Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZgIZSPl1ZAu71fYWI1sIwdmC3o8.roa
File: ZgIZSPl1ZAu71fYWI1sIwdmC3o8.roa (raw, json)
Hash identifier: 5upSHh7ZQLcR66kwY/SNcegjD1kgIun5YeC5RTk0b+c=
Subject key identifier: 66:02:19:48:F9:75:64:0B:BB:D5:F6:16:23:5B:08:C1:D9:82:DE:8F
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 1AAFCFE5
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZgIZSPl1ZAu71fYWI1sIwdmC3o8.roa
Signing time: Sat 01 Jan 2022 16:03:04 +0000
ROA not before: Sat 01 Jan 2022 16:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34684
IP address blocks: 212.252.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447729637 (0x1aafcfe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 16:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66021948f975640bbbd5f616235b08c1d982de8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:ba:2b:c8:af:8b:1f:8a:4d:52:66:b9:d2:
5b:ce:22:70:51:2b:5a:ea:a4:2d:d2:dc:dd:c1:2a:
47:9b:e6:bb:1e:a4:5c:8d:79:a0:a0:70:77:2e:11:
8b:82:06:83:75:9d:5f:5b:6d:1f:7c:06:be:1f:01:
58:d1:80:e8:1d:82:29:af:9c:67:f2:58:a6:91:fe:
a5:5e:c7:88:ef:b7:32:f1:25:c0:c5:d3:29:b7:70:
ce:a1:82:0b:73:6b:4a:4a:45:0d:40:fc:43:c7:9f:
e2:e5:5c:cd:1b:f9:17:86:95:69:99:7a:b1:55:67:
95:05:37:98:9d:1a:a0:6d:02:60:1b:1a:aa:56:13:
fb:22:48:ca:ac:4b:34:07:a5:fc:59:3c:32:10:7f:
6b:e3:df:5f:7c:76:ff:d1:e3:fd:48:d1:18:3e:2c:
92:69:4f:35:6f:c1:07:f4:e4:b7:f1:52:e0:da:f6:
cc:38:fd:f2:ba:d0:da:12:b0:4c:ce:6a:c8:78:0d:
43:4e:a2:98:5f:9e:f4:38:34:2f:4c:19:58:b3:de:
02:c5:48:18:35:cc:1b:ea:89:2d:e5:87:91:70:cb:
c9:0b:eb:24:a9:60:48:ee:be:74:bc:72:16:ac:13:
da:fe:c1:01:64:9b:91:1e:f8:20:62:bd:52:a0:b9:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:02:19:48:F9:75:64:0B:BB:D5:F6:16:23:5B:08:C1:D9:82:DE:8F
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ZgIZSPl1ZAu71fYWI1sIwdmC3o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.252.135.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d7:cd:ed:b8:0d:9e:b9:47:ed:ed:55:7f:82:44:8f:45:c6:
0a:fc:94:b0:c1:2a:eb:37:d5:46:b8:bb:42:ba:a5:2e:59:10:
7f:2a:f8:6b:88:2e:dc:f7:8c:1d:6b:70:9b:72:30:19:59:24:
a6:ae:ac:a2:1f:df:46:09:b5:d2:c6:91:eb:9a:2f:78:6e:ff:
90:23:b6:2a:14:86:35:81:1a:c4:d6:d4:cd:22:a9:ad:90:bc:
2a:88:be:99:e7:5e:16:22:80:fc:a8:60:cd:45:01:eb:f5:ad:
0a:9f:00:86:59:93:b2:fa:d9:b8:66:4f:87:d9:c5:cf:2f:a1:
76:ce:4c:d8:0e:33:08:47:b2:0d:b3:1f:b8:94:35:21:71:b5:
86:a0:4e:07:8c:d3:e2:ab:02:23:4a:e5:2f:c6:f8:d8:97:4c:
e1:6b:30:47:66:08:00:d3:c0:e6:bb:d3:03:69:35:17:55:c7:
c8:a1:77:9f:59:82:93:fb:ba:44:47:25:66:49:75:f8:14:7b:
30:64:a2:e9:38:c8:f6:ad:40:c5:8c:ea:38:35:d2:1f:c1:a5:
2b:e1:43:e1:de:ef:e9:78:64:a1:01:47:f9:15:61:f5:e4:3b:
24:3f:72:43:4a:9a:ca:e1:4a:ee:d4:71:17:73:5e:0d:56:25:
a4:d7:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org