Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/zaJO96EQeKv4-a3LZb_XaFu78QM.roa
File: zaJO96EQeKv4-a3LZb_XaFu78QM.roa (raw, json)
Hash identifier: dexMEi8L2C/JV+K2G+4Spxly3EUjpI2aWpADyrD/oJc=
Subject key identifier: CD:A2:4E:F7:A1:10:78:AB:F8:F9:AD:CB:65:BF:D7:68:5B:BB:F1:03
Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial: 06A37A4B
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/zaJO96EQeKv4-a3LZb_XaFu78QM.roa
Signing time: Sat 01 Jan 2022 04:51:21 +0000
ROA not before: Sat 01 Jan 2022 04:51:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 559
IP address blocks: 192.33.120.0/21 maxlen: 21
192.33.118.0/23 maxlen: 23
129.129.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111376971 (0x6a37a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Validity
Not Before: Jan 1 04:51:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cda24ef7a11078abf8f9adcb65bfd7685bbbf103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:93:6c:0a:7f:59:72:c3:91:3c:05:0a:cd:
6a:48:df:f4:7f:bd:c9:c6:d4:66:d5:a4:c3:bf:b1:
38:27:a5:1a:c2:72:34:06:f9:19:14:9f:26:ea:77:
ca:49:11:33:12:4e:cc:87:28:2d:f0:a3:3e:77:b1:
22:a6:de:c7:8d:3b:be:d6:39:96:15:f5:30:d9:be:
9c:44:67:88:31:45:3f:5c:34:59:6e:3f:8b:eb:c6:
03:2a:c6:7f:65:a2:3c:d1:14:7d:19:d8:f9:18:ad:
de:0a:f8:55:74:4a:cb:84:b2:d4:9c:3a:9d:27:bc:
43:cb:6b:b1:e6:9c:59:42:f4:36:e9:a0:cc:a6:87:
25:5b:52:8d:5a:c5:84:d0:1e:46:4e:0a:3b:31:da:
b1:50:72:f5:2d:2e:93:3d:3a:4a:bd:78:d8:49:09:
11:c3:9f:94:30:8b:e8:2d:0e:87:c4:51:ea:38:b2:
b4:1d:7a:9d:f0:dc:02:66:43:5b:ce:e3:6f:56:39:
dc:17:f9:e4:cc:cb:55:9b:40:71:b6:d3:9f:c2:9b:
a9:86:84:d8:06:9c:a8:7b:77:bd:c6:e6:75:d1:ea:
ed:13:c2:0b:22:5d:02:95:a9:f7:cd:e0:c1:30:ee:
b7:14:6c:28:ab:19:87:cd:94:1d:16:fd:27:af:cc:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A2:4E:F7:A1:10:78:AB:F8:F9:AD:CB:65:BF:D7:68:5B:BB:F1:03
X509v3 Authority Key Identifier:
keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/zaJO96EQeKv4-a3LZb_XaFu78QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.129.0.0/16
192.33.118.0-192.33.127.255
Signature Algorithm: sha256WithRSAEncryption
06:f9:ee:f9:0a:47:af:78:dc:bd:ba:e1:c2:bd:28:59:ab:48:
fa:c5:a0:4a:ae:a5:25:30:f0:d5:97:ca:d9:a5:85:93:f4:2d:
04:93:fe:b7:09:c7:2b:a9:a5:97:45:21:13:74:a0:54:69:e7:
27:4c:7f:2b:fb:2b:f1:5e:f1:ab:42:c0:8f:7c:80:f3:54:6a:
ff:40:f4:59:2c:f8:3f:e4:06:a4:08:c3:17:e4:b2:a2:41:2f:
41:be:56:b0:c5:65:41:71:f3:e2:27:ac:b4:44:47:9b:43:e6:
87:e4:f7:65:2e:ef:85:80:f1:9e:00:fd:a8:f4:3e:da:07:89:
f4:2a:68:43:b4:12:8a:11:de:5d:46:0c:f4:c6:e8:d6:52:aa:
38:c8:11:9a:23:de:f9:29:e0:30:5b:cf:a3:be:b0:e2:aa:00:
a1:af:85:2c:8f:aa:16:cc:07:b1:4b:49:20:02:bd:d7:b1:d3:
6c:24:7a:5d:d0:9a:b5:73:71:7a:a4:bd:f9:77:5f:0c:54:cb:
98:a5:f3:ee:3a:f4:ef:06:a2:d7:dc:db:64:cd:28:df:82:e7:
3f:66:d0:93:91:78:23:96:01:a0:48:ad:06:ee:ba:ca:b7:d9:
ea:f0:ac:37:fc:21:3a:ce:6e:7f:ba:24:16:3c:d8:ed:d2:95:
a3:c9:2a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:56 2024 by rpki-client on console-ams.rpki-client.org