Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zuvSFxrcdlyogU6nn_vBcVqbDl4.roa
File: zuvSFxrcdlyogU6nn_vBcVqbDl4.roa (raw, json)
Hash identifier: 8B9oBazX3Xh78F5siEWeu1RvNXH3XA4BkDnqNL/POgg=
Subject key identifier: CE:EB:D2:17:1A:DC:76:5C:A8:81:4E:A7:9F:FB:C1:71:5A:9B:0E:5E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183FF17B599380704A2F783CB8D46DFC045
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zuvSFxrcdlyogU6nn_vBcVqbDl4.roa
Signing time: Sat 22 Oct 2022 09:48:07 +0000
ROA not before: Sat 22 Oct 2022 09:48:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:17:b5:99:38:07:04:a2:f7:83:cb:8d:46:df:c0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 22 09:48:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ceebd2171adc765ca8814ea79ffbc1715a9b0e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:15:17:3f:df:23:1c:bd:c5:f8:66:40:21:
25:92:16:68:64:b7:b4:a4:50:a2:45:30:75:c7:af:
2d:04:5b:31:23:e3:38:1c:0b:31:2a:90:5f:64:2d:
ec:69:0f:c6:b9:d4:2b:0b:7a:2a:41:6a:e1:3d:76:
ec:e9:fe:de:0d:12:54:14:2f:55:30:da:74:cd:90:
e6:ab:2c:e9:ce:16:7c:ac:04:3b:e7:e1:37:75:68:
70:d8:cf:0e:4b:ca:9f:87:0b:d9:7f:7b:2c:2f:b9:
e3:2d:b1:ee:d9:00:db:26:5c:2f:6a:24:18:70:98:
62:35:66:5b:7e:9e:90:c5:ad:5d:66:d2:80:38:f1:
fb:91:58:88:6b:5a:7f:c9:bc:20:de:50:43:0b:d5:
bc:44:7a:29:be:8e:2e:6a:24:bb:41:47:72:0e:e9:
16:79:b5:24:31:4d:5f:65:54:4c:42:ea:3a:53:f1:
48:8b:e6:66:85:37:e1:94:74:94:b7:3b:f3:53:dc:
a8:51:84:3b:9d:ba:5a:c0:49:55:f0:13:86:cb:84:
4f:62:63:c3:79:24:52:b7:bb:0d:c2:70:b8:3d:fb:
85:6a:ef:28:0e:8a:74:e6:27:ed:c5:2e:c0:26:7f:
20:14:d7:3c:8c:d7:85:73:19:0c:09:fc:fc:38:f8:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EB:D2:17:1A:DC:76:5C:A8:81:4E:A7:9F:FB:C1:71:5A:9B:0E:5E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zuvSFxrcdlyogU6nn_vBcVqbDl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.24.0/24
195.177.93.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3a:38:0b:ea:eb:9f:48:21:f2:c7:79:29:c9:e0:28:d4:79:
4b:3e:e4:5e:de:8b:f3:11:0c:d2:e5:fc:66:08:91:c9:c0:14:
2a:3e:02:e4:58:7a:ed:43:74:9f:2d:79:bc:4d:70:25:72:9c:
cf:4a:f1:a5:2b:45:84:42:93:32:6f:62:22:11:14:92:c7:52:
5a:d8:85:4a:1e:59:d7:78:46:30:5e:9e:e8:be:9a:48:b2:c4:
0f:74:a8:00:e2:99:80:56:19:9f:7a:a6:bf:86:c3:44:cf:24:
b3:3b:37:a6:aa:af:47:4c:59:96:60:2f:4e:6c:92:bf:52:95:
81:9a:63:33:02:e2:5a:f5:0b:d2:59:7d:08:cc:bb:22:37:01:
76:5b:c8:ee:4c:4b:e8:0f:1f:48:be:ca:3c:fd:91:5e:f5:c1:
49:47:42:13:30:a8:75:54:52:8d:4e:dd:72:ef:f5:f5:c3:87:
0b:b2:f9:23:ae:fb:25:64:f8:ac:0a:30:26:e3:5c:40:fe:a5:
00:d4:2f:c9:38:fe:53:ac:a2:35:c6:09:52:a2:a6:7a:f6:b3:
80:e9:23:4e:89:4b:15:d6:4c:5a:53:86:9e:64:03:60:be:1c:
26:a1:14:ea:b9:e5:54:0d:1a:7b:2e:63:60:52:3a:94:5a:4f:
bf:2e:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org