Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/zmMKTud6c7nPnJLIEcyNlh2s4Hs.roa
File: zmMKTud6c7nPnJLIEcyNlh2s4Hs.roa (raw, json)
Hash identifier: SAXDDxNYQyflD8PioaLcseL+OEdivL9+zQolTbnUUZ8=
Subject key identifier: CE:63:0A:4E:E7:7A:73:B9:CF:9C:92:C8:11:CC:8D:96:1D:AC:E0:7B
Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial: 017EA147
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/zmMKTud6c7nPnJLIEcyNlh2s4Hs.roa
Signing time: Sat 01 Jan 2022 13:58:25 +0000
ROA not before: Sat 01 Jan 2022 13:58:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21217
IP address blocks: 193.72.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25076039 (0x17ea147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Validity
Not Before: Jan 1 13:58:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce630a4ee77a73b9cf9c92c811cc8d961dace07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:6f:4e:5e:03:0f:5d:6d:d4:b6:72:47:6f:
b3:a7:f7:c9:b9:1a:15:bb:cf:84:7a:3a:e3:84:67:
71:86:94:f7:6e:40:73:e1:14:c9:ec:59:69:e2:5d:
3a:87:bf:38:75:b0:3c:f5:4a:90:30:28:f2:0b:4e:
42:4b:1a:64:2f:d1:98:45:5e:14:b7:c0:d0:35:d1:
d0:ee:e5:eb:e9:a1:06:f0:17:12:c0:0c:52:78:d1:
b9:69:f9:40:22:a3:9b:9d:7e:51:cd:1d:fa:e7:e9:
8e:8c:e9:3a:3b:59:83:05:38:45:7e:a7:2c:77:e8:
cd:f4:06:0b:30:0c:6f:b1:4d:8c:83:0d:a7:4e:01:
fa:9e:bf:9e:b7:ab:c6:7c:e0:0e:fa:30:14:a2:37:
9b:ae:b8:60:98:e9:d1:02:80:a0:d9:71:aa:ff:b9:
f7:ca:fd:6e:07:a0:22:86:83:89:4b:60:f7:25:98:
60:a9:6c:e9:88:47:0f:a0:1a:ee:c1:9a:15:12:88:
08:9c:d6:76:a0:fa:04:66:bf:b5:20:12:87:eb:0b:
63:98:55:cf:73:75:32:04:d1:98:43:ac:c4:37:de:
ff:1a:bc:6b:6d:d8:99:61:b7:e9:2c:3c:e6:33:f1:
b9:ed:1b:41:c6:4b:13:17:d9:bf:86:5a:ce:79:25:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:63:0A:4E:E7:7A:73:B9:CF:9C:92:C8:11:CC:8D:96:1D:AC:E0:7B
X509v3 Authority Key Identifier:
keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/zmMKTud6c7nPnJLIEcyNlh2s4Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1f:fe:60:2e:76:37:1b:c5:73:22:c3:3c:81:f8:1e:67:e6:
27:53:15:25:35:23:a2:f8:e1:35:0e:74:43:0a:9a:94:57:d0:
e4:01:f9:a4:dc:9e:a0:bd:85:df:5f:b5:ef:28:2d:58:82:a6:
55:de:ee:04:f3:00:ae:d6:de:35:e6:1e:5f:57:18:28:20:63:
d2:c0:e8:9b:e9:0d:6c:24:29:d8:b1:82:9c:2e:f1:c3:7e:c2:
51:15:15:59:51:c7:ee:e8:6e:e9:56:1d:a4:30:10:76:27:e5:
ea:50:03:66:b5:70:7b:fb:b9:51:f9:7c:f9:fc:36:4e:9e:9d:
61:2d:33:28:77:ff:83:7e:ce:1b:0d:0e:36:bf:78:3b:49:c5:
ed:8a:94:cf:fa:2b:51:ce:05:b5:1b:a2:bb:af:e6:c5:b0:c0:
4a:58:48:72:aa:0c:e5:ee:09:59:b7:cc:3c:6a:ef:ec:a9:5e:
3a:c4:9b:8f:13:cf:24:fd:d1:3f:af:5e:bd:ea:46:be:89:d6:
9f:4e:a7:e7:42:3f:82:6c:f4:8a:59:b5:be:f9:4b:5d:73:c1:
3f:8a:b7:42:93:47:6a:a6:6f:c7:35:11:a6:56:70:ad:61:92:
8c:86:a8:3a:d6:4e:bb:8b:7e:b9:be:a8:1e:77:15:51:0d:fb:
51:b9:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org