Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/ZB6e8PbvMXQ5JM7Y7LsxLU81rf0.roa
File: ZB6e8PbvMXQ5JM7Y7LsxLU81rf0.roa (raw, json)
Hash identifier: sTKzRtkjI1n4J+vK525awpy2m49FYOKnxQoSQtXaU4g=
Subject key identifier: 64:1E:9E:F0:F6:EF:31:74:39:24:CE:D8:EC:BB:31:2D:4F:35:AD:FD
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 03A279B9
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/ZB6e8PbvMXQ5JM7Y7LsxLU81rf0.roa
Signing time: Sat 01 Jan 2022 04:00:54 +0000
ROA not before: Sat 01 Jan 2022 04:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 195.34.94.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60979641 (0x3a279b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jan 1 04:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=641e9ef0f6ef31743924ced8ecbb312d4f35adfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5a:16:eb:f6:62:68:af:a9:5f:d7:17:5b:4b:
9d:3d:81:69:07:1b:89:7c:b4:40:86:94:fe:fd:4c:
d3:f1:aa:f1:70:2b:be:ae:0a:8d:e2:b7:be:a2:8d:
76:5b:7a:1a:97:04:05:bb:96:fe:4b:82:24:7b:9e:
26:f3:c9:ae:fe:fc:37:18:c9:79:f7:18:22:94:23:
0e:c0:33:b6:bc:73:f2:1d:b3:dd:5e:7e:75:ce:08:
d7:1c:e6:aa:53:23:8f:e0:c8:1f:84:42:9d:8b:13:
4a:84:3b:83:66:28:f2:4a:62:94:60:ef:83:e2:27:
a9:e5:b0:e9:60:5d:17:66:15:20:1b:ab:5c:4d:94:
d0:59:00:8c:a9:6d:4f:69:ba:70:21:23:22:46:9e:
be:cd:be:f8:b0:6e:fa:4b:30:5c:af:88:99:13:1e:
eb:ce:72:94:db:f0:96:1e:e5:64:c1:ee:05:26:c0:
fa:99:f5:d3:3e:4d:b0:c7:38:af:25:ff:dc:40:9d:
c3:7f:d8:e8:9b:9b:01:40:a9:cf:3f:38:70:5c:d6:
93:b4:d1:66:16:02:d2:c1:88:c1:cb:cc:48:b5:51:
c7:6c:ca:1f:2a:d5:eb:9d:57:be:af:9f:db:31:04:
95:29:3b:70:c9:a3:88:d3:5b:8e:f7:53:98:a5:77:
b6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1E:9E:F0:F6:EF:31:74:39:24:CE:D8:EC:BB:31:2D:4F:35:AD:FD
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/ZB6e8PbvMXQ5JM7Y7LsxLU81rf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.94.0/23
Signature Algorithm: sha256WithRSAEncryption
37:5b:f1:a1:0b:63:7d:22:35:6f:ae:99:22:17:d0:55:aa:fa:
5f:4c:a5:3c:ed:34:74:7f:89:1a:24:93:f9:c8:04:ca:0f:84:
c1:74:d3:dd:6f:9b:05:24:29:d9:d2:21:58:88:61:5c:98:eb:
7d:16:dc:9a:e5:6b:99:a5:80:a7:90:c1:b8:72:14:ca:ce:4b:
d9:2c:47:86:dc:c4:19:f9:f3:5c:2e:9a:90:71:5e:61:da:cd:
e6:21:ee:84:dc:0e:ef:e4:f1:94:98:1e:06:d6:ba:24:0a:6b:
83:98:d4:55:03:98:c0:ef:34:a5:6d:a8:4c:b1:fa:cd:21:71:
d9:ea:6c:51:59:4e:8e:ff:32:39:a7:c9:c9:78:82:2f:bc:32:
3d:11:4e:5d:18:66:11:70:fd:f9:9f:fe:1c:28:eb:7a:b2:24:
90:34:d9:bb:cf:18:c8:1d:41:a0:d8:ba:bb:ef:bf:80:4a:4a:
50:30:bc:0c:fa:84:a6:26:c7:cb:45:39:f8:7a:22:2e:4f:4b:
39:b5:8a:64:8b:73:d7:c2:ed:16:79:a8:da:73:4c:7f:f0:cf:
39:39:ba:c7:88:e6:db:ab:8a:f8:f3:22:e5:06:5d:3f:48:99:
11:0e:d9:ce:1c:5d:ad:51:d7:3b:dc:85:c2:95:b8:60:60:ef:
ff:24:64:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-fra.rpki-client.org