Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/zUMfQzyUyInUS_ErvkXX1w386Ak.roa
File: zUMfQzyUyInUS_ErvkXX1w386Ak.roa (raw, json)
Hash identifier: 6qS7yT9qRodQXYcwMerRXexvg5ipzltrsYcj3tBEvis=
Subject key identifier: CD:43:1F:43:3C:94:C8:89:D4:4B:F1:2B:BE:45:D7:D7:0D:FC:E8:09
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 031C2DBB
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/zUMfQzyUyInUS_ErvkXX1w386Ak.roa
Signing time: Sat 01 Jan 2022 13:59:21 +0000
ROA not before: Sat 01 Jan 2022 13:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140224
IP address blocks: 193.227.121.0/24 maxlen: 24
45.153.9.0/24 maxlen: 24
45.153.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52178363 (0x31c2dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 13:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd431f433c94c889d44bf12bbe45d7d70dfce809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:66:de:3d:15:11:74:ed:e6:d3:99:5c:0a:
85:5b:1f:71:f1:bd:38:83:ee:be:c3:b3:5f:cf:0d:
ee:c9:4f:1f:30:5e:c6:53:3a:81:03:c3:10:84:15:
f4:52:00:03:73:b7:1f:f4:d8:ac:d8:4f:49:f1:1c:
ce:a8:be:4b:d1:ef:99:ba:66:b3:14:e0:08:08:fb:
46:30:03:4a:95:3c:73:f5:e0:bc:1e:64:a4:0c:ea:
7d:09:a5:91:ae:7d:7d:94:a2:b1:2b:a9:54:c7:19:
31:34:e8:76:cc:42:57:d3:b4:63:12:cc:e6:7e:09:
fc:77:98:31:6c:6b:01:ae:30:38:79:1b:5b:ed:93:
26:c6:79:18:60:7f:ce:ad:0f:c6:28:ff:11:74:ac:
81:c7:c0:af:a6:39:43:bd:05:8a:19:21:78:d1:05:
6f:2b:bd:42:f0:45:b6:88:0f:00:06:06:f7:5b:5f:
5c:38:60:e5:26:21:d0:6c:dd:2d:3b:cb:e1:3e:6e:
07:e1:73:4d:00:e6:11:55:3b:3f:2b:c0:31:e2:ff:
b1:79:a0:2f:1b:f0:98:d0:a9:77:9f:cd:06:73:05:
f5:bf:01:4a:cf:af:1b:f8:1a:4a:9c:db:43:0c:66:
3d:30:a0:55:e8:5f:76:28:c4:65:94:f2:c9:f0:a9:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:1F:43:3C:94:C8:89:D4:4B:F1:2B:BE:45:D7:D7:0D:FC:E8:09
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/zUMfQzyUyInUS_ErvkXX1w386Ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.8.0/23
193.227.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:7b:0f:12:35:bd:0a:08:8f:2f:91:23:ce:db:16:fe:96:14:
07:6e:89:ea:31:f3:fa:94:43:b2:99:bb:a6:11:d8:e4:d1:03:
d8:37:3b:da:2a:12:85:5d:80:b1:92:95:56:2c:38:35:e1:39:
87:f6:ac:f0:0e:15:b6:37:49:13:35:8e:25:ca:da:ee:0e:83:
5d:6e:64:4b:b4:9e:e9:16:a9:54:c2:47:03:42:3c:cb:5d:d3:
52:54:58:49:85:09:4c:76:f0:e6:f7:88:2a:84:23:df:47:5b:
a4:a4:ec:c7:a1:f4:59:d9:8f:28:5a:69:7c:c0:d5:68:1d:74:
9c:5e:1c:eb:88:49:52:82:c7:af:30:84:1c:b9:40:48:9a:87:
8b:b5:62:83:5b:dd:fc:96:75:4e:86:5d:41:4a:ba:02:29:66:
33:52:d2:5e:74:76:6f:19:71:f8:e9:7d:12:61:bc:49:3d:c6:
12:38:b9:bc:82:17:ed:c3:4b:63:c3:0e:e0:d0:6c:44:66:71:
c6:1d:c3:4a:8e:7e:ac:5e:3d:0d:b1:9b:df:1c:1b:82:2e:49:
e2:88:e6:9b:5c:ec:1a:6a:a5:97:dc:f3:00:5e:82:79:d1:17:
56:7d:15:b4:f6:83:1c:2d:2f:84:6b:07:72:0a:69:f0:1e:90:
4c:31:ee:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:20 2023 by rpki-client on console-ams.rpki-client.org