Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Z9FmVmqDxXzPf9PE2DKOvf0h_7Q.roa
File: Z9FmVmqDxXzPf9PE2DKOvf0h_7Q.roa (raw, json)
Hash identifier: XBEZBZdpiKLrkt4Pht6yQoYBzyhD9M/ay2+98gv+W3o=
Subject key identifier: 67:D1:66:56:6A:83:C5:7C:CF:7F:D3:C4:D8:32:8E:BD:FD:21:FF:B4
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 03C2CD36
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Z9FmVmqDxXzPf9PE2DKOvf0h_7Q.roa
Signing time: Sat 01 Jan 2022 09:02:40 +0000
ROA not before: Sat 01 Jan 2022 09:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18345
IP address blocks: 178.157.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63098166 (0x3c2cd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 09:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67d166566a83c57ccf7fd3c4d8328ebdfd21ffb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:2f:f8:6d:fc:57:6e:a1:a5:29:96:c0:cb:
a4:97:4b:01:98:22:a6:c3:3a:84:9e:07:aa:75:a3:
6c:c9:cb:0e:a0:8c:93:8d:c6:0c:31:51:93:1d:69:
21:ce:c0:e6:29:51:9c:b5:7d:2a:74:36:d4:cb:72:
78:d7:19:6e:0d:f4:30:ff:e6:81:69:c4:24:f4:5e:
83:bc:be:f2:7b:a4:23:35:b5:51:9c:de:56:e0:8f:
87:8a:e0:81:c8:c8:6d:0f:b9:c8:b3:8e:dd:d0:22:
0e:7f:15:d4:9e:ab:48:a2:f2:1c:50:25:20:f7:49:
6e:a8:f0:f8:57:03:c5:8f:6a:e1:9a:3d:a3:36:f0:
0c:94:bf:f6:6d:f3:3d:71:c9:4f:29:88:b9:0d:51:
44:9d:72:8a:07:9d:12:dc:e2:46:d2:af:c3:cd:51:
9c:99:7e:da:f9:f3:70:9e:88:b3:e1:18:90:24:56:
c4:88:86:73:0f:2f:3f:71:5d:aa:45:72:5c:c9:80:
6e:97:91:57:22:3a:1c:32:68:fc:6a:ea:0f:cf:71:
f0:74:80:ef:24:d9:e1:c5:11:c4:b6:47:42:dc:1b:
34:9e:2b:e1:20:be:6b:0d:05:c6:fd:43:06:04:c1:
94:fb:e7:bd:e4:51:7f:fd:bf:06:0b:6e:c7:60:04:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:66:56:6A:83:C5:7C:CF:7F:D3:C4:D8:32:8E:BD:FD:21:FF:B4
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Z9FmVmqDxXzPf9PE2DKOvf0h_7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.93.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:62:95:35:86:3a:5a:aa:7d:07:e6:b5:3e:27:3a:c9:6f:df:
45:79:f8:b9:52:62:5d:59:40:a6:1b:3a:19:d1:88:c1:d1:d1:
61:71:20:6a:e6:32:9c:72:a7:91:75:13:4f:08:90:d8:36:e3:
3a:5f:64:ff:9c:40:f9:ed:25:34:9b:a0:d7:ed:fc:79:85:b4:
3c:77:97:28:a7:18:3b:12:4e:ab:84:2d:5f:6d:b8:a6:1d:21:
44:1e:fc:68:d9:24:d5:b1:78:cc:cd:fa:1d:78:5f:42:3d:ff:
7d:bb:bb:75:aa:11:41:06:f7:a4:3a:ba:00:75:c8:c3:43:6f:
0c:77:b5:9a:50:46:e8:98:bb:f6:1a:28:03:bb:b4:ee:bb:9f:
16:fe:9f:db:14:37:a8:e4:e3:66:47:77:d5:dc:e3:32:76:4a:
b6:7d:12:e9:54:5b:4a:e2:91:a1:5d:33:43:4f:c9:4e:1a:99:
16:e1:00:7f:11:b2:22:c9:80:12:f0:ba:47:b8:d4:ac:bf:0f:
65:7e:50:24:dd:af:0a:27:d3:6c:fa:8e:f3:76:6b:76:51:52:
2d:25:8a:c6:d9:87:a8:3b:fb:ec:05:ac:f1:05:0b:d0:e0:90:
12:69:7d:64:74:4a:b5:bb:38:f4:1b:0a:d2:33:3f:cb:a2:9a:
ad:ad:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org