Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/zNBRSD42HVP7-jZlL_u2RKUS4gI.roa
File: zNBRSD42HVP7-jZlL_u2RKUS4gI.roa (raw, json)
Hash identifier: Q5GFGsSpnKooXDacqoQOlTmN2+OYBOFB2EQ28eBUaLg=
Subject key identifier: CC:D0:51:48:3E:36:1D:53:FB:FA:36:65:2F:FB:B6:44:A5:12:E2:02
Certificate issuer: /CN=a7e885b6dbad67ea5c1a9a55ee1489a07cbf9542
Certificate serial: AE7149
Authority key identifier: A7:E8:85:B6:DB:AD:67:EA:5C:1A:9A:55:EE:14:89:A0:7C:BF:95:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-iFttutZ-pcGppV7hSJoHy_lUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/zNBRSD42HVP7-jZlL_u2RKUS4gI.roa
Signing time: Sat 01 Jan 2022 06:58:41 +0000
ROA not before: Sat 01 Jan 2022 06:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 217.119.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11432265 (0xae7149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e885b6dbad67ea5c1a9a55ee1489a07cbf9542
Validity
Not Before: Jan 1 06:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccd051483e361d53fbfa36652ffbb644a512e202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:60:04:39:57:0c:b0:b9:4a:19:ed:08:0a:
e9:c3:b5:dc:76:48:d8:9d:13:ba:70:a0:e4:f6:c9:
68:a0:f1:b6:b7:ca:83:cd:e0:b0:1b:aa:da:aa:5b:
b5:e1:7e:eb:a1:6f:f4:f2:d6:79:fa:74:ae:72:0c:
61:6c:99:83:aa:b0:6e:54:eb:3d:17:c4:bc:c9:d9:
99:69:c7:61:25:d7:f5:11:93:c9:9a:e0:94:cf:e2:
e8:aa:ed:b4:b4:68:71:d7:f5:45:6d:d0:e6:56:53:
45:c7:57:4f:6b:74:ee:79:7d:85:1a:dc:c2:10:a3:
b6:9b:03:04:46:f4:9c:50:08:d9:d5:0d:cb:8a:fe:
97:ef:69:25:e0:47:b4:fa:22:57:61:8b:be:99:dd:
cc:f5:f0:7a:5c:db:33:09:04:c2:f6:8f:77:45:71:
20:af:a6:59:06:aa:f0:e6:ae:ea:93:82:79:97:ec:
bc:d3:d5:22:61:4b:73:c8:42:87:10:86:1f:2e:6e:
79:ef:b0:1f:e2:78:79:39:eb:f9:f4:52:f2:a1:c5:
9f:c6:be:18:e2:5b:7d:2e:f7:e6:1e:5b:c6:51:71:
3c:20:e5:b7:69:8c:ab:af:74:47:08:04:56:12:95:
8b:5c:b7:a4:e2:61:a5:56:58:64:f7:58:f6:24:ea:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D0:51:48:3E:36:1D:53:FB:FA:36:65:2F:FB:B6:44:A5:12:E2:02
X509v3 Authority Key Identifier:
keyid:A7:E8:85:B6:DB:AD:67:EA:5C:1A:9A:55:EE:14:89:A0:7C:BF:95:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-iFttutZ-pcGppV7hSJoHy_lUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/zNBRSD42HVP7-jZlL_u2RKUS4gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fbf9b-308a-49ca-9b0f-ad6aaecca27f/1/p-iFttutZ-pcGppV7hSJoHy_lUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f1:ae:40:7f:a6:47:a7:1a:9a:14:ab:4d:c0:7e:37:f0:6f:
ed:bc:51:af:20:0f:ca:22:18:6b:b6:6c:5e:9d:ed:fb:bf:4d:
28:35:3d:2f:00:69:c3:cd:06:7d:e5:80:47:8a:3d:89:16:87:
b1:37:7c:51:a4:03:18:ba:ac:f1:6a:37:21:be:7f:ef:16:a6:
c5:bf:00:b4:e3:df:39:68:3d:7f:63:8d:af:0f:48:ef:09:0d:
56:5f:3c:aa:fc:fc:73:1a:44:3e:bd:ec:4d:8c:11:88:b1:e5:
68:a4:fb:ee:c3:5d:0e:25:a0:67:13:1e:29:79:21:6c:77:83:
f5:16:4d:10:e4:e6:41:83:45:33:0a:d3:c2:8a:66:85:b8:d2:
43:f3:1c:1e:7a:52:d7:8b:df:55:ca:01:e6:6c:c8:6e:17:4e:
5c:5c:54:0e:ce:5e:b9:5b:bf:64:95:3b:f7:1a:fd:cc:22:ec:
a1:63:5b:95:d1:af:cc:8e:50:8e:06:b5:69:5a:e4:ad:fe:4a:
cd:1f:a6:9e:e1:92:f9:50:d0:db:5e:ad:a1:70:0b:0a:f5:77:
e6:22:16:cd:62:11:f9:2a:30:98:1e:4b:ca:c9:2f:c1:38:e3:
e1:03:45:44:aa:33:be:31:10:71:b1:01:57:4b:f1:6d:7c:aa:
50:40:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:59 2023 by rpki-client on console-ams.rpki-client.org