Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ZA19Xsh-6pvaJKoCjcv4qJijstk.roa
File: ZA19Xsh-6pvaJKoCjcv4qJijstk.roa (raw, json)
Hash identifier: I2WkR9vNVshZHAu88iaU5mlcK9y5w3B7WBq/vTJTqRM=
Subject key identifier: 64:0D:7D:5E:C8:7E:EA:9B:DA:24:AA:02:8D:CB:F8:A8:98:A3:B2:D9
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 031E5CDF
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ZA19Xsh-6pvaJKoCjcv4qJijstk.roa
Signing time: Sat 01 Jan 2022 13:59:23 +0000
ROA not before: Sat 01 Jan 2022 13:59:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395886
IP address blocks: 193.227.121.0/24 maxlen: 24
45.153.9.0/24 maxlen: 24
45.153.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52321503 (0x31e5cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=640d7d5ec87eea9bda24aa028dcbf8a898a3b2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:55:c9:4f:71:d7:90:c9:92:05:8e:ca:f4:
ab:90:96:f9:d7:45:34:28:d5:85:0b:59:f0:1d:0b:
fb:47:22:a7:f1:6b:ca:13:0f:ab:d5:09:9e:00:41:
2b:97:4f:f7:e6:4a:4e:7b:a5:e0:db:ff:55:4c:63:
99:08:1e:9a:3d:39:e4:30:90:08:e1:7c:9b:87:36:
99:da:5f:b7:4b:e3:c9:af:f3:7e:e8:68:9c:4e:a6:
83:18:99:7a:f2:01:ce:8d:1d:4a:88:e4:a3:b7:4f:
c5:55:64:c5:9f:0d:8e:04:c3:ed:7f:36:56:2a:3f:
6e:22:97:b8:cd:62:c1:77:27:a1:91:53:f4:03:7e:
f7:a4:bd:db:ea:75:1a:11:ac:01:c1:4a:f3:15:f0:
4e:e7:1d:74:c5:55:9e:e1:fa:66:11:e5:e0:f0:72:
1e:61:e1:d5:9d:8c:f8:b2:a3:18:a6:94:b8:05:ad:
7c:4c:65:b3:28:d7:a1:59:82:85:5e:65:b0:14:a1:
75:75:4a:7d:2c:16:f9:15:56:68:40:c0:a1:1f:ff:
32:52:f9:73:38:48:85:e6:aa:e9:6c:32:67:1d:ae:
83:ef:ac:cf:ad:b6:62:05:6e:b7:d8:c1:7a:01:88:
54:d3:c7:5e:ac:39:b0:d4:2e:98:01:a4:82:09:9d:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:7D:5E:C8:7E:EA:9B:DA:24:AA:02:8D:CB:F8:A8:98:A3:B2:D9
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/ZA19Xsh-6pvaJKoCjcv4qJijstk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.8.0/23
193.227.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:04:32:64:db:df:d3:c8:23:7f:45:26:a0:8a:4f:24:c6:3f:
1a:5b:e2:f3:a8:f2:b9:4d:fc:c6:7e:a0:7e:1b:c6:2b:d1:2b:
81:15:08:df:73:d1:3f:9c:09:05:50:19:92:84:e3:07:ea:47:
75:8f:03:c8:95:f2:3b:65:4e:a9:d8:59:61:ee:9e:a1:00:4b:
ce:3d:f1:d1:5a:47:21:26:b0:52:64:b7:4c:d6:dd:6a:2f:5a:
65:31:43:cf:ad:c8:71:fb:76:82:3d:06:8b:8d:01:8d:fb:54:
65:f2:72:4c:9d:47:0a:44:55:77:ef:9c:ad:ff:85:1f:f3:59:
ef:b8:66:b9:68:f7:76:fa:ef:27:60:48:d8:3b:2c:dc:2f:55:
b7:21:60:c8:b8:c2:ea:bb:18:ab:a4:e9:79:d2:30:80:c7:9c:
31:e1:3b:09:f5:d2:9f:0e:6a:40:dc:8f:9b:3a:f2:6d:8f:f4:
85:0f:12:a4:3d:5b:df:18:6f:a7:d8:59:06:e4:0f:07:37:d4:
8e:fd:8d:be:02:80:89:4d:90:59:40:c5:29:b3:b4:6d:b8:fe:
23:77:60:cc:5c:53:5d:2e:6a:a6:ad:d1:da:b2:79:02:a4:55:
72:ae:3f:6d:6f:27:97:1c:c7:eb:65:7c:12:83:e2:41:8b:79:
dd:11:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:31 2023 by rpki-client on console-fra.rpki-client.org