Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ZvMrr53GRAx0x7-5ENxjI9SEKrE.roa
File: ZvMrr53GRAx0x7-5ENxjI9SEKrE.roa (raw, json)
Hash identifier: O+92LckUJSijy+nWnkQkCYzN5q8YkTf61FYWsijdysI=
Subject key identifier: 66:F3:2B:AF:9D:C6:44:0C:74:C7:BF:B9:10:DC:63:23:D4:84:2A:B1
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 3889272F
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ZvMrr53GRAx0x7-5ENxjI9SEKrE.roa
Signing time: Sat 01 Jan 2022 01:51:49 +0000
ROA not before: Sat 01 Jan 2022 01:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206883
IP address blocks: 188.212.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948512559 (0x3889272f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 01:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66f32baf9dc6440c74c7bfb910dc6323d4842ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:e3:bd:7c:64:ca:ac:c7:1b:ed:21:f1:4a:
c3:75:68:7c:c3:86:2a:87:fe:1b:5c:9b:9d:e7:2c:
2e:bd:e7:be:89:c8:3c:f9:ca:73:30:e4:b7:f4:46:
1d:a1:b1:90:a1:ad:41:7a:35:4e:83:81:ce:e0:d3:
3b:96:3f:ab:b5:bb:23:28:68:6d:ca:08:94:96:ee:
3e:fb:7b:de:ac:7b:da:a7:8a:d2:c7:ff:78:fe:96:
96:39:2d:ff:ea:a5:5e:78:9b:2c:22:bd:e8:f8:e6:
c7:37:80:56:ca:ed:ea:a6:59:31:88:c2:95:8f:8c:
52:a4:5a:3c:94:8e:b3:d8:92:df:60:b4:92:7d:d1:
8a:bf:ea:d7:a7:9b:e5:e2:5c:70:52:00:fd:87:44:
d8:43:ae:3d:c5:3f:79:0a:89:e4:6e:df:1e:e6:a0:
f4:37:55:c2:06:f6:12:fb:af:ab:ca:a2:b1:6a:b1:
2c:63:38:9c:c5:47:8b:45:cc:f5:ff:6b:90:d8:76:
5b:1d:36:d3:ae:39:07:88:0b:43:46:59:b5:57:f9:
6a:33:df:9c:9a:55:f5:be:ad:eb:82:3f:3e:db:13:
5d:1d:87:6e:91:a6:a6:90:f4:04:6d:6a:fd:66:3b:
18:ee:af:82:69:cd:27:02:46:89:05:26:55:53:2c:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F3:2B:AF:9D:C6:44:0C:74:C7:BF:B9:10:DC:63:23:D4:84:2A:B1
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ZvMrr53GRAx0x7-5ENxjI9SEKrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.116.0/22
Signature Algorithm: sha256WithRSAEncryption
36:de:1a:06:13:a2:69:25:b4:2c:b8:86:1a:aa:42:27:08:06:
b7:ac:a7:a0:af:93:3f:a3:b7:8d:96:9c:4a:a5:08:8a:27:fe:
4c:5c:44:02:8d:a7:d9:18:d0:5b:c9:7f:6f:23:0a:a7:00:14:
3a:55:74:6f:ce:71:f1:88:cd:30:99:a1:9a:ea:ba:b5:dd:f9:
72:39:48:2a:c3:3f:28:7d:46:7d:73:21:31:54:0c:74:c5:3c:
f1:54:56:98:c4:20:51:bb:79:8d:41:6c:46:75:85:b9:de:f7:
09:50:a0:2c:31:aa:6a:67:66:da:fa:53:9f:2c:4c:f1:fa:42:
22:ab:d8:08:86:71:94:bc:85:ed:a9:4a:74:ea:68:b3:ff:45:
4c:4f:be:c1:31:70:85:8b:20:4e:3b:25:39:32:26:72:51:f7:
a1:bb:a9:51:fa:83:75:73:23:31:db:3e:84:60:b7:76:d0:20:
c2:11:75:2b:9e:67:be:e1:af:b4:76:0f:01:3b:96:da:b5:02:
9d:7e:98:cb:32:e8:79:76:6e:bd:a4:81:47:a7:7a:d3:c4:4c:
d8:2e:db:ae:14:f8:e6:0d:45:f4:38:a1:b3:ec:d6:b5:82:ae:
32:74:4f:13:5f:44:4b:47:e1:c2:bd:5e:b9:46:6f:bb:8f:37:
50:8d:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:00 2023 by rpki-client on console-fra.rpki-client.org