Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZzNexS2KULAbl3Tx7sBPpt8G4GI.roa
File: ZzNexS2KULAbl3Tx7sBPpt8G4GI.roa (raw, json)
Hash identifier: jahA58bZKPeVKh/eXqWhnnh8mBLcPPdKL9jes0xvrMw=
Subject key identifier: 67:33:5E:C5:2D:8A:50:B0:1B:97:74:F1:EE:C0:4F:A6:DF:06:E0:62
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1B3D0196
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZzNexS2KULAbl3Tx7sBPpt8G4GI.roa
Signing time: Tue 24 May 2022 09:55:40 +0000
ROA not before: Tue 24 May 2022 09:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60615
IP address blocks: 85.120.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456982934 (0x1b3d0196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 24 09:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67335ec52d8a50b01b9774f1eec04fa6df06e062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:1d:50:8c:26:ba:c6:42:b7:ee:4f:7d:f1:
31:10:70:ba:f8:51:d6:7b:23:f1:16:08:4b:b0:55:
34:0f:5f:67:bd:6d:ca:e4:dc:98:0e:f9:b8:53:bb:
37:58:50:56:22:a7:3c:2c:a3:57:39:ca:d5:13:7e:
60:9e:1d:05:91:88:cf:fc:5c:00:04:58:ed:fb:eb:
17:c5:5d:0e:82:70:fc:32:26:71:8f:c7:79:37:e3:
65:6d:44:12:69:9e:58:c5:ac:c9:2f:36:6f:63:75:
77:e8:10:e1:d8:18:c0:89:c9:00:17:ed:0d:64:69:
b2:08:a9:3a:d3:33:25:d0:42:64:fc:60:23:2e:83:
b8:27:2d:50:fc:58:95:14:19:a9:46:a3:8f:3d:f5:
4d:68:ab:fd:fd:c4:90:96:b6:23:75:cf:34:90:d4:
1f:31:90:09:ab:3c:62:e0:58:07:cf:03:a7:e3:bc:
f7:6b:fb:a3:24:c7:1e:40:dc:0c:78:39:aa:ea:33:
50:d9:ea:ea:da:e1:14:8e:a1:a0:e8:b9:d6:63:4e:
6d:4b:92:e2:cf:85:85:bc:ea:8f:18:1b:db:58:82:
06:3b:d7:67:e1:3e:c6:55:3b:29:43:28:44:8b:47:
45:70:f8:d4:a8:a0:36:a6:af:f1:07:9b:2d:e2:dd:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:33:5E:C5:2D:8A:50:B0:1B:97:74:F1:EE:C0:4F:A6:DF:06:E0:62
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ZzNexS2KULAbl3Tx7sBPpt8G4GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.232.0/23
Signature Algorithm: sha256WithRSAEncryption
00:27:ab:c7:83:9c:52:21:90:5b:a3:8e:2d:0c:84:9c:ba:7c:
7d:2b:c3:b1:3c:ae:af:73:ca:d8:eb:89:3f:a5:56:13:4b:dd:
5f:d8:52:8f:36:74:35:ab:e6:09:13:71:00:20:ba:dc:80:aa:
ff:da:4d:ef:33:46:b2:65:57:27:1f:b0:a1:e2:50:bb:62:81:
b6:a1:11:65:ad:99:3c:75:fd:6b:7a:02:ab:3e:2f:0b:1d:55:
f5:19:48:6a:33:ab:86:9e:bf:88:ab:1c:43:4f:b6:92:91:20:
87:97:71:df:57:ad:c3:3c:5d:93:6f:9c:b4:23:4c:dd:15:41:
78:9a:cc:bb:dd:81:22:c7:b2:33:ab:14:bf:46:8b:e4:19:a7:
d2:60:01:f3:8f:10:f4:ed:3f:db:b8:78:63:97:e4:d3:ad:53:
fd:3a:08:4c:62:8c:c4:cb:9b:52:f1:67:c7:2e:4e:cc:64:f3:
78:10:4f:8e:7a:fb:38:5f:d2:b9:5d:9b:93:d2:58:0e:c8:83:
38:59:2b:4a:e8:b4:2e:18:b6:5a:02:7e:4d:89:3c:97:cf:88:
77:52:ac:b2:58:c5:04:f4:8d:ad:f6:48:7d:f5:2a:53:6a:b5:
90:5a:f8:d6:c7:39:75:c8:26:be:6d:97:2c:87:f6:bd:d6:a6:
da:bc:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org