Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/zvhvh8-Qt5OFkHqMjJoSdzvoH24.roa
File: zvhvh8-Qt5OFkHqMjJoSdzvoH24.roa (raw, json)
Hash identifier: j+1JZoYM8iQrbLEuNs2CMVfLlbsmUxGqcZpdnyd/pto=
Subject key identifier: CE:F8:6F:87:CF:90:B7:93:85:90:7A:8C:8C:9A:12:77:3B:E8:1F:6E
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: F025E5
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/zvhvh8-Qt5OFkHqMjJoSdzvoH24.roa
Signing time: Sat 01 Jan 2022 13:07:01 +0000
ROA not before: Sat 01 Jan 2022 13:07:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2877
IP address blocks: 194.50.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15738341 (0xf025e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Jan 1 13:07:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cef86f87cf90b79385907a8c8c9a12773be81f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:d2:02:82:df:f6:69:8d:76:c1:bc:50:ca:
eb:04:2f:db:2f:cf:a1:c4:0f:3c:63:f6:33:4f:1e:
ab:25:ea:f2:ae:28:35:99:ec:68:bd:36:89:65:1c:
15:ea:d8:92:69:ee:5b:b5:da:a9:bc:ab:95:bf:bb:
fa:47:42:ba:df:55:1c:9a:61:94:bb:6b:79:6f:c1:
ed:5f:5e:cb:71:51:93:72:bb:5e:14:88:c5:e3:4d:
4e:98:94:e5:bf:69:92:e8:7b:dc:57:e3:5f:61:18:
b1:d5:d4:c6:5a:19:e4:f3:34:a6:00:68:99:17:26:
2d:56:12:1a:69:a5:36:95:6b:19:f5:70:18:9c:02:
0f:9f:0a:4e:d3:82:0d:3d:9c:0e:e7:b4:82:49:79:
12:20:14:43:e7:7d:74:e7:f5:c6:7a:7a:22:81:41:
62:7a:c4:4b:c8:88:43:03:0b:b8:78:f6:69:ae:02:
c9:f3:18:4a:ec:92:35:e3:e5:29:8f:bc:0c:be:ec:
6f:27:e7:7a:90:a0:67:cc:77:da:dc:05:54:2e:06:
14:5c:bb:1f:f4:67:0d:81:67:0b:03:ec:b9:a6:ad:
33:bf:90:fa:c8:ed:3b:33:4e:e8:93:80:45:2f:74:
be:39:f7:ba:8f:9d:d7:62:a6:13:44:48:79:c0:3f:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:6F:87:CF:90:B7:93:85:90:7A:8C:8C:9A:12:77:3B:E8:1F:6E
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/zvhvh8-Qt5OFkHqMjJoSdzvoH24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.105.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3d:df:80:6c:3e:f6:ec:20:6e:91:e3:b5:c0:f9:cf:9c:55:
11:77:75:dc:b2:b4:b7:36:ad:82:70:14:08:fc:4b:01:77:cd:
6c:8e:cb:73:a5:fe:fb:0c:8f:fa:15:3f:90:11:00:10:a7:54:
89:0f:fa:ed:eb:16:76:25:8e:9e:3b:13:81:6d:f7:4e:ae:e4:
1e:77:22:35:90:ec:c5:24:3b:60:19:0d:fa:71:26:bc:c0:b0:
fc:91:c6:bf:f2:02:be:f4:66:e8:18:4d:ca:02:9a:6e:d1:4a:
8c:8a:2e:23:fa:02:00:a2:88:a2:15:17:59:74:e7:d9:66:55:
84:89:cb:d7:fd:41:79:b3:9b:87:af:a3:40:a3:e1:09:d1:12:
a3:18:0e:e6:82:2e:a1:aa:90:ab:81:c2:77:de:a4:ea:cf:ed:
52:d3:51:42:c2:bc:85:c0:08:c6:1c:03:ee:0a:2c:75:44:1b:
bd:bf:1a:68:f6:b2:73:f3:73:45:fb:03:4a:ad:30:1b:7e:9c:
e6:09:b3:61:00:fc:6e:b7:79:29:ac:c7:7f:80:89:34:a0:6c:
52:fb:dd:28:c6:27:37:0a:2c:59:a6:3a:8f:28:dc:91:58:4e:
59:18:f1:3e:5c:61:78:b6:b9:52:50:31:fd:3d:ec:f1:46:80:
82:6e:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:34 2024 by rpki-client on console-fra.rpki-client.org