Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zgRLaVE207ocYSoPRQanAL5UV0A.roa
File: zgRLaVE207ocYSoPRQanAL5UV0A.roa (raw, json)
Hash identifier: qAgEhwhHJGghTYa/rubEwCM7Z1uZXnPXxapqDz7bZmE=
Subject key identifier: CE:04:4B:69:51:36:D3:BA:1C:61:2A:0F:45:06:A7:00:BE:54:57:40
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0C923647
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zgRLaVE207ocYSoPRQanAL5UV0A.roa
Signing time: Sun 20 Mar 2022 10:10:39 +0000
ROA not before: Sun 20 Mar 2022 10:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48266
IP address blocks: 194.233.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210908743 (0xc923647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Mar 20 10:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce044b695136d3ba1c612a0f4506a700be545740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:e4:b1:99:6f:ac:67:72:04:1f:62:41:ee:
ca:57:70:b0:e1:3a:6b:b2:03:8e:3b:98:0d:15:3a:
fe:f3:ca:24:b4:bc:de:20:1e:b5:f8:1a:68:86:e9:
06:d0:d4:e6:76:c2:f7:e6:09:c3:38:8b:d9:79:9d:
85:22:1c:b6:0b:4e:8b:ee:ce:5b:d6:e7:36:da:e1:
47:a1:55:cd:da:be:01:72:ae:69:72:67:6c:ad:d6:
86:a6:bf:41:e4:21:a2:0c:db:e9:0b:b7:1c:bc:66:
f8:ef:03:51:9f:9e:2b:15:84:4b:32:77:93:fa:d9:
4a:93:7c:7e:11:52:cf:bf:53:d3:3c:0d:6f:d8:f9:
12:19:bd:0f:6e:10:3e:72:01:cf:1e:ff:5b:36:d1:
97:dc:78:40:9e:3b:1e:4f:fa:05:b9:9b:e3:4e:fd:
ba:02:7a:fd:b1:b7:1b:a1:ce:a3:aa:e0:6c:d9:20:
18:87:0d:66:5d:51:80:0d:de:a2:7b:ff:5b:68:12:
e8:4e:5d:29:66:de:50:0b:ad:b1:fd:b8:4c:47:15:
ad:10:08:ff:17:07:5b:04:fc:30:0a:b9:1e:f0:c5:
40:82:86:8e:d4:cb:1f:9f:94:ff:35:9e:8d:4f:34:
07:15:a0:04:95:cf:5e:cd:c5:bd:cf:95:29:b8:fc:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:4B:69:51:36:D3:BA:1C:61:2A:0F:45:06:A7:00:BE:54:57:40
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zgRLaVE207ocYSoPRQanAL5UV0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a8:1a:2a:bb:60:48:e7:e9:b8:d5:c1:ab:07:7d:2d:da:4e:
93:d8:d8:e4:7b:f4:34:cb:74:02:e2:ed:b2:89:d5:65:5f:91:
e8:d7:d0:3e:3a:24:66:ab:e8:ed:f6:03:9a:3f:b1:7b:5d:c1:
49:fc:f7:54:67:4a:a6:4c:db:0d:33:2a:bf:6a:c5:17:93:68:
25:19:85:b5:d9:d7:61:1c:b0:da:d6:38:d7:fe:04:53:e0:a6:
ff:ba:25:37:d0:3c:5c:dd:e3:24:e3:e8:28:24:28:87:a2:f0:
e0:47:e0:e1:f8:9c:03:77:bb:ea:84:09:46:5c:20:6d:44:f2:
e7:e8:b6:99:c8:df:66:24:29:66:df:fe:00:14:fb:24:e3:76:
c1:d0:80:89:2f:cb:29:1f:5b:8b:5d:23:d0:91:53:ef:75:aa:
2c:00:74:87:e0:b9:56:b2:d1:99:6b:58:9c:ca:e2:24:61:db:
2a:12:3f:b1:29:50:35:c2:93:fa:c3:52:32:8c:c4:f0:ec:99:
2e:1b:71:69:67:43:8c:cd:ed:6c:62:78:20:1e:f0:c1:36:2f:
f6:a7:1c:5a:87:78:2a:e3:dd:8a:cf:df:aa:35:a4:51:52:8a:
17:32:0a:da:38:3b:19:6b:fb:61:ab:ed:45:95:83:83:7c:50:
7e:39:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org