Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/ZiKsV3iSomlEiJhAit4kw4iU7Po.roa
File: ZiKsV3iSomlEiJhAit4kw4iU7Po.roa (raw, json)
Hash identifier: uCyNehY/261gbcGeIFeWn/DAqgIKO92zbFpTk16QbSM=
Subject key identifier: 66:22:AC:57:78:92:A2:69:44:88:98:40:8A:DE:24:C3:88:94:EC:FA
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 0EC8BC3D
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/ZiKsV3iSomlEiJhAit4kw4iU7Po.roa
Signing time: Sat 01 Jan 2022 03:56:47 +0000
ROA not before: Sat 01 Jan 2022 03:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9211
IP address blocks: 193.194.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248036413 (0xec8bc3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jan 1 03:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6622ac577892a269448898408ade24c38894ecfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:f4:54:21:be:e0:6a:45:5a:c2:b9:bd:47:
67:ca:57:d5:e9:f7:8f:7d:0e:bf:c0:e3:64:08:42:
8e:66:10:51:39:b0:ec:e9:9b:67:39:58:b0:36:3b:
57:b5:c9:5d:b4:8b:a1:99:14:26:42:8c:06:5f:5c:
78:f6:58:82:0a:4b:01:97:14:b4:65:ae:54:5b:9f:
e7:9e:1d:e3:41:77:ee:6b:52:e6:9c:fa:2a:29:3f:
03:6f:0c:9d:b3:13:05:cc:41:79:94:95:a3:d7:58:
22:37:a1:c9:de:19:6b:98:85:b7:9d:9e:91:a6:60:
64:5e:7d:15:73:2c:70:02:cd:56:67:53:a3:6e:50:
67:37:e5:c2:31:dc:b6:dc:6a:16:a3:9e:5f:6c:79:
ab:f1:24:9d:f2:06:62:29:19:98:70:94:a5:05:f8:
a0:a6:77:c2:0f:72:c6:34:d0:c6:40:bd:3a:77:95:
74:db:f1:63:c9:c5:36:07:8c:67:df:15:db:34:09:
f7:20:93:6b:1f:93:5e:ca:75:62:0b:43:c3:34:ee:
1e:22:1a:e1:7e:c0:07:07:31:91:fa:29:bb:b1:69:
e2:6b:ef:fe:05:6e:aa:29:99:c0:d0:17:66:3b:40:
9d:f0:28:13:b0:a4:56:52:26:46:57:ac:e4:bf:51:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:22:AC:57:78:92:A2:69:44:88:98:40:8A:DE:24:C3:88:94:EC:FA
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/ZiKsV3iSomlEiJhAit4kw4iU7Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.129.0/24
Signature Algorithm: sha256WithRSAEncryption
94:0e:c4:a3:ee:a1:e5:4b:ef:9d:ce:f4:05:34:00:ca:9d:72:
5a:04:6f:65:1b:71:02:e0:34:5b:f9:ab:bc:3b:f0:3c:fb:09:
3a:96:c1:9d:ff:67:5a:df:7e:98:73:59:22:a3:17:f4:a0:71:
a9:48:85:4d:cf:5b:51:f8:b8:f7:11:b7:5c:4c:0f:48:5b:1a:
96:e9:90:5c:ee:f9:e6:d4:29:75:7c:6d:e3:82:22:f9:1b:6e:
3b:a6:53:d1:c9:c7:ce:dd:6b:01:fe:c8:56:29:ef:b7:af:87:
8f:f2:fe:91:33:23:2b:4e:61:43:cd:07:06:b9:fc:38:51:d6:
e7:16:71:b7:ff:26:91:33:f3:15:92:ab:db:58:14:17:b0:f4:
0c:fe:a2:1c:85:f8:b5:d9:b3:b4:4c:db:10:2f:1b:d3:9d:b1:
9c:a6:60:45:30:8d:70:11:5a:d9:a4:98:e3:7c:72:25:35:38:
f7:a7:b0:15:ac:18:fb:b2:bd:a3:d8:9a:2f:3c:c0:6a:2a:05:
99:06:b8:8e:26:58:a0:8d:83:50:95:3f:42:71:0f:8d:be:87:
85:5b:1c:bd:ea:b4:3e:2e:93:89:71:c8:26:22:1b:e2:7d:ae:
35:d1:42:64:01:3b:58:b1:26:8e:43:6f:7d:e8:dc:e0:3f:6a:
b2:e5:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:56 2024 by rpki-client on console-fra.rpki-client.org