Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/Z-7f4LRD7u4WVdmR5P7un4OsfyQ.roa
File: Z-7f4LRD7u4WVdmR5P7un4OsfyQ.roa (raw, json)
Hash identifier: vlvpsALnQaMKnPYa3FYFd/HST17fIZC2AlBLjtiFbvg=
Subject key identifier: 67:EE:DF:E0:B4:43:EE:EE:16:55:D9:91:E4:FE:EE:9F:83:AC:7F:24
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 07F530A3
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/Z-7f4LRD7u4WVdmR5P7un4OsfyQ.roa
Signing time: Sat 01 Jan 2022 16:11:27 +0000
ROA not before: Sat 01 Jan 2022 16:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204760
IP address blocks: 194.56.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133509283 (0x7f530a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Jan 1 16:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67eedfe0b443eeee1655d991e4feee9f83ac7f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:1f:f0:a5:87:19:51:cc:d4:57:f2:f1:55:
4e:f1:e4:58:7c:44:a9:e4:00:29:4f:90:55:80:83:
40:2b:af:a6:72:86:8c:a2:54:55:49:64:ca:2f:0f:
01:90:3e:4d:f4:70:83:f8:f2:e2:c7:8d:f6:07:75:
5a:7a:75:ee:55:d4:14:0b:b8:04:97:a8:77:bd:97:
8f:ea:4d:8d:69:be:81:23:27:93:0f:41:a5:01:47:
e5:fa:3c:a0:5a:e0:b5:fe:cd:50:46:66:a9:f3:34:
6d:01:f4:13:90:31:08:e0:8a:4c:b7:8d:d7:c8:90:
f8:d5:b8:54:5b:a9:5b:28:30:b9:17:eb:98:b0:75:
75:28:d2:70:41:ad:18:9d:1b:8b:15:23:6a:f7:5b:
b2:9c:51:50:d7:d7:9c:fd:d1:0a:0b:45:96:66:45:
ec:03:bc:3d:56:c9:33:20:37:db:ab:c5:c7:5c:40:
47:b7:c1:fe:b5:92:2e:f2:d2:04:a6:75:3f:50:72:
48:56:58:4a:0c:45:45:bf:ce:5a:df:69:53:1c:29:
91:41:ab:ad:63:13:2e:81:5a:82:b5:03:23:b0:94:
37:a3:bb:bd:2d:fa:f4:2b:b4:84:7b:53:77:88:15:
03:0d:63:9a:bf:5f:10:17:c7:e9:97:da:94:a9:48:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:DF:E0:B4:43:EE:EE:16:55:D9:91:E4:FE:EE:9F:83:AC:7F:24
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/Z-7f4LRD7u4WVdmR5P7un4OsfyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:f8:6e:f5:16:aa:22:87:33:a6:27:3d:5f:83:1c:b4:b6:19:
ca:fb:eb:a1:6d:e0:d5:0f:75:88:18:e2:7d:44:9f:ef:f4:18:
3f:7b:13:a0:57:dc:dd:e8:70:44:f2:fb:63:ec:e9:ff:71:c0:
20:24:a8:c4:91:e8:99:dc:0d:fa:de:45:8b:be:da:19:89:d9:
33:70:c7:aa:83:b7:f5:04:96:ea:f7:3a:c6:a1:8e:7c:57:06:
24:6a:a4:dc:3a:72:cb:73:7b:b7:8e:ea:71:11:10:63:12:33:
4a:e8:1c:12:08:68:55:71:cf:9b:d2:10:17:5a:55:a8:82:45:
64:9f:c1:00:3a:c2:df:51:7e:32:c8:e9:43:12:12:f9:88:f7:
af:e8:79:93:e6:43:7c:e2:6d:ce:5b:f2:64:22:91:b6:1c:6e:
fb:e7:96:02:c8:de:87:b8:8f:0a:d1:62:bf:1d:6b:6a:6d:96:
81:1d:13:98:b9:d2:70:36:76:fb:2b:60:56:6f:04:f5:ad:31:
22:1f:e9:0e:66:7e:9a:15:9d:4c:07:a5:18:ad:25:52:c6:24:
34:08:e3:08:a7:c4:f5:43:4e:38:0d:d0:14:b8:76:9a:32:a5:
88:41:9a:8d:85:73:da:d5:9e:47:0e:66:4f:45:66:ea:0a:40:
d5:60:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:18 2024 by rpki-client on console-ams.rpki-client.org