Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ZHmlZj-f3L-jBIZFZShvr414Dj4.roa
File: ZHmlZj-f3L-jBIZFZShvr414Dj4.roa (raw, json)
Hash identifier: hebKBXE0YqwFirgoCaF80F0M4sevzsfOdXPhp1sLxl0=
Subject key identifier: 64:79:A5:66:3F:9F:DC:BF:A3:04:86:45:65:28:6F:AF:8D:78:0E:3E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0AD39E49
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ZHmlZj-f3L-jBIZFZShvr414Dj4.roa
Signing time: Sat 01 Jan 2022 03:02:41 +0000
ROA not before: Sat 01 Jan 2022 03:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 479522
IP address blocks: 194.127.117.0/24 maxlen: 24
194.127.118.0/24 maxlen: 24
194.127.116.0/24 maxlen: 24
194.127.119.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181640777 (0xad39e49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 03:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6479a5663f9fdcbfa304864565286faf8d780e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:cb:8b:29:86:32:03:77:9b:a9:d3:78:48:
be:8c:63:e8:4d:60:58:25:f8:6e:50:34:5e:4c:8c:
d1:08:5c:f1:01:07:2f:28:36:bc:b3:a4:35:d2:05:
b6:46:3d:2b:34:96:1e:c6:89:6b:a6:9c:d8:ce:90:
ae:49:6a:5e:97:e9:67:9a:62:98:b7:04:86:f3:88:
c8:71:21:78:00:25:44:36:10:42:c0:b2:0f:65:27:
83:00:0f:b9:8c:7a:b1:4d:e4:8c:8d:5d:d8:3c:c0:
58:ab:4f:fc:9f:96:b2:6c:3a:b1:4a:ce:01:0d:c5:
79:38:6d:45:ce:ed:ac:13:99:c7:1f:f5:7b:3c:cc:
80:a2:b9:b9:9a:e1:66:ff:48:b3:fb:01:cd:71:2b:
55:da:e6:cc:73:35:f9:08:d3:df:88:c2:96:b6:61:
20:98:c6:ec:27:8b:3e:a5:ee:09:e0:ba:f2:90:e6:
c6:8c:77:cf:72:0e:79:33:ec:cf:84:69:db:13:02:
8c:02:1f:35:b5:f1:bd:93:d1:73:7f:01:7e:b3:68:
30:bc:34:69:0b:9e:7d:fe:4c:84:28:9e:74:01:d6:
be:55:54:b2:87:57:a6:25:f7:00:97:9b:bd:ec:ce:
2a:b4:77:73:55:9d:01:3c:8d:74:61:47:4b:e6:d7:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:79:A5:66:3F:9F:DC:BF:A3:04:86:45:65:28:6F:AF:8D:78:0E:3E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/ZHmlZj-f3L-jBIZFZShvr414Dj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:cd:57:9a:61:0b:72:68:9b:4f:a7:a9:15:c2:96:b8:c0:74:
6a:a5:f9:71:b4:63:7c:6c:10:63:2f:48:bd:bb:82:07:89:55:
99:c2:78:43:26:80:54:57:ca:ad:e6:58:16:ee:d4:72:cf:69:
cd:cd:d9:da:6a:9a:32:61:3d:28:8f:43:c8:cd:ac:78:d3:bd:
00:03:4a:3a:c3:12:26:52:4d:49:77:ac:b0:c7:73:c6:70:51:
59:72:f0:c5:b3:d4:ff:d7:d7:b0:8b:a3:67:f6:6f:c1:d0:27:
e8:4e:81:6d:65:d1:68:dd:57:09:4f:24:50:50:79:9c:3a:2b:
11:b0:9a:b9:5b:7e:e5:94:25:3d:e8:4c:5d:7a:01:0b:27:56:
f1:29:c7:02:7f:00:12:18:4b:56:bf:e5:fa:67:8f:60:48:e5:
f5:da:1d:11:c4:46:1e:9f:e6:5a:83:fc:d2:83:d1:18:c9:ad:
cf:76:4c:78:d7:79:e2:ae:43:db:c9:09:3f:81:e6:5f:33:5c:
88:bd:62:a8:f8:89:24:7e:59:97:84:2f:eb:91:0b:b7:03:73:
d8:d9:45:e6:18:19:de:65:8a:d0:e5:75:ac:39:f4:85:db:d6:
d7:a5:77:be:32:2f:dc:60:0f:57:75:f2:21:11:84:a7:df:c1:
fa:66:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:49 2024 by rpki-client on console-fra.rpki-client.org