Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ZJbDQBVjFAs_PcGM28QY-J9Y7s0.roa
File: ZJbDQBVjFAs_PcGM28QY-J9Y7s0.roa (raw, json)
Hash identifier: 1q/pLouxK5MPIXtWlUEVZ8ZfkN8LKgBOFMBiRakQBik=
Subject key identifier: 64:96:C3:40:15:63:14:0B:3F:3D:C1:8C:DB:C4:18:F8:9F:58:EE:CD
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 1390B142
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ZJbDQBVjFAs_PcGM28QY-J9Y7s0.roa
Signing time: Sat 01 Jan 2022 05:56:24 +0000
ROA not before: Sat 01 Jan 2022 05:56:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206654
IP address blocks: 194.213.10.0/24 maxlen: 24
45.88.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328249666 (0x1390b142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6496c3401563140b3f3dc18cdbc418f89f58eecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:32:b4:8f:3a:8b:9a:3a:26:9d:da:ab:97:
62:64:dd:de:1c:99:73:af:0b:9a:ec:c1:33:95:d3:
3b:eb:a1:19:43:a5:46:35:8b:e7:d8:9c:74:91:73:
1c:09:db:34:9f:66:ea:f8:c2:07:dc:86:95:07:59:
1a:05:17:5e:73:79:03:21:ce:e7:ec:0d:61:26:69:
2c:59:bd:0a:1d:f6:82:33:6e:52:79:3e:0b:23:fc:
f5:98:1f:2e:7c:99:2d:43:b2:00:e5:27:d6:7a:73:
4c:6d:86:ec:ef:15:4d:d5:24:b4:c5:da:b9:ac:73:
12:bf:cd:ac:91:60:b0:72:49:e1:c4:7e:c0:93:99:
cb:bf:a0:f4:f2:e5:7c:61:ae:f4:4a:bb:a7:7b:1c:
34:b2:b3:67:cc:01:aa:7c:72:58:d1:36:f7:46:ca:
70:ba:44:28:1c:ac:af:36:3a:a5:89:d4:f7:ce:32:
16:ec:c3:1a:16:78:bb:d8:47:fb:e5:d3:57:63:5b:
0d:82:b2:ee:03:82:f6:63:54:88:c0:58:cb:cf:c7:
89:2b:57:ac:0f:09:7c:5e:f2:f8:a7:c8:36:57:ae:
0c:28:fb:b4:bd:46:80:32:0f:64:a1:e2:43:b3:f0:
ef:96:79:34:98:4a:b5:e9:23:62:43:72:2e:46:09:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:C3:40:15:63:14:0B:3F:3D:C1:8C:DB:C4:18:F8:9F:58:EE:CD
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ZJbDQBVjFAs_PcGM28QY-J9Y7s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.124.0/22
194.213.10.0/24
Signature Algorithm: sha256WithRSAEncryption
25:bc:d5:b4:b4:57:43:8c:2e:da:82:20:3c:4b:30:a1:a1:72:
39:0a:51:85:5e:2d:20:bf:02:a3:51:f4:70:55:3b:bf:31:5a:
8a:75:c5:8f:20:0f:85:d0:af:1f:ca:9c:74:da:d7:0e:17:55:
58:73:6b:c0:bb:b5:61:02:e4:d4:82:8c:a7:ca:cb:0f:99:ef:
e6:0a:e4:96:8b:2f:13:e7:89:96:d4:86:12:64:8f:cc:b8:60:
e6:38:34:4a:d0:3d:e3:4a:3f:ee:e6:a1:cd:ed:23:a8:f8:9b:
a9:11:ed:89:bd:4f:9a:24:0d:fa:f2:f2:74:03:0f:79:50:b8:
8b:86:ab:bc:b6:1c:ee:81:05:12:b8:fe:6a:62:fa:b2:fb:5e:
7c:9c:26:65:d3:1e:bd:ea:66:73:b9:56:e7:7e:79:ef:75:1d:
fb:12:46:e1:eb:19:c0:8d:93:c2:61:5f:ce:2c:9a:f2:30:41:
ad:48:b5:8f:c2:46:0e:76:0d:a7:1c:2b:10:37:1e:12:a6:7b:
1e:c5:5f:9f:51:f2:1a:20:98:89:67:41:1a:36:29:1b:34:61:
cd:2d:a8:fd:23:3d:c3:51:50:92:71:75:7c:5b:19:d7:bc:8d:
1c:2b:c2:9b:a0:86:44:d5:33:05:bf:2f:75:45:66:75:ad:9c:
8a:6d:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org