Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/zorfNtrenBkGc7EhY5PzvCkMG1E.roa
File: zorfNtrenBkGc7EhY5PzvCkMG1E.roa (raw, json)
Hash identifier: siHKR02vVBdnFFoSYmBmrYv8haN1moZzNXrvflFyBiM=
Subject key identifier: CE:8A:DF:36:DA:DE:9C:19:06:73:B1:21:63:93:F3:BC:29:0C:1B:51
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 06BE6AB5
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/zorfNtrenBkGc7EhY5PzvCkMG1E.roa
Signing time: Sat 01 Jan 2022 12:02:29 +0000
ROA not before: Sat 01 Jan 2022 12:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49143
IP address blocks: 195.88.186.0/24 maxlen: 24
195.88.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113142453 (0x6be6ab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 1 12:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce8adf36dade9c190673b1216393f3bc290c1b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:f1:f4:ee:c2:4c:f8:a9:9c:e9:d8:5a:d5:
58:f4:2a:56:c1:5c:15:57:ab:73:12:6d:39:9b:2b:
be:db:53:1c:75:07:b7:86:ad:57:f4:ae:6f:d5:24:
68:e2:7a:f6:de:d3:db:aa:a8:67:00:d8:b6:38:a4:
8f:6a:e6:e0:b4:3a:fd:87:81:58:50:f3:64:5d:f5:
ff:4f:19:1f:bc:16:6c:6c:7b:be:f1:9c:df:3a:09:
8b:10:e8:ae:dc:d3:b4:c5:01:1b:e5:31:40:fb:71:
6d:10:82:2e:5d:6b:fa:ac:71:a2:67:aa:f3:44:ef:
90:b8:db:e6:e6:a9:99:e9:69:8a:94:4b:80:b0:b2:
db:0b:fd:40:67:03:32:b2:25:f3:7f:39:82:65:bd:
1a:e5:4a:28:60:0f:87:e3:ae:b9:51:53:a4:fd:03:
26:08:72:20:a2:0a:99:ec:1a:3e:7a:63:4a:1a:c7:
19:32:95:d4:b2:23:a6:be:13:52:91:36:ad:0a:d4:
cf:e7:04:36:72:f2:8e:f5:cb:38:57:e2:6e:25:c7:
73:f7:06:bc:39:25:56:54:71:c1:9d:20:e6:08:12:
9a:29:5c:29:52:ed:36:ff:45:b7:27:37:f3:85:78:
88:30:6e:8d:6e:a4:b8:9f:ea:d4:80:69:c9:80:61:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:DF:36:DA:DE:9C:19:06:73:B1:21:63:93:F3:BC:29:0C:1B:51
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/zorfNtrenBkGc7EhY5PzvCkMG1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.186.0/23
Signature Algorithm: sha256WithRSAEncryption
35:e4:ba:32:fb:50:1b:eb:93:69:7f:8c:66:b2:0a:e0:ef:6a:
63:6a:84:8a:2a:46:0c:88:e7:52:b6:8d:ba:4f:f7:c1:6a:83:
61:88:47:f3:93:9c:bc:15:5a:37:20:07:25:78:7d:ea:47:e4:
83:65:2f:29:cb:1e:b5:c2:b1:07:ad:6f:88:66:25:0c:6e:16:
ca:a1:7f:e6:db:92:8b:25:69:f6:a7:4f:95:04:65:93:c0:46:
ef:a5:7f:56:18:53:b2:4b:73:c4:f1:73:d8:10:01:4a:46:1b:
c7:5f:c4:8e:8f:20:0d:00:24:a6:7a:8e:9c:b6:35:50:e6:fe:
0b:a8:61:b7:63:6e:82:6f:c5:cb:32:4d:9b:ed:82:72:1e:8e:
25:c6:da:d5:c4:aa:96:69:00:e3:00:50:19:76:13:d1:d8:18:
6b:1d:4c:5f:3a:17:2d:8b:44:8f:15:f0:c6:c0:d6:99:6d:a0:
d3:2d:84:0a:da:4b:d7:cf:84:0f:39:e6:49:66:4a:f6:34:1f:
82:3f:b5:04:2d:58:c0:78:7e:5a:ec:85:ed:98:f4:4c:53:e4:
58:bc:17:04:bc:b6:7e:6a:84:e1:c7:7b:4b:10:f2:c2:8b:99:
e5:37:ab:c4:b5:b5:d2:46:e1:ab:49:18:a1:8f:8a:b4:c0:53:
9d:8a:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:27 2024 by rpki-client on console-fra.rpki-client.org