Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/ZaZRB2__dAYaHkNC1bj2NzCzlUA.roa
File: ZaZRB2__dAYaHkNC1bj2NzCzlUA.roa (raw, json)
Hash identifier: DVyn1OXVEsr0En1RNbc6Ak34cEF33+hOXAP3HEZ3OKI=
Subject key identifier: 65:A6:51:07:6F:FF:74:06:1A:1E:43:42:D5:B8:F6:37:30:B3:95:40
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 0183863A42A0715912B204C833CCC35FE224
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/ZaZRB2__dAYaHkNC1bj2NzCzlUA.roa
Signing time: Wed 28 Sep 2022 22:31:48 +0000
ROA not before: Wed 28 Sep 2022 22:31:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207849
IP address blocks: 89.234.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:86:3a:42:a0:71:59:12:b2:04:c8:33:cc:c3:5f:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Sep 28 22:31:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65a651076fff74061a1e4342d5b8f63730b39540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:eb:8a:00:1e:1f:f9:2f:94:73:b3:d3:8a:
01:a8:73:da:1d:99:05:fb:42:f9:29:b5:34:59:c0:
37:1a:68:04:a1:37:cf:1e:b4:13:aa:0b:31:6a:34:
98:c4:7f:b9:b8:11:3f:d7:88:c4:c7:50:18:12:72:
e9:eb:59:f8:a8:44:83:6f:a8:52:d3:32:f1:e3:e0:
b5:39:e0:ba:7e:4f:90:6b:27:bf:76:63:48:57:7c:
66:ac:02:f8:be:68:5d:44:86:6c:bd:93:e2:67:82:
78:21:6c:68:ee:6c:64:2b:67:f0:1a:f1:5e:e7:92:
6b:d9:96:4b:ad:40:fa:ba:e6:a0:4d:6f:11:53:a3:
36:34:3e:5f:b3:ad:8c:ab:f6:7a:23:a4:c3:a4:35:
89:b8:a4:a2:c1:db:25:f9:58:4a:e8:08:dd:ed:80:
ab:d6:6d:c8:95:02:fb:57:6a:2b:50:55:46:ad:d6:
a5:f7:3f:dc:fa:6f:86:94:0e:4f:26:ab:e7:a7:aa:
8b:61:9c:1b:5a:e6:c1:5e:a5:27:15:72:2b:49:e9:
28:fc:a1:f1:dc:0c:7a:a7:45:f0:fa:f8:2f:90:df:
5c:42:71:93:a8:e6:43:05:07:e9:a0:45:be:a3:99:
3c:5a:b9:4f:53:ca:49:5d:85:20:b8:fb:cb:8f:d0:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A6:51:07:6F:FF:74:06:1A:1E:43:42:D5:B8:F6:37:30:B3:95:40
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/ZaZRB2__dAYaHkNC1bj2NzCzlUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.164.0/22
Signature Algorithm: sha256WithRSAEncryption
53:d0:71:94:b6:f6:1c:b9:4b:9c:96:2c:9d:58:e2:a3:02:89:
cd:a9:8a:f9:4c:31:4c:7e:7b:62:df:c3:89:d2:70:80:32:07:
09:52:92:67:8e:7b:e6:c5:c9:21:13:41:2e:6f:cd:43:60:96:
dc:7e:7c:d8:1a:6c:8c:a3:2e:b5:c9:88:98:a3:b7:af:76:61:
6a:2a:60:dc:de:fe:81:7d:78:e6:75:26:0e:ff:53:7e:91:f9:
a3:44:f4:16:f5:3e:22:bc:7e:06:33:bd:67:11:fe:fd:f4:be:
41:70:de:3c:ed:b4:fb:cd:7d:7e:9c:d5:aa:4e:58:00:e6:5e:
de:b7:4f:20:27:c8:5f:98:73:26:ec:d3:3b:c3:0f:55:d8:99:
93:e5:75:6f:1e:69:b5:54:23:a2:a6:42:ed:bd:e5:9a:b3:68:
b8:13:ca:af:bc:16:9f:b9:c8:c1:cf:07:7d:bd:10:e5:af:4f:
78:33:90:b1:49:9b:e9:67:5c:82:8f:77:e6:92:fe:21:7f:72:
de:34:fc:98:8e:97:f6:24:5e:de:7e:5d:1e:1f:d8:75:26:5c:
1f:38:13:50:ca:cf:b5:c7:6b:3a:d2:55:78:eb:7d:39:dc:57:
72:47:3b:87:f5:2f:3a:ff:9e:ca:65:a4:51:2a:79:31:07:ea:
f3:05:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:02 2024 by rpki-client on console-fra.rpki-client.org