Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/Z4aRYYu5qAlvdoq7W72IHlDrnfg.roa
File: Z4aRYYu5qAlvdoq7W72IHlDrnfg.roa (raw, json)
Hash identifier: +di/0M9+HO0INS8/BaU+Bfbt0tZAuYeVsyY7J17ZiPE=
Subject key identifier: 67:86:91:61:8B:B9:A8:09:6F:76:8A:BB:5B:BD:88:1E:50:EB:9D:F8
Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Certificate serial: 0A095414
Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/Z4aRYYu5qAlvdoq7W72IHlDrnfg.roa
Signing time: Sat 01 Jan 2022 06:02:49 +0000
ROA not before: Sat 01 Jan 2022 06:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209799
IP address blocks: 194.15.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168383508 (0xa095414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52
Validity
Not Before: Jan 1 06:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=678691618bb9a8096f768abb5bbd881e50eb9df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:ea:b3:a8:d1:12:7c:aa:57:e1:0d:49:2b:
a0:ed:fd:89:7d:59:47:ed:de:02:07:4f:60:6c:10:
94:40:3f:2a:84:50:56:20:c2:4f:f9:5b:cf:dc:b2:
6a:e5:36:6f:4c:61:58:47:89:20:b9:16:5b:3b:f1:
be:41:db:e2:0b:1d:ee:35:c3:ee:2b:21:9b:7b:14:
9c:92:91:78:f2:71:f2:ec:ba:a4:3a:d0:fe:3b:f4:
58:00:43:08:66:de:94:c2:29:55:69:34:c2:f9:d5:
ec:89:1d:3e:ca:83:79:91:fe:d4:18:8b:73:d8:93:
a1:d0:74:cd:9d:a7:af:ee:4d:a2:97:33:6a:b4:5c:
65:84:44:16:60:8c:43:a9:e5:fc:95:8c:9e:74:1f:
0f:5e:b0:92:38:32:f8:e4:08:00:77:2b:ef:ee:17:
ee:fb:b8:9d:e8:61:82:a2:0b:4b:10:01:df:fa:68:
5b:5c:fb:9b:74:f9:b0:84:62:63:2b:6c:24:3e:e6:
f0:c5:8f:9b:1c:cf:69:ef:b0:c6:d9:8a:d6:74:92:
4a:2d:bd:64:c2:40:02:1c:c8:7e:d6:ae:52:b0:13:
42:9d:f4:15:1b:49:a4:49:00:6a:3f:cb:53:e3:9b:
5b:a2:47:80:69:d2:63:83:c1:cc:55:41:fb:80:c7:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:86:91:61:8B:B9:A8:09:6F:76:8A:BB:5B:BD:88:1E:50:EB:9D:F8
X509v3 Authority Key Identifier:
keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/Z4aRYYu5qAlvdoq7W72IHlDrnfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.100.0/22
Signature Algorithm: sha256WithRSAEncryption
74:70:71:5c:34:9a:17:7f:1b:c1:48:40:f8:c4:81:d0:58:24:
fa:2e:a8:cb:71:3d:7d:cd:22:1a:55:64:ab:7c:7f:7f:75:87:
bb:f6:57:10:e8:dd:b7:f1:06:5b:91:c8:36:f5:bb:50:bf:da:
26:84:e8:de:6a:e0:d1:da:b8:be:bd:08:ba:26:aa:2f:ed:75:
8b:80:08:db:1e:eb:e4:0b:fc:1f:83:ba:16:0a:a3:cf:d7:3a:
40:9f:e9:77:8c:5a:f3:6f:0a:8c:e8:ba:7f:ee:48:a5:e6:af:
b8:27:5b:22:0b:07:66:39:19:cb:d0:0f:bd:ff:dd:18:b9:ee:
d2:9c:9b:4d:ce:82:0c:90:aa:43:fc:f9:11:fa:32:75:3d:97:
1b:34:43:74:cd:0d:f0:34:22:8f:cd:06:1e:d0:31:bb:59:6d:
23:a4:c4:e6:1a:02:74:60:11:1e:4c:86:33:8d:18:d2:d2:82:
5a:fa:9a:5f:44:99:0f:c0:bf:fc:31:f1:51:04:30:6f:88:9f:
f4:f4:fb:39:ac:35:3f:3c:90:45:c8:ef:5f:29:f3:3f:0d:40:
20:f4:97:7d:fa:0f:96:06:58:8e:dd:16:e3:61:25:6d:bc:e4:
d7:a0:4a:99:41:09:ea:bb:e5:b6:7b:9b:b4:70:a3:12:4d:74:
62:ba:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:32 2024 by rpki-client on console-fra.rpki-client.org