Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/zGYR58tbBpXEAMSr8j6peYHGDyE.roa
File: zGYR58tbBpXEAMSr8j6peYHGDyE.roa (raw, json)
Hash identifier: /LCDxS1ldgCuZCyiQaVBXlg3XRpT4qBni2mYH2cSQ68=
Subject key identifier: CC:66:11:E7:CB:5B:06:95:C4:00:C4:AB:F2:3E:A9:79:81:C6:0F:21
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 0184BE685C66C28C6EA606B5E4ADFA0C3F0A
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/zGYR58tbBpXEAMSr8j6peYHGDyE.roa
Signing time: Mon 28 Nov 2022 13:23:41 +0000
ROA not before: Mon 28 Nov 2022 13:23:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47174
IP address blocks: 195.216.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:68:5c:66:c2:8c:6e:a6:06:b5:e4:ad:fa:0c:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Nov 28 13:23:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc6611e7cb5b0695c400c4abf23ea97981c60f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:ae:75:03:af:11:6f:54:0d:f3:68:49:e3:
be:5d:67:17:fa:6a:c9:2e:3b:c0:aa:87:5e:09:ec:
83:74:90:35:7c:aa:04:a2:58:b0:9f:e7:fa:b2:50:
36:3d:24:d7:64:2e:d3:ad:c5:10:aa:19:db:cf:60:
57:a1:d5:5c:dd:a5:cc:59:c5:45:ac:95:85:01:20:
dc:fa:7a:ac:ec:93:87:e7:50:a8:6a:16:d2:c2:f4:
80:cb:1c:cf:ae:a5:27:b8:98:7d:7c:56:46:41:44:
1c:00:c7:f0:ce:33:76:37:e6:34:e2:1e:61:14:4f:
bf:a6:ca:bb:bf:64:75:2f:ef:a5:0e:07:a1:d9:8d:
37:85:9c:90:d1:e3:c4:72:74:df:ab:e9:e8:15:36:
90:f4:f1:cf:c2:8f:10:73:41:6e:b7:15:87:bf:6b:
f4:b0:cc:53:33:39:95:e9:3d:5f:91:2a:a0:7f:31:
17:1a:6a:ac:50:16:6c:9d:1e:88:9f:80:1d:7c:3e:
b8:df:00:3a:9c:8f:bf:d2:a7:27:12:da:84:72:68:
79:9b:ec:03:08:af:d6:a1:90:de:5b:61:64:a9:a0:
61:e8:ad:89:ce:10:13:f9:32:50:fc:48:81:b4:83:
09:e9:9b:26:42:d0:f5:72:d2:a0:df:97:8d:68:6b:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:11:E7:CB:5B:06:95:C4:00:C4:AB:F2:3E:A9:79:81:C6:0F:21
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/zGYR58tbBpXEAMSr8j6peYHGDyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.228.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:16:28:10:a6:2e:4d:9c:34:20:fc:d9:e0:64:d9:0a:c2:ed:
9f:32:a9:f6:5a:9d:2d:dc:ea:3e:77:00:cb:9d:aa:8f:09:39:
5a:53:a8:11:a7:63:b7:67:5b:52:53:71:df:3a:d9:49:68:6c:
b0:91:2a:00:52:06:90:72:64:9e:f5:ed:4a:39:87:a0:f9:ba:
19:fc:4a:f7:b2:ce:58:5c:89:54:a6:73:3c:c9:3d:3d:22:5e:
6b:7a:b8:b2:b6:77:d3:55:ce:f2:e0:2a:23:37:9c:5f:66:1d:
fc:bd:dc:e0:3c:26:a9:4e:c4:78:44:7e:fa:4b:f0:37:84:48:
fb:0a:fd:5e:80:c8:92:7b:4f:d9:87:29:4d:32:56:b7:04:00:
8c:ca:f3:24:e5:44:25:56:a3:ca:11:f7:a2:ad:c9:9f:02:88:
05:81:6a:93:63:1e:fd:73:d8:59:26:3d:42:99:0e:27:ac:32:
d0:19:3b:f9:a4:7d:96:36:a0:5d:45:e9:d7:b2:04:4f:65:83:
99:88:5a:72:00:d2:4a:ee:c7:04:74:68:9b:67:17:7b:80:cf:
5b:b7:4e:64:ff:20:04:53:20:5e:b8:d2:0b:9f:37:3d:9d:9f:
34:d5:e7:b6:aa:ba:6e:9d:12:fd:5f:a4:83:32:a4:69:4c:1d:
6e:92:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:19 2025 by rpki-client