Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/zgzKuoQgMvXFJPRghVvO2kR8efs.roa
File: zgzKuoQgMvXFJPRghVvO2kR8efs.roa (raw, json)
Hash identifier: v7WiiQ+wc3HBv6ggAvq+HqWe4e2QBo0VoByKJqMdiHU=
Subject key identifier: CE:0C:CA:BA:84:20:32:F5:C5:24:F4:60:85:5B:CE:DA:44:7C:79:FB
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 089A3D8C
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/zgzKuoQgMvXFJPRghVvO2kR8efs.roa
Signing time: Sat 01 Jan 2022 02:51:48 +0000
ROA not before: Sat 01 Jan 2022 02:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28839
IP address blocks: 2a01:190:15ee::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144326028 (0x89a3d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 02:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce0ccaba842032f5c524f460855bceda447c79fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:00:7a:73:1a:7a:4c:37:c3:c0:d6:6c:49:
f1:3f:dd:76:fe:d0:fa:45:be:14:fe:1e:a9:09:77:
b9:9c:dd:ad:d3:77:81:8a:83:ea:1f:00:00:ee:04:
6d:20:c8:40:15:54:51:ac:24:28:ad:21:8c:85:48:
47:b9:32:06:9b:68:09:c4:11:dd:f1:96:7a:70:99:
27:62:86:e5:5b:f9:f1:31:09:3e:a8:c5:e6:80:42:
45:e8:ab:ae:dd:d3:a7:77:ae:12:67:77:a0:cb:9c:
bc:bb:bf:5d:03:c6:23:28:c9:be:4a:be:9c:6d:c2:
d6:68:4d:8d:dc:bf:fc:67:8e:5c:12:0a:81:16:73:
fc:ae:f2:d4:84:ef:91:3f:d4:f2:11:76:b4:bc:ae:
02:2b:31:d9:92:3d:8f:dc:d0:a6:b0:55:8d:eb:32:
39:90:a3:cd:37:06:00:74:92:78:6a:a2:a1:d1:61:
d0:62:1a:a1:a1:b0:1e:5e:10:84:74:91:f0:dd:42:
cc:52:e2:3c:fa:77:e8:57:6e:f4:72:5a:d1:4f:0f:
03:c0:f2:f3:f9:5d:ce:8a:1c:0f:c5:55:d4:2a:f1:
a7:cc:38:b2:99:05:67:f6:49:a8:05:be:83:82:94:
2e:a6:9f:e1:52:ed:10:83:9e:a7:74:c5:09:00:9b:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0C:CA:BA:84:20:32:F5:C5:24:F4:60:85:5B:CE:DA:44:7C:79:FB
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/zgzKuoQgMvXFJPRghVvO2kR8efs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:190:15ee::/48
Signature Algorithm: sha256WithRSAEncryption
61:1f:47:be:6c:3e:b8:eb:8b:e9:fd:4f:26:d2:35:1e:94:5e:
22:f9:b3:00:f4:2d:55:8e:31:c9:ab:5b:25:e9:8e:fd:7a:ae:
4f:5e:c2:9c:8c:8a:de:f9:cb:6a:3a:72:2a:a2:3b:bf:cb:fa:
d2:3c:da:1b:a1:3f:3f:68:72:f3:e3:6e:6b:19:57:8d:d7:70:
f4:f7:60:7b:d4:c8:21:41:05:24:6a:b5:72:b3:b7:43:0d:54:
02:a8:5b:06:18:3f:b0:b1:cf:d6:36:16:48:be:65:76:55:22:
66:65:5e:8d:41:5f:2c:54:44:00:05:47:f4:ec:9a:cb:5c:d2:
d0:05:d3:2d:a9:b5:1b:4b:a2:51:e0:8a:10:ad:6d:87:b8:6f:
8b:4d:ae:13:21:6f:17:19:06:94:46:4c:9c:17:0a:b7:50:20:
58:28:12:e7:b6:82:8d:2b:f7:b0:91:ef:d2:6a:69:9b:ca:70:
1c:51:dc:d8:32:fa:8c:61:8d:b8:62:65:ab:5a:98:65:16:11:
36:7f:0c:76:64:24:48:2f:21:5a:e5:bd:55:88:12:1b:81:a4:
b3:2d:be:5e:32:d2:7f:81:03:99:7a:ba:e3:e6:15:71:6e:3b:
d1:4f:cf:69:fd:55:56:c1:0a:0d:e5:06:c5:fb:cc:e5:3f:67:
55:76:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:20 2024 by rpki-client on console-fra.rpki-client.org