Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/ZlBH2ojts4tPSK2PH1l37c8x2hw.roa
File: ZlBH2ojts4tPSK2PH1l37c8x2hw.roa (raw, json)
Hash identifier: E/aTFJ6BQblHvKzoy456PJcNiFlg3wpXSuTVYvQast8=
Subject key identifier: 66:50:47:DA:88:ED:B3:8B:4F:48:AD:8F:1F:59:77:ED:CF:31:DA:1C
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 0ADE6C41
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/ZlBH2ojts4tPSK2PH1l37c8x2hw.roa
Signing time: Wed 08 Jun 2022 12:25:03 +0000
ROA not before: Wed 08 Jun 2022 12:25:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 194.140.230.0/24 maxlen: 24
2001:67c:144::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182348865 (0xade6c41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Jun 8 12:25:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=665047da88edb38b4f48ad8f1f5977edcf31da1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:4a:6b:1e:3c:3e:64:e9:ac:a9:c6:26:3d:
29:cf:96:1b:e6:6c:6c:a9:68:49:05:d6:b2:cb:f7:
c3:24:42:fc:bb:02:60:66:9d:b7:0d:cf:89:fe:54:
26:12:10:68:8f:57:17:8d:e9:88:41:68:a8:52:21:
09:44:6c:e6:f4:12:2c:d0:82:a7:a9:41:d5:d3:cf:
c0:4c:03:22:94:e7:6c:9e:ac:62:de:0f:91:e3:74:
68:4b:b1:3c:d2:ab:98:6b:87:68:ea:2a:3f:95:42:
75:a5:18:e3:37:a6:2e:43:84:fe:cd:45:a6:54:cd:
9f:1d:f2:cc:c1:2e:7a:99:cc:0d:06:42:4c:71:a5:
dd:cd:5a:3d:63:3e:3a:fa:82:b7:da:dc:b8:ff:af:
56:3a:03:77:03:ce:c8:fa:94:82:61:b3:17:6a:26:
01:67:5f:cd:be:0b:41:aa:bd:86:61:66:06:fb:79:
5f:73:d1:e4:00:3d:9d:b3:34:d8:bd:35:72:df:dd:
5b:fb:74:64:9e:d9:e6:67:38:eb:bd:d2:a0:6a:88:
51:c6:43:77:06:b2:54:24:e5:5f:5a:42:be:cc:56:
2d:3b:7a:83:24:e3:99:92:b2:81:9c:42:f6:55:80:
16:b6:5c:4f:97:3a:8a:b8:72:3d:df:66:88:38:ee:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:50:47:DA:88:ED:B3:8B:4F:48:AD:8F:1F:59:77:ED:CF:31:DA:1C
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/ZlBH2ojts4tPSK2PH1l37c8x2hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.230.0/24
IPv6:
2001:67c:144::/48
Signature Algorithm: sha256WithRSAEncryption
a0:aa:27:f4:d4:99:49:1d:a8:66:6c:f9:fc:c6:aa:56:64:79:
16:7e:e0:a9:a0:21:d5:51:08:04:65:e8:66:5b:7d:57:98:63:
c6:96:1b:1b:c3:8d:95:a7:ac:cb:39:a1:3f:e9:46:f5:9b:31:
9f:ad:83:b6:6d:f0:d0:1f:7f:97:33:3e:ae:5a:42:9b:44:47:
df:de:78:0a:2c:60:e7:8a:ae:34:cf:72:17:d6:31:de:e7:de:
65:63:34:ac:59:79:99:68:ac:79:82:1a:e9:ce:46:35:9d:25:
59:9d:77:54:a6:46:9e:af:e7:5b:39:b9:3e:05:f4:ca:79:61:
c6:df:43:dd:3b:1b:c5:b3:3b:52:08:f3:9a:31:7b:f0:1c:b6:
b5:c0:56:a7:a4:15:66:05:f3:e3:c9:bf:7b:0a:f5:2e:3a:56:
47:a7:10:53:c0:30:f9:b9:09:ec:40:20:40:43:5a:0d:56:ba:
77:73:74:c6:83:67:92:8a:fc:c1:ce:f2:7c:a3:72:f7:67:b6:
59:69:24:b0:d5:36:b1:21:b2:43:6a:4f:8b:09:7d:7b:19:70:
05:76:c0:f2:a3:50:ad:7e:e2:ad:85:fe:76:f6:78:b8:51:7e:
61:2d:18:7c:7c:09:36:9a:71:a8:69:47:8e:91:6e:5a:10:4e:
dc:53:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:20 2024 by rpki-client on console-fra.rpki-client.org