Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zS5Ok2_F1a3Z7AajEJuZzaPEDEA.roa
File: zS5Ok2_F1a3Z7AajEJuZzaPEDEA.roa (raw, json)
Hash identifier: agyCpBJB1T9Swm+EMRd10YQYXnwEjGqILxPjNuUYDfs=
Subject key identifier: CD:2E:4E:93:6F:C5:D5:AD:D9:EC:06:A3:10:9B:99:CD:A3:C4:0C:40
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 04778A3F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zS5Ok2_F1a3Z7AajEJuZzaPEDEA.roa
Signing time: Wed 02 Mar 2022 10:29:11 +0000
ROA not before: Wed 02 Mar 2022 10:29:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34826
IP address blocks: 195.187.130.0/24 maxlen: 24
195.187.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74943039 (0x4778a3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 2 10:29:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd2e4e936fc5d5add9ec06a3109b99cda3c40c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:01:1b:88:6e:ab:17:0e:0a:a0:0a:56:27:
6e:d0:12:bf:90:69:aa:cd:b9:8c:1b:7d:c2:34:4d:
65:d3:ca:4f:2f:08:99:a5:d2:39:2a:00:50:f4:80:
24:d1:99:94:66:4c:d8:e6:96:68:b6:91:b1:a6:40:
4d:90:3a:d7:17:2b:d2:0f:80:de:e7:8e:13:16:38:
17:1f:fa:e5:c0:b0:67:c8:94:d1:15:d7:72:35:dd:
03:88:21:41:5b:3d:f3:d6:c5:2d:e4:25:8e:5f:5e:
05:79:06:a9:2c:ca:65:cc:0d:c1:4a:73:cd:38:67:
24:d7:3a:05:78:e3:de:45:25:d2:a6:37:1b:ff:ab:
0c:0c:9c:c4:71:bb:a4:16:a9:14:fe:c4:98:82:36:
fb:99:59:00:a8:fd:91:cc:98:10:3d:ae:7c:da:a1:
2c:eb:21:0e:6e:17:d9:a6:e5:88:21:3a:4e:91:88:
f7:b9:d1:a5:00:f7:12:71:38:32:fb:ac:d4:4c:55:
35:2f:9b:2b:b0:a7:1f:4c:97:b5:94:eb:af:80:a9:
e9:b8:32:2e:cb:0f:3a:82:a6:38:47:df:c1:aa:40:
37:18:91:d3:71:92:32:fc:7f:92:5a:d1:97:d2:03:
38:7e:6b:01:2b:8f:55:26:dc:5b:28:89:4e:8c:21:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:4E:93:6F:C5:D5:AD:D9:EC:06:A3:10:9B:99:CD:A3:C4:0C:40
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zS5Ok2_F1a3Z7AajEJuZzaPEDEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.130.0/24
195.187.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4a:65:e5:7f:5c:30:30:d9:50:e4:c8:8e:f9:ff:79:aa:3c:
64:c0:30:28:b1:24:97:1c:0f:9c:97:11:f7:e1:17:56:fe:8b:
15:ee:c3:1e:0f:6f:1d:0b:7b:17:b6:d4:49:d2:bb:e1:53:c2:
f9:c2:05:15:3a:8d:59:9d:87:f2:79:63:78:1a:07:16:91:2c:
09:b0:3c:89:db:05:6f:6e:2a:e2:1f:2e:6a:af:c9:21:23:c7:
aa:f0:89:5c:58:a2:c6:24:76:dc:f3:2d:14:87:71:d1:1c:27:
c0:8e:8d:d5:af:70:2c:07:84:2a:ba:f0:23:e9:db:ef:20:8c:
33:bb:52:25:0a:c7:26:52:5a:bf:de:a0:16:35:7a:a4:5f:ba:
43:e2:1e:ec:b0:98:c8:9b:63:e0:06:90:cd:0a:86:50:4d:2b:
6e:32:69:34:8c:d9:fd:aa:63:97:9e:29:13:65:df:81:a8:1e:
9d:ff:ff:e2:7e:bd:06:06:a0:58:f1:b2:c9:21:c8:f9:51:f5:
a5:63:0e:02:82:69:02:3e:91:67:bf:d8:9d:a9:52:54:8d:9f:
13:76:00:e0:f1:14:3c:3a:32:9b:47:c7:7f:2a:a7:11:fe:de:
74:77:a9:0b:2f:ea:fd:2f:e0:33:f1:d8:99:18:a0:dd:bf:e6:
bb:aa:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org