Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/rmlSst-zZ17inMZonFKVW9Eg-qg.roa
File: rmlSst-zZ17inMZonFKVW9Eg-qg.roa (raw, json)
Hash identifier: PEZzgni+O1WNTabNz1YYc+ThtkSW5HZeMVX6G2y2Bng=
Subject key identifier: AE:69:52:B2:DF:B3:67:5E:E2:9C:C6:68:9C:52:95:5B:D1:20:FA:A8
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 0FFE28BD
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/rmlSst-zZ17inMZonFKVW9Eg-qg.roa
Signing time: Sat 01 Jan 2022 04:55:42 +0000
ROA not before: Sat 01 Jan 2022 04:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42630
IP address blocks: 193.200.58.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268314813 (0xffe28bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Jan 1 04:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae6952b2dfb3675ee29cc6689c52955bd120faa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:83:72:46:00:29:9e:11:9e:97:56:f4:92:
fe:55:49:fc:ae:b5:b0:ca:3b:00:f4:9b:57:4f:91:
8b:00:bb:20:c9:09:19:16:91:ff:56:df:6f:87:84:
8b:b9:75:17:7b:81:07:0c:aa:51:1c:82:16:6e:94:
2c:e8:16:a8:b5:14:69:3f:b8:e8:2a:7d:4e:74:3c:
a4:d5:df:76:09:9f:1f:c5:88:3c:78:39:c7:f4:09:
29:34:5d:59:12:f7:60:85:16:a1:4e:12:dd:70:85:
87:b1:92:cf:88:f8:81:f9:65:d9:e1:72:f5:60:7e:
6a:cb:b7:79:db:ff:e0:c0:31:cd:67:0b:ed:e3:48:
24:24:13:e4:db:15:4b:e5:7f:2c:4e:69:fe:9e:aa:
9d:91:bb:08:99:f5:c3:28:2e:6c:4a:48:e1:06:4a:
b3:20:70:ac:23:79:33:47:d3:08:2c:55:eb:f0:16:
1d:26:fa:d8:89:f3:12:ed:8b:39:11:11:bd:78:72:
e9:82:44:9c:9e:4d:2c:41:2d:22:9f:e2:24:fe:fe:
56:97:c8:cd:5f:6b:88:f8:48:e7:94:be:cc:cc:25:
a8:85:fa:fc:b5:db:cb:0a:aa:b9:89:b5:2d:65:5f:
79:fa:ed:57:28:0b:81:65:cc:dd:58:b6:22:28:41:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:69:52:B2:DF:B3:67:5E:E2:9C:C6:68:9C:52:95:5B:D1:20:FA:A8
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/rmlSst-zZ17inMZonFKVW9Eg-qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.58.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:4a:40:93:b1:21:03:74:0c:17:8d:97:0e:3d:67:fb:1b:af:
6c:69:4d:c6:1a:65:64:8f:9f:36:af:25:5f:bc:da:95:a2:3b:
1f:88:00:5f:b4:82:a6:c2:37:66:73:5b:d0:1a:92:72:42:ed:
31:de:bb:ef:03:76:71:95:6c:df:49:bc:ce:ca:89:20:28:a9:
4d:f4:db:21:cc:30:21:40:e4:61:3f:60:61:e8:a1:07:5d:02:
d1:82:a4:01:6d:11:ca:9c:dd:1f:c7:05:19:13:8e:7a:78:09:
41:93:23:16:49:2c:14:73:7c:24:ef:56:d2:cc:6a:99:51:d1:
e0:dc:b5:b2:53:ab:73:a8:de:24:9a:fa:78:fd:f2:97:01:de:
19:91:ba:67:08:21:6c:78:a9:ce:c6:b5:8e:26:26:86:dd:cf:
8f:5b:32:1b:fb:36:7b:53:e4:e4:7c:00:a7:0c:8b:05:b7:99:
7b:b4:d9:2a:f0:3f:9e:20:64:b5:be:e8:f6:6b:43:39:79:07:
42:df:7e:ac:66:f1:f4:df:9b:a4:04:59:07:6f:23:d2:07:75:
33:bd:b4:47:a7:33:c9:92:22:1d:e8:4c:f2:43:3f:08:9a:59:
4f:bb:b2:b1:1e:62:b9:dd:da:2f:22:a6:33:a9:48:01:93:2f:
3f:2f:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:21 2024 by rpki-client on console-fra.rpki-client.org