Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Zi8hjwGwlJBMaRP5fixM7Eponaw.roa
File: Zi8hjwGwlJBMaRP5fixM7Eponaw.roa (raw, json)
Hash identifier: KBoqhuXP6/J5gKiJ2UpZIPPKXsPE1k83jf//3J/Yf34=
Subject key identifier: 66:2F:21:8F:01:B0:94:90:4C:69:13:F9:7E:2C:4C:EC:4A:68:9D:AC
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D259F9F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Zi8hjwGwlJBMaRP5fixM7Eponaw.roa
Signing time: Mon 21 Mar 2022 13:24:04 +0000
ROA not before: Mon 21 Mar 2022 13:24:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
195.178.128.0/24 maxlen: 24
195.178.129.0/24 maxlen: 24
195.178.131.0/24 maxlen: 24
195.178.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489004959 (0x1d259f9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 21 13:24:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=662f218f01b094904c6913f97e2c4cec4a689dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:6a:a2:01:7c:59:56:5a:05:82:d7:64:f6:
21:33:8c:b4:12:31:d9:23:fd:d5:b0:f5:79:00:6e:
c6:45:ec:09:d5:1e:18:cc:8a:6a:5a:ff:a9:89:3f:
2c:28:2c:8a:00:73:67:88:de:cf:b7:47:81:1b:64:
1b:bd:7f:47:54:fd:b7:40:38:39:26:fa:1d:02:f6:
c9:86:b9:e3:3d:0d:41:fa:97:f2:92:7b:c1:ea:ed:
9f:53:c2:28:1b:1a:fa:94:9f:ab:ce:d9:b6:4a:2f:
a8:77:3d:ec:38:c8:1f:3b:d1:9b:f2:d9:33:83:4f:
e3:a3:59:e7:02:f7:13:10:6d:4b:6a:a6:fb:e6:41:
4e:30:c1:89:c2:81:db:c1:a0:69:a2:3b:f4:0e:0a:
c4:ff:1f:0b:75:3a:4b:78:63:20:c5:34:ea:14:d7:
e9:fb:7c:2d:4d:50:85:a9:de:2e:4b:88:4f:d9:e1:
bb:6f:25:c0:0a:01:f7:82:d9:ff:6c:e5:ae:cb:5c:
9f:eb:c5:88:02:de:d0:27:e2:44:87:75:38:85:5e:
64:41:65:ed:e9:4a:5f:ce:8d:c6:de:8d:0d:05:82:
f6:79:09:fc:b5:9f:88:9e:3b:46:eb:63:c6:46:fb:
21:d8:05:4a:ac:ea:80:a9:4b:38:dc:be:6b:0e:28:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2F:21:8F:01:B0:94:90:4C:69:13:F9:7E:2C:4C:EC:4A:68:9D:AC
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Zi8hjwGwlJBMaRP5fixM7Eponaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.128.0/22
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
14:24:30:12:86:83:4b:d6:8f:ae:9d:d8:8a:5b:7c:b0:f2:67:
e8:71:df:98:7c:0d:5b:18:4d:7d:ea:d2:cf:ba:12:55:2a:09:
0f:4f:89:17:9d:27:a0:35:5a:dd:b2:f7:e7:46:04:30:7e:02:
07:bc:a7:5b:09:cb:9c:36:23:cc:17:e2:b9:f1:c1:e6:7e:46:
17:9a:a0:9b:dc:d4:1c:0e:a7:61:31:31:9b:78:e1:3d:6b:09:
b0:e0:67:90:df:7e:c3:8b:3b:fa:9a:24:20:50:10:e9:9d:5c:
fc:52:68:ba:96:13:22:37:71:86:eb:35:cd:f6:16:44:0a:d6:
22:c7:a3:1a:78:78:38:34:7f:1d:8b:73:78:ea:d9:6f:93:77:
dd:bf:29:28:69:fd:34:80:4d:bc:9d:5a:bc:bc:9c:28:56:0d:
c7:25:fb:8d:7a:9e:48:43:a9:0f:b8:b2:9d:a7:53:27:12:ac:
54:94:36:60:35:f2:a7:97:da:a7:d7:86:d2:54:5a:43:d4:64:
cc:2c:f3:f0:a6:95:55:59:46:02:b3:b3:d3:d6:96:8a:23:b9:
65:43:fc:87:c4:ef:b7:f1:c4:32:7f:02:f3:1f:4c:f1:aa:07:
1b:bd:5d:e5:40:11:77:33:e3:c5:58:a8:9d:5f:ec:e3:51:9a:
94:61:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org