUXWOCp/+xEJi37W8DInBErBXi/8=
Subject key identifier: A5:90:72:13:84:48:59:BE:ED:01:5D:08:F7:F2:99:41:BD:22:39:81
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 092E21C1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pZByE4RIWb7tAV0I9_KZQb0iOYE.roa
Signing time: Sat 01 Jan 2022 05:55:27 +0000
ROA not before: Sat 01 Jan 2022 05:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31142
IP address blocks: 193.189.82.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154018241 (0x92e21c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 05:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5907213844859beed015d08f7f29941bd223981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a4:7b:2a:f5:36:6a:9f:ac:f9:8b:a2:c5:43:
21:6b:10:71:a7:08:d9:09:67:f4:cb:f4:c9:33:26:
cd:55:06:02:8c:26:fa:d6:08:1c:e3:ed:dc:f1:6f:
e1:0b:09:7c:8f:47:33:45:d4:fc:75:7a:d6:13:26:
fa:47:33:16:31:0f:68:a9:49:6c:e6:1c:01:0f:ec:
0b:d7:f9:7c:4c:1e:b8:25:2d:58:bf:36:d9:f3:83:
af:50:2a:de:61:08:55:62:6c:e8:6f:86:da:77:70:
e2:bd:35:45:d2:c0:2c:86:64:ed:28:a4:5e:25:3e:
e4:94:6c:67:5d:17:c5:1b:98:95:0d:31:c2:1f:ce:
04:dc:3e:dd:04:a0:17:cd:b6:18:eb:6a:98:c6:71:
f6:19:e7:a7:c8:d5:e5:c6:6c:59:41:1a:1f:93:37:
2a:2b:0c:9f:7a:e3:9b:bc:53:b0:03:9a:dc:13:5f:
20:0b:69:51:32:35:c2:81:e5:38:0a:90:8a:0b:d6:
d5:c4:91:48:c9:2f:a5:1a:17:8d:a4:3e:7b:8f:f1:
47:d5:15:a0:6a:b6:0a:26:6f:52:34:3e:7a:ee:99:
a5:cf:74:df:8c:47:52:12:86:f5:0d:6e:b6:e3:58:
7b:38:53:fd:52:51:aa:95:1b:0e:cc:98:22:88:38:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:90:72:13:84:48:59:BE:ED:01:5D:08:F7:F2:99:41:BD:22:39:81
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pZByE4RIWb7tAV0I9_KZQb0iOYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.82.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:88:ec:17:9a:19:43:6b:e0:68:cd:41:39:76:5c:be:79:91:
78:cf:4b:e4:71:a6:02:b3:d4:11:29:b3:ab:1e:df:ae:f3:cd:
1d:19:fc:3d:ef:96:b3:85:0c:19:e9:fe:81:98:cb:c4:96:b7:
83:75:a7:af:d7:8f:b1:18:69:85:9e:a3:67:cd:a1:93:0c:6a:
2c:54:79:a2:ef:1f:35:ff:91:63:6e:5d:8f:5b:43:86:eb:6c:
f6:5a:68:d0:51:59:8b:d7:3a:b0:3e:6d:00:43:f2:25:20:c9:
3b:6d:9d:cc:3a:ec:45:01:e3:06:97:46:60:b8:61:cc:ec:33:
cd:3b:98:44:0b:4c:21:b3:86:a5:1a:9d:58:c2:e6:a5:9e:95:
6d:c6:75:84:da:0c:1f:7d:75:7a:78:d3:3e:fe:a9:09:87:0a:
e6:31:bb:3e:2a:1e:d6:23:10:60:64:d6:50:6e:96:a1:04:d2:
f6:f5:9c:9d:44:dd:98:12:aa:c3:3a:de:81:6a:f9:4f:0a:c9:
d1:ec:6a:c2:33:45:23:8e:01:43:33:42:ca:98:21:4f:1b:d9:
9a:5e:fb:e9:4d:b4:f8:75:3c:18:b2:28:e3:d5:d9:b5:e9:67:
0a:da:f7:5d:8e:db:74:23:97:1a:3c:7f:e2:60:4c:85:3d:e9:
d5:21:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org