Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zjSYs634sGB0w3JMrwz4pLPbbkg.roa
File: zjSYs634sGB0w3JMrwz4pLPbbkg.roa (raw, json)
Hash identifier: 1ssazUnw8SgYT8z+ER8x4L1h4OWjIYv/VtjmUSetlWI=
Subject key identifier: CE:34:98:B3:AD:F8:B0:60:74:C3:72:4C:AF:0C:F8:A4:B3:DB:6E:48
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27CE7CE8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zjSYs634sGB0w3JMrwz4pLPbbkg.roa
Signing time: Sat 01 Jan 2022 16:08:53 +0000
ROA not before: Sat 01 Jan 2022 16:08:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56673
IP address blocks: 146.120.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667843816 (0x27ce7ce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce3498b3adf8b06074c3724caf0cf8a4b3db6e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:f3:99:14:90:20:9d:6e:5b:e1:08:f5:94:
bf:3b:54:1d:38:86:70:0a:ed:8b:62:f3:f4:ab:f3:
54:57:19:56:17:4c:dd:fb:d8:e1:60:c6:cb:4e:35:
75:a6:26:4c:fe:52:38:a6:2f:05:bf:0b:f4:62:be:
8f:69:6f:90:43:da:e4:53:44:9a:d2:04:55:51:bf:
1a:51:41:79:99:76:c4:a6:09:54:5d:74:f7:f8:d8:
21:94:e5:fe:d5:91:21:7e:18:e9:8e:1b:14:91:70:
eb:f1:b8:60:d8:97:db:1d:9b:d3:c8:99:13:5e:a0:
0d:e8:0d:9a:56:27:38:d2:7a:70:e0:1b:50:c1:3d:
a4:64:cb:e2:fe:8e:91:88:01:c5:9f:95:e6:4b:a2:
e3:fb:6c:68:f1:3d:ad:ac:1d:db:48:6b:37:db:62:
e1:45:cf:f2:ca:2f:5c:87:94:6a:1d:dd:30:2a:45:
fe:74:03:b1:6f:80:b4:ca:77:29:17:e8:2b:f0:1b:
ea:7f:f0:2c:6d:93:e8:84:8d:53:70:61:64:a0:49:
8c:bf:bb:c4:c1:da:ab:32:1c:2f:2e:5d:96:12:b0:
95:77:ae:2a:b4:13:a2:9a:fa:a0:18:be:e3:ab:cc:
fc:4f:45:b9:97:98:ad:16:40:66:cf:f9:59:08:43:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:34:98:B3:AD:F8:B0:60:74:C3:72:4C:AF:0C:F8:A4:B3:DB:6E:48
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zjSYs634sGB0w3JMrwz4pLPbbkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:6a:55:b8:44:7f:12:57:85:d1:ca:88:49:cc:ba:a0:be:09:
5c:7f:04:62:77:e2:bc:28:15:3a:3f:49:b0:a8:a8:6b:c9:82:
2d:0c:9a:78:0b:3b:3e:dd:b4:62:09:f0:94:a8:ae:99:a9:79:
35:4e:c5:4c:cd:71:34:dd:a3:2a:9a:f1:ff:46:a9:ec:3f:19:
16:be:29:45:b8:db:6a:24:db:1a:3d:0c:71:86:b2:13:4c:0e:
25:4f:e8:77:1a:87:33:22:5a:7e:8e:2b:f8:f0:68:62:57:c6:
9e:c5:55:c4:ed:4d:33:2a:5b:fd:0e:64:fe:2d:0e:ce:5f:e3:
27:49:80:97:f8:1d:d7:3a:a6:2f:ba:6f:54:a9:08:22:ad:16:
f3:8b:f5:85:11:f6:58:ae:b9:eb:ce:2b:43:2c:96:da:9f:a7:
6c:b3:b6:24:1b:05:4b:79:c4:a5:9c:43:9c:ac:91:15:98:03:
a7:49:48:0b:fd:d0:82:c7:69:f8:6b:8a:6c:cd:fe:b3:99:27:
e9:10:5d:8b:da:6c:8f:b2:34:28:47:1c:7b:b3:e4:dc:8e:bd:
08:26:39:e8:53:e1:c4:7f:a4:24:fb:94:d0:8d:09:46:5f:9f:
78:1a:01:1b:d9:cc:0c:e6:62:fa:53:02:71:27:56:f0:8a:62:
b2:d8:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:25 2023 by rpki-client on console-ams.rpki-client.org