Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/DZZKzCe0bVVANGZm5AZ6DCW6RA8.roa
File: DZZKzCe0bVVANGZm5AZ6DCW6RA8.roa (raw, json)
Hash identifier: yLFJYbY3F1lqQGGWrhCH+Myh2eO+ecDCSbINQC6abuc=
Subject key identifier: 0D:96:4A:CC:27:B4:6D:55:40:34:66:66:E4:06:7A:0C:25:BA:44:0F
Certificate issuer: /CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Certificate serial: 6DB5
Authority key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/DZZKzCe0bVVANGZm5AZ6DCW6RA8.roa
Signing time: Mon 28 Feb 2022 19:39:51 +0000
ROA not before: Mon 28 Feb 2022 19:39:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 212.46.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28085 (0x6db5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Validity
Not Before: Feb 28 19:39:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d964acc27b46d5540346666e4067a0c25ba440f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:9d:bd:cc:64:f0:97:b5:97:8f:6b:9e:38:
c8:8a:fc:a2:f6:e8:aa:7e:f1:c1:77:fd:17:47:98:
43:10:73:d2:79:61:16:37:d7:b4:13:ab:eb:b8:58:
8e:90:f4:b5:2c:23:8c:90:b4:f3:d2:ec:86:d3:27:
7c:57:ca:24:18:ff:71:aa:5b:0c:f8:ec:73:5c:21:
96:33:95:03:2d:30:57:5b:59:41:38:31:9e:eb:b8:
18:10:b2:37:0d:b1:60:52:53:04:d6:a4:58:cd:5e:
4c:96:f0:ea:1c:26:c0:9e:f5:7c:9f:9d:a1:74:8d:
8c:3a:c5:9a:53:06:60:6b:d9:93:3e:92:b5:80:79:
12:fb:dc:12:93:86:6f:d0:2c:11:b6:f8:ae:9e:f1:
6a:0e:63:ca:3c:e8:2f:2d:27:04:5e:05:2f:75:3e:
b0:0d:b8:6c:d2:f9:00:15:da:cc:31:1e:e5:c1:81:
50:1a:ed:3d:07:10:03:00:90:f7:5a:bb:45:ed:ce:
59:1a:a1:06:b6:c3:bc:23:ab:9f:d1:71:f7:2d:85:
85:ee:46:8e:a1:ea:78:a4:93:9f:ff:9c:8d:b6:5d:
a0:ba:b6:26:93:64:56:2c:eb:12:7e:25:b4:60:47:
eb:bb:05:61:86:32:3f:e6:1b:f9:fe:66:fa:19:22:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:4A:CC:27:B4:6D:55:40:34:66:66:E4:06:7A:0C:25:BA:44:0F
X509v3 Authority Key Identifier:
keyid:E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/DZZKzCe0bVVANGZm5AZ6DCW6RA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.46.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b3:c3:6a:17:5f:d1:15:2d:db:ee:ff:2b:d9:13:f2:29:59:
ea:53:3b:6b:f4:30:87:94:a4:39:06:99:bb:f0:2d:2e:92:6e:
8d:22:ce:03:b6:72:f2:18:74:82:36:43:fd:3a:11:6f:9a:84:
77:63:cc:67:c0:37:0b:fe:f1:9f:95:d8:21:5b:ce:16:c9:22:
22:8e:32:ae:bf:ed:54:29:e9:32:e3:9e:7b:43:24:72:cd:37:
17:77:78:b5:18:b5:48:24:7f:be:ad:f6:56:3d:6f:6f:77:76:
93:15:c8:55:31:46:ab:f6:37:67:07:0f:c8:8e:83:40:df:29:
a3:09:b0:01:be:52:ee:1f:42:a4:10:fd:9a:b2:98:9e:59:ab:
86:74:13:1c:67:39:f4:4e:c5:8e:36:5d:ea:40:28:b8:69:6c:
8d:d4:01:00:e8:38:f7:bb:37:31:89:01:9a:53:ff:af:80:fe:
d7:c7:8d:72:a2:75:f6:ff:cb:98:13:f9:59:96:54:05:ee:35:
bd:58:ce:1a:01:76:d3:32:a7:11:35:ad:f9:44:58:d5:aa:9c:
ce:cc:58:38:57:14:92:fc:9e:32:04:84:5e:87:da:00:1a:eb:
13:82:bd:42:94:20:7a:a5:e7:6d:51:f4:a9:be:cb:35:ba:19:
03:21:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:32 2023 by rpki-client on console-ams.rpki-client.org