Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Z0BL2_0xCdhiu2oftzuKcULqtls.roa
File: Z0BL2_0xCdhiu2oftzuKcULqtls.roa (raw, json)
Hash identifier: vsCEx3Jy0jc2H5oXL2xPa6gDAylb2t34COLhUhCHUeU=
Subject key identifier: 67:40:4B:DB:FD:31:09:D8:62:BB:6A:1F:B7:3B:8A:71:42:EA:B6:5B
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 3A66B1C7
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Z0BL2_0xCdhiu2oftzuKcULqtls.roa
Signing time: Sat 01 Jan 2022 04:51:46 +0000
ROA not before: Sat 01 Jan 2022 04:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24577
IP address blocks: 82.177.142.0/24 maxlen: 24
82.177.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 979808711 (0x3a66b1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 04:51:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67404bdbfd3109d862bb6a1fb73b8a7142eab65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:c2:d9:e8:df:52:c9:d9:5c:c6:f4:f1:e1:
71:73:9b:8e:c4:07:a2:dc:30:a8:64:ed:6a:84:1c:
56:f3:c0:e9:ea:d8:79:d3:47:dd:4e:d9:bf:46:76:
7e:f0:bd:65:3f:21:00:66:e3:41:d6:d9:d6:b8:4f:
27:80:66:00:b0:21:09:73:7f:f8:bb:4e:a7:d2:20:
bf:56:1c:58:9e:ba:b9:51:0d:24:17:25:32:43:49:
7b:fd:c1:9d:b3:db:32:23:7f:a4:c2:5e:93:5c:83:
32:4f:71:66:05:22:52:5c:81:27:38:8b:c1:2e:a4:
fa:59:50:b2:65:71:cf:22:a9:a4:84:99:1c:c6:aa:
7f:b5:ff:00:4e:f0:51:ff:1b:e2:84:6f:18:a1:e7:
51:26:07:ef:c8:ad:64:09:67:8d:41:d6:6b:cd:d6:
06:27:71:9a:a6:5e:be:77:4b:b6:2d:06:16:1e:28:
e3:3d:1b:be:99:ab:5f:4b:ae:e0:63:80:a8:d0:65:
10:71:ed:ee:e1:a2:8f:1a:bc:68:52:c2:0b:82:db:
38:8b:18:32:85:5a:dd:31:9f:a8:47:e7:6b:0b:e8:
82:e0:a9:ba:e5:58:02:b7:ce:0d:6f:72:a0:65:98:
0e:47:b9:b0:1c:c6:ba:f2:a6:42:64:02:14:ba:0f:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:4B:DB:FD:31:09:D8:62:BB:6A:1F:B7:3B:8A:71:42:EA:B6:5B
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Z0BL2_0xCdhiu2oftzuKcULqtls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.142.0/24
82.177.189.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0c:d7:b1:d8:79:85:41:0e:f7:b9:29:06:28:91:84:e4:18:
3d:16:f9:89:9c:cb:af:21:d8:6d:2b:5e:5e:3b:51:56:fd:b0:
3d:66:51:62:ae:36:f3:2f:b9:d4:d0:72:c4:b9:18:2b:85:db:
8c:a6:18:e5:9f:52:c5:15:c2:04:f0:04:61:27:71:84:cc:9b:
12:cd:9d:ef:0f:f2:37:ae:e0:56:54:40:ba:de:06:c7:62:b0:
9d:f9:c3:b4:db:41:0f:fd:73:ad:4f:58:99:84:9e:f4:a1:dc:
8b:19:a6:92:95:29:9c:7a:35:43:d5:be:45:25:f3:47:f3:ed:
db:95:06:90:ef:11:de:31:6c:21:f3:dd:02:6b:e2:a1:b5:73:
c7:23:81:cd:ae:6d:a2:db:da:67:42:bf:be:ac:e7:7a:a1:02:
76:4f:e0:c8:01:15:84:73:3b:a5:26:20:23:4f:57:b9:c4:f9:
16:6a:07:fc:99:d2:46:9d:61:65:a1:e9:16:88:47:a2:1d:e0:
a7:6e:90:57:0b:55:c5:94:f1:1f:cf:2a:02:56:3c:7e:50:ea:
d2:d7:0b:b0:c0:10:00:43:c3:90:e6:1a:5e:50:f0:66:94:b0:
f3:87:d6:2e:18:90:ab:92:e8:41:85:aa:99:2f:17:4b:f9:ba:
de:0e:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:21 2023 by rpki-client on console-fra.rpki-client.org