Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/zfr_9I_wvYUwkbG648h7jISga3o.roa
File: zfr_9I_wvYUwkbG648h7jISga3o.roa (raw, json)
Hash identifier: fW8kkseOLvwLBs4hueMHtu3484HOROUGHJZuOApYnMY=
Subject key identifier: CD:FA:FF:F4:8F:F0:BD:85:30:91:B1:BA:E3:C8:7B:8C:84:A0:6B:7A
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 0D1C696E
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/zfr_9I_wvYUwkbG648h7jISga3o.roa
Signing time: Mon 13 Jun 2022 21:05:13 +0000
ROA not before: Mon 13 Jun 2022 21:05:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54574
IP address blocks: 193.41.248.0/24 maxlen: 24
193.41.250.0/24 maxlen: 24
193.110.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219965806 (0xd1c696e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Jun 13 21:05:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdfafff48ff0bd853091b1bae3c87b8c84a06b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:7b:2e:89:f4:61:a7:17:eb:68:72:71:b9:
0d:26:e1:c8:24:78:88:f7:bf:2d:2d:4f:ab:c4:95:
cc:6a:5a:f7:67:cb:d9:1e:93:05:78:67:0d:02:8f:
09:af:d2:bc:60:98:aa:df:17:c5:66:5b:28:a7:15:
f3:bc:75:cd:90:cb:3d:4b:d4:fe:38:12:04:8d:29:
ab:61:c6:26:45:79:3d:d4:ae:eb:2e:3a:74:99:60:
db:3f:d9:be:fb:38:43:ea:0e:1f:13:37:fc:51:bf:
e2:b9:9e:a7:cf:c2:b7:a4:7b:eb:41:af:e5:5d:32:
ba:e8:8a:59:c4:79:c9:a6:9d:04:92:fb:48:e0:e2:
00:e4:c6:b1:34:99:a0:4a:b3:e5:d7:55:5a:3c:1c:
e6:93:36:93:4d:e0:58:cb:28:3b:fe:ba:ac:ee:4a:
99:41:a8:1e:92:0e:a7:95:f3:f0:32:3d:4b:fc:7f:
5c:4d:b2:5f:71:f9:1e:30:10:f6:58:20:e2:cd:fe:
b1:6f:f1:82:27:1d:2b:42:57:5f:f2:4b:52:f0:c1:
39:a2:20:63:31:21:0d:d2:d6:8a:fa:48:55:f2:fa:
29:cd:76:ac:f3:fa:bc:38:8e:f0:73:3d:89:ed:3d:
25:c2:90:50:5b:2e:c7:af:9a:42:40:cc:af:d9:c8:
30:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FA:FF:F4:8F:F0:BD:85:30:91:B1:BA:E3:C8:7B:8C:84:A0:6B:7A
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/zfr_9I_wvYUwkbG648h7jISga3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.248.0/24
193.41.250.0/24
193.110.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:90:78:dc:62:aa:82:2d:02:09:95:97:33:6a:70:ea:78:e6:
92:a4:56:eb:5d:32:ec:7c:be:a4:6d:30:d2:ba:3c:21:ec:f2:
81:f7:2c:07:1c:8e:99:d8:dd:31:ea:6f:d3:8a:13:f9:f6:e8:
7e:4c:2f:f5:f6:a3:fc:7e:6b:0d:14:a3:ec:f7:fd:05:f6:ec:
45:6b:14:88:24:e7:62:87:fb:01:6a:6b:dc:d2:07:51:6a:26:
a1:ba:82:1f:88:2f:0e:2e:1f:4b:f1:9c:ff:53:5e:87:c5:43:
05:3e:ea:47:c1:e5:13:69:dc:60:95:17:d7:41:27:d3:08:a7:
03:db:1f:9c:e4:82:b1:3e:1d:da:67:e8:7a:89:81:39:44:6e:
0d:a6:72:c9:5c:9a:bd:58:16:86:bb:34:b0:d7:3b:cf:23:3d:
6c:f7:ca:92:d2:db:ec:c7:8e:c2:4e:e9:4e:b4:08:8f:76:6d:
ea:8e:c0:a7:61:7b:94:a9:c8:34:b2:6f:c4:5a:cf:9c:8b:65:
0b:74:c8:c6:97:23:ff:fb:a4:d1:ee:a3:f7:99:bb:01:7b:0e:
6b:2c:6e:05:da:2d:ca:ae:d0:84:3f:e3:5d:20:1a:c7:a8:22:
fa:ca:10:e9:3f:4c:fa:bf:b6:af:a1:e5:36:05:37:58:e8:89:
5d:04:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:33 2024 by rpki-client on console-ams.rpki-client.org