Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/rzi96_oFMOb77ZqoqBs-Q5X4MB0.roa
File: rzi96_oFMOb77ZqoqBs-Q5X4MB0.roa (raw, json)
Hash identifier: loGg5ylG+M5eSL0BJCI9NSIE2gCkxL/tQZsX+oIo7QM=
Subject key identifier: AF:38:BD:EB:FA:05:30:E6:FB:ED:9A:A8:A8:1B:3E:43:95:F8:30:1D
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 0182B51D0C178E3F2CD0BE35B18BE7D3E891
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/rzi96_oFMOb77ZqoqBs-Q5X4MB0.roa
Signing time: Fri 19 Aug 2022 07:59:15 +0000
ROA not before: Fri 19 Aug 2022 07:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.189.34.0/23 maxlen: 24
147.161.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:1d:0c:17:8e:3f:2c:d0:be:35:b1:8b:e7:d3:e8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Aug 19 07:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af38bdebfa0530e6fbed9aa8a81b3e4395f8301d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:d2:db:ca:c2:87:00:6b:60:43:e4:02:72:
fc:c6:77:b4:bd:e8:69:62:6e:1e:8f:da:cd:dd:f2:
ad:48:a6:b1:a5:e4:21:24:83:d2:3a:b9:76:6a:b2:
f6:56:20:f1:a7:41:66:5a:bc:21:83:c1:36:9f:09:
93:75:88:86:e3:8b:83:9d:d2:42:ed:14:3f:16:a4:
a0:9c:48:c8:ee:56:36:32:44:61:4d:c1:c7:23:19:
e9:6b:04:1b:6d:73:b3:26:0d:5c:d0:1e:a8:7f:10:
f9:84:28:b0:bc:be:82:7b:c0:44:f6:6d:ff:c0:83:
fa:81:c8:53:97:27:c1:8d:df:7c:da:8b:63:46:5f:
4e:a5:3a:f2:38:05:a4:b4:ca:bf:33:d4:d8:7d:b9:
66:72:bb:94:f6:57:7c:cf:f9:26:9d:4a:01:b2:87:
85:f8:7e:3f:5f:c5:64:b8:2e:c3:f0:92:aa:cb:87:
ee:dc:61:77:70:33:71:59:ef:dd:67:d5:e5:fb:74:
02:73:e1:7e:a4:c2:6d:71:c0:99:9e:da:b4:2b:79:
98:c5:d5:c4:4f:2e:84:3b:6f:99:3a:17:41:3b:86:
97:53:a9:0b:6b:fa:52:5a:b4:35:a4:c2:7b:3a:57:
09:94:59:a5:3f:7a:46:7c:0b:2a:aa:29:71:5e:29:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:BD:EB:FA:05:30:E6:FB:ED:9A:A8:A8:1B:3E:43:95:F8:30:1D
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/rzi96_oFMOb77ZqoqBs-Q5X4MB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
185.189.34.0/23
Signature Algorithm: sha256WithRSAEncryption
59:e8:8d:3c:98:ab:84:07:01:88:c7:3c:bc:07:17:02:4c:5c:
0f:57:21:4e:4e:93:c4:a8:f8:ca:63:55:ee:ef:44:93:f2:c8:
4b:47:9c:a9:20:6c:78:a5:bd:7c:e3:4f:3e:df:61:46:32:d9:
97:09:a5:5e:1c:c8:27:89:83:ee:35:dd:3d:22:49:e9:ae:b2:
9c:a1:1c:35:16:c2:ce:5a:f1:9a:37:0f:1b:0a:2b:2c:51:ce:
7e:e3:5e:3b:b2:2d:b7:49:35:41:14:27:c0:1c:3d:07:c9:6c:
67:b8:82:fc:85:2a:f8:c4:84:f6:26:95:0c:50:7f:2c:5f:f6:
d6:08:ef:9c:2b:be:63:64:d0:a7:f6:dc:6c:fd:aa:c2:78:c4:
63:04:1c:7a:30:85:ee:90:80:13:b8:23:91:27:e3:69:ad:ff:
a6:3d:f6:02:9c:09:61:29:6c:b4:3e:4d:c4:58:11:d3:d1:41:
da:8d:71:8b:e2:eb:b7:19:73:16:ba:cf:27:28:da:a0:2f:11:
05:04:04:c4:42:25:1e:6f:67:7e:1b:04:e4:a3:2f:b4:c2:e0:
bd:8b:16:4e:6b:4c:c7:57:12:18:e6:99:cb:a5:86:e8:de:2f:
08:eb:c3:26:10:34:12:af:7f:c9:f3:1e:fa:8a:a5:a8:06:c8:
0e:6d:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org