Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zrPZsW9DDau6S-wPghE3vaaUdIg.roa
File: zrPZsW9DDau6S-wPghE3vaaUdIg.roa (raw, json)
Hash identifier: w75QQVskRoRvia+VD+VpgXa6+9T3JA1ZLZjEsH3ozfM=
Subject key identifier: CE:B3:D9:B1:6F:43:0D:AB:BA:4B:EC:0F:82:11:37:BD:A6:94:74:88
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09314303
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zrPZsW9DDau6S-wPghE3vaaUdIg.roa
Signing time: Sat 01 Jan 2022 16:00:56 +0000
ROA not before: Sat 01 Jan 2022 16:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211617
IP address blocks: 194.56.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154223363 (0x9314303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ceb3d9b16f430dabba4bec0f821137bda6947488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:c8:06:54:c5:bd:2d:58:b3:11:61:31:01:
dc:9f:95:5a:49:8d:12:f2:7e:46:c3:5f:ec:f2:16:
35:90:b7:19:0b:c0:3e:4b:e0:0f:b6:23:67:08:8e:
55:3d:3a:f0:a1:62:87:49:b4:2a:02:bb:83:dc:1e:
f2:fa:68:e3:8b:60:ee:3d:9b:8e:05:6d:d3:57:b0:
1a:a6:25:ab:b3:35:57:ba:1b:b9:18:e1:f4:f6:58:
06:f3:b2:e8:24:d9:43:90:80:d7:f8:06:62:92:f6:
a2:f6:f8:6a:94:40:13:f1:22:03:b8:b4:7c:c0:f1:
96:fc:0b:fd:b5:36:b9:57:2a:0a:34:0a:a2:93:61:
3b:1c:32:c6:47:87:7b:c6:f5:94:4d:34:46:0e:4c:
41:08:4a:49:b9:18:6d:f8:f2:1a:27:61:fe:e2:7d:
7f:bb:43:9c:b6:e1:62:97:08:5f:fa:30:f7:8f:18:
3d:8f:81:38:96:e6:cd:57:0b:94:54:2d:dd:e0:e4:
da:6f:ac:e8:1f:79:33:11:bc:38:02:b3:91:16:71:
a3:f8:b3:4d:aa:45:ff:09:34:6a:37:49:23:bd:00:
d6:40:4d:0b:1a:9a:94:0c:82:bb:c9:29:f1:c7:9e:
bb:47:c2:40:9f:a7:90:94:7b:22:aa:0a:aa:64:1d:
9b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:D9:B1:6F:43:0D:AB:BA:4B:EC:0F:82:11:37:BD:A6:94:74:88
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zrPZsW9DDau6S-wPghE3vaaUdIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.226.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fd:38:a7:24:0a:56:f0:0e:20:d9:9a:ba:88:ef:2f:0b:c1:
f8:1d:c1:f3:00:5a:4a:51:e4:df:aa:4f:39:75:94:87:42:fc:
1f:9a:16:2c:a1:2a:24:ca:01:3d:c7:68:4d:8f:fb:17:0b:93:
29:cd:cd:50:f1:cb:18:2e:77:e9:86:cf:65:ad:3a:fb:94:6c:
c7:7a:0b:3b:a9:56:d1:6e:1b:53:1f:b1:33:07:50:60:c6:d8:
46:56:63:ba:42:db:c5:aa:cb:81:1d:fc:78:bb:f4:13:93:83:
8f:c6:66:d0:95:3f:a8:81:16:44:c4:66:64:94:fe:e0:98:5a:
87:02:7b:8a:61:de:27:17:11:4c:81:2a:53:d6:d0:09:57:ec:
cc:3e:15:6e:09:f4:04:6d:41:eb:5e:74:98:a1:ab:f4:55:fe:
f6:33:67:6c:a2:90:95:d1:57:5b:3f:f6:27:b6:fb:7e:06:00:
80:7c:26:fc:11:e4:60:58:b2:2c:7a:b1:f7:2e:d5:89:a3:18:
3d:2d:b2:92:9f:b4:fd:c8:47:0e:d2:46:93:dc:50:41:99:e0:
7a:58:26:68:d6:4a:a0:c5:df:78:10:1a:7c:f6:fb:ec:47:fa:
5f:b0:50:f0:42:f7:6b:95:23:36:a6:13:e4:7b:c3:81:04:9b:
84:65:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org