Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/zxsLH3y3diyr1dGbmTnxzYTq10Y.roa
File: zxsLH3y3diyr1dGbmTnxzYTq10Y.roa (raw, json)
Hash identifier: W9FFtxiQKmKLczVK3k4SFkz/P/EFGhNEUvgGYm1hNCs=
Subject key identifier: CF:1B:0B:1F:7C:B7:76:2C:AB:D5:D1:9B:99:39:F1:CD:84:EA:D7:46
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01836583F07AE9C333FFC485A6CB246BAF06
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/zxsLH3y3diyr1dGbmTnxzYTq10Y.roa
Signing time: Thu 22 Sep 2022 14:04:48 +0000
ROA not before: Thu 22 Sep 2022 14:04:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.46.81.0/24 maxlen: 24
93.114.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:83:f0:7a:e9:c3:33:ff:c4:85:a6:cb:24:6b:af:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 22 14:04:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf1b0b1f7cb7762cabd5d19b9939f1cd84ead746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:29:97:37:61:ef:bb:ca:19:ee:d1:45:0e:
ee:c5:81:63:fd:4e:42:ef:42:e0:47:31:4b:b6:2d:
bb:b0:56:8d:c3:a8:3f:05:98:78:1c:43:bf:92:54:
b4:18:f0:72:09:df:cd:04:e2:a6:c7:65:b6:3e:cf:
5e:5e:71:07:65:bf:22:f9:aa:a2:87:51:24:a0:4b:
3d:82:aa:93:ef:1e:8e:07:66:26:cf:16:13:63:c4:
03:70:ba:0b:0d:15:e5:a7:54:fc:dc:68:7c:28:fc:
0b:22:45:6a:fb:12:bf:23:09:88:27:99:da:e3:af:
7c:d5:c5:3f:4d:cb:ff:3a:d4:51:63:85:fb:b7:6d:
b0:e2:e8:2a:de:21:27:b2:76:c1:72:b1:99:12:63:
3f:31:50:38:1e:db:91:46:75:6f:d7:80:4d:37:f8:
1a:5d:06:08:64:8e:7f:a5:b9:21:08:e0:02:c7:ee:
ef:99:e9:3c:94:68:6f:38:1b:89:77:8f:bf:ba:73:
b9:6d:48:96:9d:44:4f:05:6e:e2:33:2a:ce:94:ee:
0d:7c:1e:81:d2:90:8f:84:c1:75:08:3b:49:33:f5:
12:62:96:03:35:b0:5e:33:18:d8:2b:a6:9f:e5:4e:
3c:1b:32:ab:2c:a4:f2:2f:79:ca:89:63:d6:45:43:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:0B:1F:7C:B7:76:2C:AB:D5:D1:9B:99:39:F1:CD:84:EA:D7:46
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/zxsLH3y3diyr1dGbmTnxzYTq10Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.62.0/24
193.46.81.0/24
Signature Algorithm: sha256WithRSAEncryption
64:24:ed:ba:66:2a:36:fb:0a:cc:c1:d7:d1:e2:f0:47:de:54:
dc:07:a0:29:f9:70:32:ba:44:aa:1a:17:8b:2f:d0:df:c9:bf:
d7:2c:e7:41:bd:ea:b6:27:d1:36:9a:ea:bc:af:6c:4d:cd:78:
32:4a:e5:71:8e:02:da:d0:f7:88:1a:b5:23:0a:32:aa:df:1f:
88:db:6e:18:c6:6f:27:c0:b4:ea:b4:a2:2b:2a:b7:52:83:2a:
c9:10:fb:96:7a:c8:dd:4b:50:0a:fa:cf:6e:dc:b7:bb:a4:26:
a6:ee:d7:aa:8d:41:a1:6e:91:b5:dd:f6:41:c8:a9:02:78:6f:
82:18:40:eb:fc:fb:bf:2c:3c:be:b7:bf:f0:63:ca:8c:92:96:
06:e0:b0:c9:0b:fb:64:01:24:0d:36:ee:e4:e5:42:aa:66:d8:
30:9c:30:09:c4:21:bc:6b:f2:c8:28:d7:28:96:09:1b:4c:e5:
8e:0f:06:68:6f:c6:c5:10:8f:31:c6:ef:88:bd:fe:a1:78:6d:
86:4b:8f:f3:61:a2:22:f5:a5:c4:bc:f6:61:d8:4e:9f:90:3e:
6e:67:5c:89:72:9e:ef:84:64:89:66:f1:4a:71:ae:3b:0a:c9:
40:30:b6:8a:cf:26:03:ba:b9:e9:d8:40:01:f8:4b:2a:4f:c3:
3d:55:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:14 2024 by rpki-client on console-ams.rpki-client.org