Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/z9BiXTElwHXOHXFBeYxD75d7WHk.roa
File: z9BiXTElwHXOHXFBeYxD75d7WHk.roa (raw, json)
Hash identifier: VDgasUfhQqlcMAmuABA3hkf4d0RmyTvrAW+7eB4IV38=
Subject key identifier: CF:D0:62:5D:31:25:C0:75:CE:1D:71:41:79:8C:43:EF:97:7B:58:79
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 02F2589C
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/z9BiXTElwHXOHXFBeYxD75d7WHk.roa
Signing time: Sat 01 Jan 2022 10:53:54 +0000
ROA not before: Sat 01 Jan 2022 10:53:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 193.188.240.0/24 maxlen: 24
193.188.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49436828 (0x2f2589c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Jan 1 10:53:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfd0625d3125c075ce1d7141798c43ef977b5879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:d8:48:d1:37:cc:0d:e9:ce:fc:84:83:07:
72:57:ae:b4:0b:81:ec:66:81:fe:b3:1b:f8:6a:d4:
b8:05:61:eb:3f:f4:71:f2:44:5a:67:5d:09:da:87:
5f:3d:a7:c9:93:5e:ed:3a:d8:25:c7:11:32:a9:8d:
fc:cd:73:6c:58:ee:1d:57:d1:09:b0:f1:3a:b0:0d:
13:3e:f9:fd:1e:6b:1a:b5:c2:2c:ad:3c:cc:d4:cd:
9f:2c:ef:e6:63:75:56:76:d4:7f:95:ff:de:6e:5d:
e2:c4:ec:d3:a7:da:08:f1:04:82:ea:61:00:41:ba:
e2:f6:0b:15:dc:e5:81:d4:96:7e:72:9a:b5:7d:7b:
3f:9a:ad:01:d3:50:36:a2:de:58:2e:6f:70:42:57:
dc:f0:df:9e:2c:c5:a7:40:d5:ea:22:df:ba:0d:f4:
71:36:0e:50:99:73:b5:f6:6a:75:e4:e2:a3:2f:e6:
61:dc:96:34:12:44:bd:61:da:da:7a:b1:62:7b:c0:
3c:b6:b0:57:03:f7:38:75:63:1f:de:a1:3e:06:12:
30:d5:92:25:1d:b0:0d:97:6b:82:1d:1f:fc:5a:39:
18:0a:77:65:ea:5c:e4:2e:0f:1d:67:75:73:69:43:
9f:3b:24:fc:e9:ab:bb:9a:96:0c:dd:5e:e2:03:1b:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:62:5D:31:25:C0:75:CE:1D:71:41:79:8C:43:EF:97:7B:58:79
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/z9BiXTElwHXOHXFBeYxD75d7WHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.240.0/24
193.188.245.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b1:09:83:80:42:a3:a0:8b:4c:ad:3a:d9:7f:2e:c1:d5:2f:
6e:d9:9a:02:56:27:8e:4a:12:a6:26:7c:d6:ec:77:96:4d:d2:
0f:ff:2f:c8:46:22:82:e6:a0:3b:42:a3:0f:67:9d:71:f7:63:
d4:a6:bf:41:12:01:1e:f3:59:35:30:40:56:eb:4d:2e:27:d2:
93:36:b5:c3:90:50:66:6e:58:e3:15:f4:3a:26:6c:13:79:16:
b8:a2:6c:7b:a8:07:44:0e:18:c4:47:1e:db:46:c6:f6:61:b1:
14:10:79:4e:ad:88:17:39:5f:b7:0d:ce:a6:ab:be:8f:63:50:
a4:68:83:df:eb:59:d6:51:cb:39:c2:87:14:c5:a6:82:86:14:
5f:54:1a:37:65:4e:65:e4:9b:e6:13:f3:e6:17:d0:5e:40:71:
20:c0:7d:22:4f:85:48:66:d7:dc:a9:a5:b0:17:94:0a:fb:ca:
3c:e0:58:8c:7c:6b:49:2c:45:64:d6:02:5c:68:ad:b5:59:c2:
64:03:90:cd:bb:57:4c:44:14:9e:e2:de:72:7e:2e:27:af:25:
b8:29:0f:84:4a:43:8e:c8:03:de:7b:4c:6f:a4:65:83:41:48:
01:de:50:3e:d6:93:9a:05:1c:c5:f8:7f:ef:21:af:e3:db:f8:
b5:0b:2c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:08 2024 by rpki-client on console-ams.rpki-client.org