Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/Z7kFkQpwV76CNo5pcCx8hLWiY24.roa
File: Z7kFkQpwV76CNo5pcCx8hLWiY24.roa (raw, json)
Hash identifier: 1JyvflKoGzn4WZWhVEMxg8DDspl5pC4hWIL05Z4GZr8=
Subject key identifier: 67:B9:05:91:0A:70:57:BE:82:36:8E:69:70:2C:7C:84:B5:A2:63:6E
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 025740CD
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/Z7kFkQpwV76CNo5pcCx8hLWiY24.roa
Signing time: Sat 01 Jan 2022 01:57:27 +0000
ROA not before: Sat 01 Jan 2022 01:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211496
IP address blocks: 193.22.12.0/24 maxlen: 24
185.195.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39272653 (0x25740cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jan 1 01:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67b905910a7057be82368e69702c7c84b5a2636e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e6:4d:75:71:7e:c2:66:43:e2:87:f5:7e:f4:
36:1e:e8:01:82:ec:01:6c:05:e8:f5:cd:71:f9:3a:
02:76:fd:15:1e:b4:11:2c:67:47:d5:2f:b8:d2:70:
64:65:39:3a:c3:38:94:5f:b2:5b:6c:8d:d9:a4:45:
76:23:ab:13:d0:aa:7b:6a:22:fc:be:f5:e4:8b:59:
c0:c1:7b:0b:a1:64:88:a3:97:03:a8:c2:cc:17:2f:
d7:5d:67:68:de:0f:ca:40:5f:88:c3:ef:ee:c8:b3:
45:ff:e8:75:07:ae:e8:2c:31:dd:39:b4:d6:d6:f7:
4a:b8:ff:3e:5f:b1:3e:41:04:e6:ff:65:59:b6:d1:
25:84:14:0f:cb:6e:7c:2e:6c:85:db:66:3d:9e:31:
10:52:3d:05:9c:c4:b6:e6:29:d4:0f:82:37:36:ed:
de:b1:cf:03:50:cd:88:e0:46:1d:69:e9:b1:cd:a9:
95:0e:54:2d:fa:fc:d3:04:ce:73:30:ed:6c:03:ff:
68:77:8a:8b:83:7c:4f:9d:e1:24:8a:1b:e7:08:4c:
b2:3b:ba:f2:aa:aa:82:0d:20:0a:55:7d:d8:d7:84:
ec:5c:53:2f:7f:eb:9c:b5:79:23:23:cd:cb:33:78:
21:24:f2:ce:25:76:c8:c6:0b:5b:bf:ea:ec:4b:0b:
7b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:05:91:0A:70:57:BE:82:36:8E:69:70:2C:7C:84:B5:A2:63:6E
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/Z7kFkQpwV76CNo5pcCx8hLWiY24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.252.0/24
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:31:8b:17:fe:08:13:5e:ed:99:56:07:ee:1c:03:ce:17:ee:
ef:f9:52:8e:75:17:db:42:88:ed:31:49:80:51:b6:11:69:f6:
4c:30:5f:e1:a7:d8:8d:91:1e:33:f1:30:da:2c:e6:44:26:14:
ad:eb:ef:63:25:d2:cf:89:cf:f8:be:ed:9a:d9:88:c4:80:76:
2d:a6:88:d4:50:6e:6d:85:2f:5c:31:8c:2b:ca:91:1b:4c:3b:
e0:d0:49:7b:fb:16:06:68:02:2e:6b:3b:44:67:7d:d3:c7:02:
7e:b1:01:da:ff:29:45:a9:b5:66:60:d7:df:53:a4:f4:0d:cc:
45:37:e7:84:5e:68:e0:03:57:c8:fb:a6:53:f7:ab:dc:26:4f:
ec:06:86:ab:eb:18:cf:a5:e0:6b:07:d6:6e:4a:f5:86:de:53:
c4:ee:55:a1:6f:d1:9b:9d:99:ad:7e:97:4f:f2:e1:d7:8a:5d:
b5:0e:7a:49:6a:00:b0:f5:31:28:3c:51:47:5e:01:42:30:e1:
d8:9f:3f:84:a6:35:05:55:b2:62:6b:a1:62:d0:7b:c0:50:db:
c9:a8:ac:9c:bb:df:97:3c:51:43:31:7b:e4:6c:0b:44:7a:ba:
f7:1f:fe:74:af:95:3f:fb:0a:63:a7:cc:80:33:5e:29:f9:42:
2e:b1:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org