Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/Zz8ajcXB2VDXVveYSKjAMY8qia8.roa
File: Zz8ajcXB2VDXVveYSKjAMY8qia8.roa (raw, json)
Hash identifier: R1XN5ShwVjyx4SU9RtQ7sG6TPvDb5544EMwJEWht4Ks=
Subject key identifier: 67:3F:1A:8D:C5:C1:D9:50:D7:56:F7:98:48:A8:C0:31:8F:2A:89:AF
Certificate issuer: /CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
Certificate serial: 03BC4A12
Authority key identifier: A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/Zz8ajcXB2VDXVveYSKjAMY8qia8.roa
Signing time: Sat 01 Jan 2022 13:56:47 +0000
ROA not before: Sat 01 Jan 2022 13:56:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207932
IP address blocks: 194.127.200.0/24 maxlen: 24
194.127.201.0/24 maxlen: 24
194.127.212.0/24 maxlen: 24
194.127.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62671378 (0x3bc4a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5e69bd82d5ec0c7bd3d5dc9f92902f35e357a45
Validity
Not Before: Jan 1 13:56:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=673f1a8dc5c1d950d756f79848a8c0318f2a89af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:48:6a:4a:33:59:0c:b3:72:26:0d:97:27:
57:dc:6a:48:96:6b:19:43:dd:c9:cd:02:77:3f:fa:
68:52:4c:54:7b:94:43:be:b7:c1:b0:19:5f:99:5f:
4c:a1:3a:76:76:1f:b7:be:5e:54:df:76:f5:63:e9:
81:ff:db:94:2e:c4:f7:61:06:bf:50:97:7e:a9:dc:
1f:c0:8e:01:12:b7:2a:e4:50:65:80:91:f9:b5:2f:
7a:cc:67:58:91:19:4b:de:74:c2:80:ea:a1:19:fe:
81:88:fc:d1:93:98:fe:b7:8c:2d:e0:7b:87:56:54:
1b:f5:8d:94:65:ac:87:dd:08:86:51:22:c6:1f:7d:
f0:34:78:ed:fe:dd:2d:34:28:3c:99:3f:04:a8:df:
9a:57:3d:20:64:fa:f0:2c:3f:e1:ab:09:8f:91:90:
2c:31:fb:8c:17:fd:90:19:f2:dd:be:9e:5d:f5:e9:
19:9c:ac:61:6b:1b:82:a5:f1:ee:c0:df:34:69:98:
9b:cf:48:7a:14:c0:c8:ae:fc:fa:8f:84:9d:32:fd:
d9:9c:da:b5:3b:e3:db:ee:6c:24:41:23:f5:7a:a5:
f6:84:64:52:73:52:f6:f1:c5:96:6d:42:4a:d1:87:
71:63:75:ff:59:40:15:17:ba:51:d5:8e:15:f4:8d:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3F:1A:8D:C5:C1:D9:50:D7:56:F7:98:48:A8:C0:31:8F:2A:89:AF
X509v3 Authority Key Identifier:
keyid:A5:E6:9B:D8:2D:5E:C0:C7:BD:3D:5D:C9:F9:29:02:F3:5E:35:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/peab2C1ewMe9PV3J-SkC8141ekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/Zz8ajcXB2VDXVveYSKjAMY8qia8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/98149a-b996-45dc-8fcc-53e6c14fcc0c/1/peab2C1ewMe9PV3J-SkC8141ekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.200.0/23
194.127.212.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:bb:84:39:20:f0:6f:e2:d7:5c:2d:3a:87:e1:bc:53:2b:78:
32:0c:c4:b1:97:0e:a6:3d:28:6f:92:fa:a6:5f:30:5f:91:d4:
43:66:8f:d3:f8:6c:1e:ea:fa:48:50:50:ad:e4:b5:a3:8b:03:
0e:ff:23:c2:6f:81:86:75:27:b1:2d:66:a2:cc:7d:1d:e6:73:
3d:20:65:3a:55:b9:c2:18:4b:59:4d:69:c2:b7:fe:d0:fe:66:
f7:b5:f3:9a:f0:be:3d:64:ef:5d:17:8a:98:e1:25:84:08:54:
01:6f:d1:29:00:10:c0:d0:70:a6:43:c7:d7:b5:7e:aa:b0:e5:
bb:09:9c:46:9e:5d:11:b7:a7:e1:34:52:d8:6b:32:c6:00:9e:
77:4f:2a:56:00:0c:5e:34:25:57:fa:a4:d1:74:e3:35:8d:53:
0d:cc:ba:86:58:41:f9:57:1c:cd:29:f0:79:30:d8:f4:8e:8b:
57:d1:9d:55:43:42:2a:5c:5e:c4:4b:15:5d:55:f9:2d:4b:8e:
f7:36:4f:34:fd:27:90:78:e2:f4:3b:54:79:20:9c:cd:7e:a2:
fc:14:b5:38:72:74:f1:a9:3d:6e:fd:d7:b4:2a:b2:e5:16:aa:
4e:64:d3:82:32:17:d6:18:06:7f:f5:18:52:03:7a:c1:4f:e1:
c9:38:cb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:12 2024 by rpki-client on console-ams.rpki-client.org