Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/ZUGuPB_P1HlkfQaEkDfU60hDsLs.roa
File: ZUGuPB_P1HlkfQaEkDfU60hDsLs.roa (raw, json)
Hash identifier: wrFWkJn1YryNKo4PRYkgLJabme2VBzMKa7xd/FMt58c=
Subject key identifier: 65:41:AE:3C:1F:CF:D4:79:64:7D:06:84:90:37:D4:EB:48:43:B0:BB
Certificate issuer: /CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Certificate serial: 18051B09
Authority key identifier: EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/ZUGuPB_P1HlkfQaEkDfU60hDsLs.roa
Signing time: Wed 18 May 2022 08:03:16 +0000
ROA not before: Wed 18 May 2022 08:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9230
IP address blocks: 193.32.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402987785 (0x18051b09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7fd5d33061a9de920af1c2a13513d46dd24612
Validity
Not Before: May 18 08:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6541ae3c1fcfd479647d06849037d4eb4843b0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:4f:10:af:50:9a:5d:b6:d1:dc:3c:6c:35:
c0:74:94:ac:0d:14:dd:ec:e8:26:70:4a:0f:a9:4b:
6e:37:89:59:c0:30:74:d8:04:c0:05:9c:58:09:ed:
4f:ab:94:29:a6:a6:af:2b:d1:c5:19:ba:2c:b2:fe:
92:cf:5b:01:e0:37:ab:9a:4a:9f:92:79:da:ad:f5:
59:a6:a2:aa:89:5b:66:40:d4:6d:22:ee:a4:93:41:
4c:1d:9e:72:09:59:4a:16:9a:f3:87:bf:70:5f:3a:
9e:0b:57:2c:f0:be:97:6f:80:2d:4f:7e:be:01:9f:
09:54:64:3f:4b:b4:eb:c6:98:db:fb:f5:8b:64:75:
86:17:d9:16:3e:39:59:3d:16:66:39:cb:a2:79:b4:
d8:f2:23:42:bf:1a:ac:b1:d0:15:3b:6c:be:3f:ec:
36:6c:83:46:7b:a4:fb:ad:e2:25:33:d0:08:66:da:
c3:e7:fa:0b:ba:e3:ff:7d:85:45:52:27:f3:1b:42:
ae:6a:4f:5e:78:ae:45:70:dc:46:df:91:1a:8e:61:
9b:7f:43:eb:f2:ef:26:6b:00:d4:c2:35:a8:aa:7c:
de:df:09:ce:6d:a8:e1:90:34:c1:2f:64:6e:b5:a6:
af:df:55:d3:ae:77:0a:b7:b4:82:3d:bf:cd:f0:5a:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:AE:3C:1F:CF:D4:79:64:7D:06:84:90:37:D4:EB:48:43:B0:BB
X509v3 Authority Key Identifier:
keyid:EF:7F:D5:D3:30:61:A9:DE:92:0A:F1:C2:A1:35:13:D4:6D:D2:46:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73_V0zBhqd6SCvHCoTUT1G3SRhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/ZUGuPB_P1HlkfQaEkDfU60hDsLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/23190c-e1a0-4ba4-b1d8-a102be382e51/1/73_V0zBhqd6SCvHCoTUT1G3SRhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.244.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:3f:e5:0b:26:34:27:42:06:97:6b:cd:70:65:a9:6e:c0:ff:
3d:96:1d:69:6c:bd:0a:f7:ab:5e:9f:cb:6b:95:90:bc:99:39:
55:4b:b5:2f:34:05:82:63:c1:9c:c7:39:5c:a5:a0:0a:6c:e5:
9f:d0:28:73:94:02:3a:dd:61:92:d9:0e:f8:60:f8:d8:24:f1:
ae:58:b9:9b:57:fc:90:d5:5a:3a:60:01:3b:62:5c:bf:e9:17:
ae:42:0d:da:30:ec:67:10:43:6a:d5:e8:3c:5f:4a:9c:38:13:
1d:04:06:7c:b8:18:5b:0d:fc:e3:98:1d:dc:e7:66:13:3f:3c:
9e:a2:e2:a4:8d:80:1a:35:b6:b2:17:cc:3d:44:5a:f2:73:5c:
bd:44:0e:67:b1:8f:6d:db:92:c0:46:58:81:ef:48:37:89:56:
8b:34:72:cb:9d:0a:06:f1:53:93:56:d5:d9:29:8b:b5:23:68:
05:4a:5c:48:86:2a:0d:59:06:e5:09:6c:42:62:0d:6b:40:b2:
e9:a1:f4:3a:01:2f:4d:4c:00:e6:ac:e2:7a:9e:5b:fe:8a:88:
d0:2f:50:5f:f5:ac:97:ea:f6:6f:ad:3b:c0:a5:a4:ea:85:22:
40:d9:23:e9:37:41:e5:ef:d5:ed:12:33:8a:6c:58:13:62:07:
a7:e4:84:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org