Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/zjyxTLpr1uTS_iBQR-7UVDcq-08.roa
File: zjyxTLpr1uTS_iBQR-7UVDcq-08.roa (raw, json)
Hash identifier: yC25petSkC9oGTJLdZsiC8z2q7c3uPpO40RbxiVBsUY=
Subject key identifier: CE:3C:B1:4C:BA:6B:D6:E4:D2:FE:20:50:47:EE:D4:54:37:2A:FB:4F
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 1A399ABA
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/zjyxTLpr1uTS_iBQR-7UVDcq-08.roa
Signing time: Sat 01 Jan 2022 14:54:59 +0000
ROA not before: Sat 01 Jan 2022 14:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3242
IP address blocks: 193.43.132.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439982778 (0x1a399aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Jan 1 14:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce3cb14cba6bd6e4d2fe205047eed454372afb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:6b:1d:28:20:f9:14:7a:22:23:74:f3:fa:
fc:3d:81:23:a6:23:76:86:59:03:c4:a0:44:3b:00:
1d:49:53:96:87:3f:9c:e9:b4:61:4f:74:87:f3:8b:
1b:6e:fa:e0:e7:b4:a0:2e:cd:59:80:da:32:90:bc:
b9:82:c4:2d:ba:12:3b:0f:32:09:41:f1:d1:d1:30:
b9:82:93:9c:48:2a:fd:d0:45:5b:97:92:a2:1a:70:
34:3b:c2:d5:7c:c3:a9:c9:83:05:55:01:12:3c:86:
90:43:5a:1d:e2:b8:55:6f:12:ba:d7:99:c9:df:01:
1d:24:c3:bf:b5:da:43:6a:1d:fe:46:a7:41:02:d0:
a8:f4:f1:9e:03:ce:a7:6b:da:14:ac:c1:c0:59:65:
e9:05:03:3d:46:76:73:c9:28:23:99:00:2e:33:14:
96:a0:42:6d:fe:b9:49:2c:4f:ba:e6:d8:c1:df:95:
1a:57:20:44:9d:d3:86:1e:5c:a7:a9:09:62:e2:3c:
25:8d:01:9f:c6:ba:b6:83:0b:a4:a9:d3:84:fa:d5:
7a:96:bc:e1:2d:6b:af:c4:d1:f3:86:74:4e:69:83:
e6:4b:02:06:c2:80:d0:07:c0:c4:39:7f:72:d0:41:
9f:6a:f7:2c:56:9e:20:65:58:ce:e5:2c:1d:eb:2d:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:B1:4C:BA:6B:D6:E4:D2:FE:20:50:47:EE:D4:54:37:2A:FB:4F
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/zjyxTLpr1uTS_iBQR-7UVDcq-08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.132.0/23
Signature Algorithm: sha256WithRSAEncryption
79:c2:3b:54:b0:1d:2f:65:15:80:7f:98:10:7d:5b:3a:e0:c6:
89:4c:e2:23:19:63:3c:df:f8:57:e4:cc:cf:62:3f:3c:66:67:
d7:2c:81:e3:73:32:e5:15:5f:15:fe:23:b4:fe:1f:73:c2:40:
c8:e4:16:dd:ac:2a:2d:73:c2:e6:02:e0:d5:b2:5e:03:db:42:
6a:37:39:fd:ae:09:1b:12:c2:47:0c:04:24:1f:28:53:2c:0a:
34:40:60:f9:17:ee:8e:0e:0e:d0:58:0b:dc:e1:22:eb:f4:04:
e2:33:77:e4:28:b8:4b:47:77:94:52:bb:02:5e:59:2d:44:ae:
a4:64:7b:0f:7b:69:02:0d:ca:82:5a:f4:95:dd:26:36:3f:fe:
eb:c0:b3:d3:1a:03:1d:91:36:8e:16:b6:ad:22:29:57:14:df:
3e:24:7d:2f:ed:de:fd:23:6e:6a:05:af:8d:b9:84:43:46:67:
97:37:c7:68:6a:ce:5a:b1:4a:46:b5:dd:5b:c1:6a:14:db:28:
5c:b8:b4:f2:33:dc:68:7a:c2:b2:a3:11:67:dd:9a:fe:88:58:
b8:99:41:c8:87:02:a4:ee:63:7c:28:27:72:dd:51:2c:b4:7d:
45:86:82:f9:9f:dd:d0:63:f4:11:86:55:0a:49:d6:e1:c2:bb:
85:f8:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:54 2024 by rpki-client on console-ams.rpki-client.org