Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zmkCEmwdRypvwGPVhXkx0CnniM4.roa
File: zmkCEmwdRypvwGPVhXkx0CnniM4.roa (raw, json)
Hash identifier: X9ztDTcFyA/yvB0v9aFHRQWctq4tkD8/CePgVJtExbI=
Subject key identifier: CE:69:02:12:6C:1D:47:2A:6F:C0:63:D5:85:79:31:D0:29:E7:88:CE
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0182F2A2EA860A34B3A121FD37480ADCFE3F
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zmkCEmwdRypvwGPVhXkx0CnniM4.roa
Signing time: Wed 31 Aug 2022 06:42:19 +0000
ROA not before: Wed 31 Aug 2022 06:42:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 194.233.146.0/24 maxlen: 24
195.180.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f2:a2:ea:86:0a:34:b3:a1:21:fd:37:48:0a:dc:fe:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 31 06:42:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce6902126c1d472a6fc063d5857931d029e788ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:86:8d:d5:0e:89:5c:09:52:22:6a:92:6a:
a0:a2:8f:c8:23:07:cb:10:85:df:b0:53:a0:2a:59:
11:71:a7:c8:60:c8:18:e4:dc:18:5a:74:e2:ec:ee:
b1:c9:67:1c:c3:35:03:8a:b5:2f:0d:7b:b2:28:f0:
8d:8d:b4:8b:0e:6e:43:8f:c6:48:82:24:d6:f8:e9:
f0:c3:a0:8c:19:8d:d4:b6:e8:68:fa:74:7c:34:07:
6c:e4:81:42:29:68:5b:e7:e1:af:d9:8c:bc:6b:c8:
ff:53:91:f3:29:b8:b0:a4:ce:19:63:2f:8e:47:41:
60:6f:c9:67:81:de:18:1b:0f:42:49:c5:e0:bb:18:
b4:2f:ed:26:0f:af:86:ee:22:35:16:ef:35:ad:ea:
ac:79:33:25:4f:95:ab:21:30:2e:7d:63:cf:39:d7:
7b:54:5b:73:43:07:10:84:ac:c8:8e:8f:cb:4b:ff:
2d:5c:d6:f2:3e:24:cb:41:45:ab:39:91:fd:36:29:
3e:7a:ff:f1:67:b2:bb:e2:58:87:fa:16:95:fa:f0:
3b:16:4d:65:28:f4:36:98:d3:2b:22:90:e0:2b:23:
cd:96:be:de:a9:1b:45:11:1d:90:4f:6a:fd:10:e9:
a4:05:7c:31:72:b8:b0:46:eb:39:b2:c1:06:a6:f9:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:02:12:6C:1D:47:2A:6F:C0:63:D5:85:79:31:D0:29:E7:88:CE
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/zmkCEmwdRypvwGPVhXkx0CnniM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.146.0/24
195.180.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9c:c6:83:3a:b0:6e:19:48:f7:a3:ae:03:f8:b7:49:9c:a0:
9a:3a:49:f2:ab:3c:a0:1c:f1:29:23:a1:aa:d2:50:05:3b:a6:
67:15:cc:66:2f:08:18:88:4a:ab:8e:12:0c:44:35:15:d0:2b:
5c:3d:24:5f:3f:c8:ec:27:4c:a2:b7:66:98:fd:79:a7:6b:66:
33:44:42:f8:70:c5:9a:a7:0a:b9:45:0a:54:80:f2:fa:7a:17:
b5:d8:b5:a2:76:99:c5:9d:81:16:42:71:fc:25:12:a2:5e:7f:
59:96:e5:a6:00:da:44:83:96:fc:12:6c:e1:1b:17:24:57:a5:
0f:d1:b8:90:ac:d7:d4:6f:09:c4:af:b9:ad:d6:c6:f8:48:71:
da:9b:43:6f:80:ce:4d:7d:0d:37:1d:5d:6e:f5:4e:59:29:8e:
93:8b:a5:e6:65:23:03:96:48:a1:c8:5c:5c:c6:18:d1:2d:26:
53:f5:e8:07:89:d5:55:5a:e2:74:78:a1:73:02:1a:7e:9c:c5:
a9:9a:3d:a6:d7:9b:5e:42:fd:d9:45:fd:07:2b:1a:ff:26:b5:
48:cc:31:f4:17:3f:7d:48:01:94:f1:b0:b4:58:9b:2d:ad:91:
c9:e2:94:3c:98:e7:bc:b2:1e:8c:90:d5:78:c4:2e:2a:20:c5:
a0:85:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org