Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/Z9kzZkg4ox7xvVSf3iLEDVZgB2g.roa
File: Z9kzZkg4ox7xvVSf3iLEDVZgB2g.roa (raw, json)
Hash identifier: n44bS7c0cRLYaln8IlnEwPx7Jtme1ft7RPKrPC/j7gw=
Subject key identifier: 67:D9:33:66:48:38:A3:1E:F1:BD:54:9F:DE:22:C4:0D:56:60:07:68
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 09E60106
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/Z9kzZkg4ox7xvVSf3iLEDVZgB2g.roa
Signing time: Sat 01 Jan 2022 02:56:30 +0000
ROA not before: Sat 01 Jan 2022 02:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.104.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166068486 (0x9e60106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jan 1 02:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67d933664838a31ef1bd549fde22c40d56600768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:35:68:73:04:d1:79:b8:b4:e5:68:58:ac:
4e:57:12:dc:6a:ab:d6:5e:82:45:2a:33:cf:5c:4d:
26:56:11:85:bf:e3:22:a9:98:3e:1a:cb:12:16:b0:
8a:33:38:31:e0:69:1c:2e:8a:7e:3c:24:d5:77:25:
88:fc:d1:7d:77:d8:37:85:2b:0a:1b:3a:2f:8e:34:
64:7d:ac:3d:66:f1:2b:b0:af:37:4a:6c:de:00:78:
7c:76:70:4a:12:57:02:fa:c1:f8:41:12:4c:21:52:
37:6c:fa:fe:2e:b1:21:b5:c6:1e:a2:84:57:6c:d5:
8d:4b:69:0b:73:80:78:b6:74:95:58:e9:e5:c4:e7:
37:b7:94:1b:e7:00:fd:e0:28:bc:f0:b0:c5:ec:a9:
17:18:d1:e7:e0:4a:33:a2:74:06:48:30:1d:a8:ca:
a9:d8:b2:b0:10:42:e1:a1:da:d0:f5:2b:b2:5a:83:
29:98:4d:ba:a8:ef:f7:5f:e9:6e:22:60:c3:31:f4:
6f:61:33:c5:25:6f:22:8d:d2:62:4c:38:4a:d6:ef:
49:ab:5f:d0:34:3a:42:29:33:dc:fe:fe:bf:dd:3f:
26:a8:bd:f0:80:fc:66:36:df:86:9f:99:95:d1:6b:
88:80:57:07:25:cb:21:42:e6:9d:17:a3:24:a9:88:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:33:66:48:38:A3:1E:F1:BD:54:9F:DE:22:C4:0D:56:60:07:68
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/Z9kzZkg4ox7xvVSf3iLEDVZgB2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.147.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f3:cb:f5:91:75:33:4d:6a:fc:d5:98:c9:c6:10:67:3e:2f:
20:66:45:cb:8e:dc:ad:9b:27:26:17:ef:6a:ae:c2:a6:89:f5:
7b:a3:29:5b:0c:8f:ec:98:fb:c6:3a:d8:20:42:96:71:55:db:
03:a0:73:f8:b2:72:d7:9a:84:6b:1e:ad:7f:db:ad:81:cd:25:
84:67:18:db:ea:54:3b:e1:a1:f9:43:d9:f0:d8:60:a5:b8:84:
68:5e:f4:57:ae:50:bc:87:24:a3:22:5d:ee:5a:c5:7b:bb:59:
b3:82:9a:3b:a7:32:51:3d:8d:01:8d:eb:5f:d6:01:5b:9d:6e:
07:ba:ed:d2:7c:cf:85:68:18:d5:bc:c9:4a:b0:b9:be:26:e2:
b8:39:43:fc:b0:e0:fe:5d:05:8b:bd:63:90:a6:4d:b1:19:ef:
c4:5d:5f:8d:17:61:ce:e5:a4:c9:1c:19:d5:2f:5c:f5:c2:65:
48:df:a7:77:b8:c1:08:10:db:cc:78:cf:d4:77:32:b8:19:14:
9c:a1:51:0d:eb:07:93:2d:13:33:dc:03:f7:6b:e6:70:80:f1:
35:68:70:d2:43:b8:f0:e8:55:bb:b0:05:d6:39:8e:16:6e:30:
13:c0:c2:42:f2:09:9f:e3:02:b7:8e:56:b8:0d:77:9f:93:ef:
63:d6:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org