Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/znOZyYYhQ-plO4WI_orKTx_4w2M.roa
File: znOZyYYhQ-plO4WI_orKTx_4w2M.roa (raw, json)
Hash identifier: mzmMSQV6XLUU9fQK43n38sv90MZ0JGSPumj6Bv4KkRM=
Subject key identifier: CE:73:99:C9:86:21:43:EA:65:3B:85:88:FE:8A:CA:4F:1F:F8:C3:63
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: E9E3A0
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/znOZyYYhQ-plO4WI_orKTx_4w2M.roa
Signing time: Sat 01 Jan 2022 04:03:09 +0000
ROA not before: Sat 01 Jan 2022 04:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8437
IP address blocks: 194.242.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15328160 (0xe9e3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Jan 1 04:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce7399c9862143ea653b8588fe8aca4f1ff8c363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:10:e5:7c:38:e1:f7:aa:bc:7e:1b:07:38:
37:6e:7d:02:a8:0c:9f:3a:ad:79:6d:73:2f:f9:33:
c1:c9:05:05:33:78:ce:b0:fe:bd:5e:78:c3:5a:2b:
36:32:12:5c:18:26:d6:4f:c0:53:8b:3e:62:7c:f4:
e0:45:00:a3:5e:82:16:bf:cb:48:bd:e4:7e:d2:6c:
90:0d:3d:29:28:45:5a:13:57:2a:40:d8:68:d1:e2:
e1:9a:af:a6:fb:70:7a:4c:0f:0a:ef:6f:f2:f0:7b:
bc:aa:bf:9c:31:5d:c5:fc:f8:12:13:03:cb:a8:3f:
20:cf:b6:af:59:7e:c8:ce:94:44:39:16:c4:25:6e:
f3:cf:11:b8:c4:76:66:f3:65:88:a4:0c:98:4a:3a:
c1:22:6a:f7:82:97:73:ec:c8:d7:2e:2e:93:9e:77:
2f:39:91:ee:e8:7c:b3:5a:22:c6:ed:7a:c9:aa:ca:
72:69:b6:ec:24:cf:b2:e4:88:b7:1d:70:55:10:f2:
77:19:7c:54:49:96:18:06:82:6d:81:a4:f6:91:42:
f3:e8:a7:12:38:66:0c:1f:18:fc:78:65:66:48:80:
64:a2:07:97:13:91:2e:57:41:a2:51:89:0c:bb:f8:
2d:2f:06:e2:52:d4:eb:10:10:f5:d9:d8:1a:e4:83:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:73:99:C9:86:21:43:EA:65:3B:85:88:FE:8A:CA:4F:1F:F8:C3:63
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/znOZyYYhQ-plO4WI_orKTx_4w2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.35.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a6:34:7f:61:05:70:a2:71:4c:5a:35:72:b2:9f:4b:52:0f:
2f:ac:8b:a2:11:95:e6:34:a8:b2:3b:4b:98:64:50:d4:84:22:
e9:f0:01:f0:f5:96:91:6e:17:ea:c2:a3:b4:c3:10:a3:b4:7d:
62:5d:f8:df:68:3c:dc:bc:aa:67:18:4d:ef:30:67:f4:b5:fe:
12:8c:38:0d:98:14:4f:f0:c7:48:53:cc:03:ce:78:96:43:ce:
39:50:07:e4:f9:d3:b4:a7:e9:f9:66:e3:5b:db:27:2e:cf:53:
25:e6:b6:40:eb:9f:23:95:a8:c7:28:b4:42:6b:56:c4:40:3c:
a6:74:e1:9e:76:21:02:65:a9:f7:b0:e8:cf:2d:65:94:a2:7e:
36:51:87:f8:da:7e:17:fd:d0:63:1e:32:b0:fc:31:89:a5:31:
10:81:93:e7:a1:d6:f6:b4:e2:4b:69:40:c1:92:1e:42:ca:ce:
54:73:1e:11:cc:df:f7:53:c4:d5:ef:1c:4a:7c:7c:80:54:94:
ca:0c:56:a3:69:50:70:78:e8:e7:9d:38:e2:26:dc:c0:88:ea:
8e:e2:50:32:ea:3b:33:78:01:85:60:d0:74:c9:60:25:63:96:
6a:62:f6:fb:08:d5:9c:77:d0:8e:57:33:be:fd:89:b3:20:eb:
f3:0f:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:38 2024 by rpki-client on console-fra.rpki-client.org