Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/zbDnTXnx7cRVwjwER3SctcmYTeE.roa
File: zbDnTXnx7cRVwjwER3SctcmYTeE.roa (raw, json)
Hash identifier: Bn6p0E+Fi8nRR+1+Ey7iZQCIy2aj6VYXILmnziYzIOs=
Subject key identifier: CD:B0:E7:4D:79:F1:ED:C4:55:C2:3C:04:47:74:9C:B5:C9:98:4D:E1
Certificate issuer: /CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Certificate serial: 015B10
Authority key identifier: 76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/zbDnTXnx7cRVwjwER3SctcmYTeE.roa
Signing time: Sun 30 Jan 2022 18:57:42 +0000
ROA not before: Sun 30 Jan 2022 18:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59447
IP address blocks: 193.9.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88848 (0x15b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Validity
Not Before: Jan 30 18:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdb0e74d79f1edc455c23c0447749cb5c9984de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:70:9b:8f:c3:7c:3f:5e:56:90:15:2a:52:
49:8d:c1:cf:7e:a3:2e:4c:92:5b:8f:98:cc:c8:f3:
82:87:5b:89:2d:71:bc:c2:dd:7a:cd:70:4f:99:91:
43:78:64:d0:c2:57:bc:98:54:be:7a:d3:c5:04:05:
c9:2a:5e:89:e4:87:7b:81:ce:0c:14:a0:b5:15:59:
3b:a0:8b:ec:56:80:ad:83:13:5a:3e:a7:ee:f5:cc:
dd:07:91:5f:16:81:aa:b8:e3:3b:6e:ee:bb:a4:af:
8f:2d:d8:70:7f:9a:ed:d1:7a:42:24:bb:27:97:df:
c0:63:26:d2:8f:d6:af:2f:79:b4:76:e5:57:fc:b5:
f4:68:01:94:5b:17:81:b4:c5:d1:0a:e6:13:bc:08:
a3:39:f0:ba:6c:18:9e:92:6b:8f:d6:a4:49:8f:9f:
6d:44:73:01:6f:c7:4d:67:be:fe:a9:70:b3:b0:51:
db:66:f6:ad:7b:4c:be:41:33:76:4b:9c:0d:24:d7:
da:1b:41:00:0f:de:ba:21:e4:9b:7d:4c:af:14:f8:
85:9b:86:6b:5f:9a:91:cc:4a:42:8b:bc:73:be:20:
e9:3a:e4:b7:e6:61:00:5c:bf:1c:2e:db:10:15:07:
cc:37:e3:ce:f7:9d:2e:72:0c:e0:77:7f:fc:f9:bc:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:E7:4D:79:F1:ED:C4:55:C2:3C:04:47:74:9C:B5:C9:98:4D:E1
X509v3 Authority Key Identifier:
keyid:76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/zbDnTXnx7cRVwjwER3SctcmYTeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.48.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c6:71:8c:e5:46:ef:48:df:8f:7b:ac:60:b9:4d:28:3a:f4:
bd:b6:eb:4e:fb:86:e0:f0:cd:5f:14:45:12:db:b1:0d:f0:be:
0a:0f:00:d9:f8:70:8a:cc:8a:34:28:85:45:fa:18:62:37:cd:
06:c9:fb:1e:c4:21:2e:2b:ef:5c:23:4e:01:01:86:86:54:f3:
cc:39:98:dc:0d:b3:cd:e8:29:89:09:92:45:26:f0:c3:f7:65:
10:04:d2:a6:9d:66:ee:77:6d:64:50:75:68:85:fd:57:39:72:
8a:b9:17:fd:e5:da:92:6d:9f:65:b4:d6:c0:f3:c0:fd:34:1d:
d7:e7:25:7b:94:bd:28:bf:ba:b1:8e:ab:53:af:54:02:c5:fa:
db:46:bb:77:18:04:70:66:7e:37:06:b6:c6:f5:72:78:61:f3:
a4:9d:f4:ad:5f:40:43:ab:99:2d:20:d5:10:6a:02:36:62:e5:
84:c2:b1:86:2f:de:df:c5:aa:c9:0d:88:6a:86:85:6f:82:30:
a8:b8:5d:fc:47:d4:c7:34:b8:0d:b1:dd:a7:d9:25:b7:78:4a:
66:72:16:c8:bd:9e:95:0b:2a:f1:16:13:a4:6f:11:a1:cc:e3:
99:56:60:d3:b4:d9:e0:fa:d1:b3:34:10:b7:6c:ee:89:6f:df:
15:05:3f:b7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAVsQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc2
ZjJmMzQxY2Y5OGI5ZThiNDZlZGQzODlhNDgwNjRjN2JhZTZmOWEwHhcNMjIwMTMw
MTg1NzQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjZGIwZTc0ZDc5ZjFl
ZGM0NTVjMjNjMDQ0Nzc0OWNiNWM5OTg0ZGUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5IRwm4/DfD9eVpAVKlJJjcHPfqMuTJJbj5jMyPOCh1uJLXG8
wt16zXBPmZFDeGTQwle8mFS+etPFBAXJKl6J5Id7gc4MFKC1FVk7oIvsVoCtgxNa
Pqfu9czdB5FfFoGquOM7bu67pK+PLdhwf5rt0XpCJLsnl9/AYybSj9avL3m0duVX
/LX0aAGUWxeBtMXRCuYTvAijOfC6bBiekmuP1qRJj59tRHMBb8dNZ77+qXCzsFHb
Zvate0y+QTN2S5wNJNfaG0EAD966IeSbfUyvFPiFm4ZrX5qRzEpCi7xzviDpOuS3
5mEAXL8cLtsQFQfMN+PO950ucgzgd3/8+bwaUwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFM2w50158e3EVcI8BEd0nLXJmE3hMB8GA1UdIwQYMBaAFHby80HPmLnotG7d
OJpIBkx7rm+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZHZMelFjLVl1ZWkwYnQwNG1rZ0dUSHV1YjVvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80My8xZTMzNGQtOThiNS00N2I5LWI0ZmQtMjlmNzFlZTE3OTFkLzEv
emJEblRYbng3Y1JWd2p3RVIzU2N0Y21ZVGVFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8x
ZTMzNGQtOThiNS00N2I5LWI0ZmQtMjlmNzFlZTE3OTFkLzEvZHZMelFjLVl1ZWkw
YnQwNG1rZ0dUSHV1YjVvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQkwMA0GCSqGSIb3DQEBCwUAA4IB
AQAnxnGM5UbvSN+Pe6xguU0oOvS9tutO+4bg8M1fFEUS27EN8L4KDwDZ+HCKzIo0
KIVF+hhiN80GyfsexCEuK+9cI04BAYaGVPPMOZjcDbPN6CmJCZJFJvDD92UQBNKm
nWbud21kUHVohf1XOXKKuRf95dqSbZ9ltNbA88D9NB3X5yV7lL0ov7qxjqtTr1QC
xfrbRrt3GARwZn43BrbG9XJ4YfOknfStX0BDq5ktINUQagI2YuWEwrGGL97fxarJ
DYhqhoVvgjCouF38R9THNLgNsd2n2SW3eEpmchbIvZ6VCyrxFhOkbxGhzOOZVmDT
tNng+tGzNBC3bO6Jb98VBT+3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:11 2023 by rpki-client on console-fra.rpki-client.org