Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/2ZIpOLJ_NvcFQJZsStk6S5RPH9g.roa
File: 2ZIpOLJ_NvcFQJZsStk6S5RPH9g.roa (raw, json)
Hash identifier: 9DGmrE/+5tT+mqg8hVXKXVA+AYyzB4lWgFBKwEFWDDU=
Subject key identifier: D9:92:29:38:B2:7F:36:F7:05:40:96:6C:4A:D9:3A:4B:94:4F:1F:D8
Certificate issuer: /CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Certificate serial: 04BEEF45
Authority key identifier: 71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/2ZIpOLJ_NvcFQJZsStk6S5RPH9g.roa
Signing time: Sat 01 Jan 2022 11:01:46 +0000
ROA not before: Sat 01 Jan 2022 11:01:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211742
IP address blocks: 195.245.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79621957 (0x4beef45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7190f5d5f92a486362177a42b3d5efda20e220e1
Validity
Not Before: Jan 1 11:01:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9922938b27f36f70540966c4ad93a4b944f1fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:cc:65:9b:75:22:a7:98:af:7c:02:57:97:
0c:a1:f5:51:ed:70:94:6e:61:54:34:09:aa:9d:52:
bf:55:18:f0:ba:b3:ac:e5:eb:43:f0:ab:3b:4c:78:
65:f9:fa:e5:66:22:23:4b:e7:9f:aa:0c:92:b7:3b:
05:bf:3e:4b:c7:2d:6f:59:22:d4:e4:17:01:25:75:
a9:65:f1:4c:75:81:fd:e8:f0:66:2e:80:84:29:c6:
36:d5:80:47:e3:d4:63:14:f1:b8:c4:66:db:03:94:
ba:64:e3:eb:63:21:df:51:15:b2:94:e5:26:1f:72:
a7:ae:ac:b0:6a:8d:d4:1a:20:eb:b8:d3:00:71:01:
19:43:db:d5:f8:9e:aa:b1:3f:66:03:cf:ce:00:aa:
f2:61:77:55:f4:01:5e:bb:7a:64:e1:78:a1:58:c6:
06:f9:ad:e3:03:df:c6:e5:49:32:0d:96:b2:be:6a:
8c:bf:86:70:51:f6:ec:e7:96:20:a8:78:c1:d7:38:
26:aa:a9:a4:69:f6:c0:b0:8e:3a:f9:c1:41:28:d5:
36:2c:f6:c4:b5:60:71:19:d2:91:d5:f0:78:fd:a8:
71:06:e2:04:85:80:ca:f9:f8:6a:1b:05:3b:7b:01:
bd:1d:60:1c:00:05:0b:06:f4:bf:9f:08:bf:1e:d6:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:29:38:B2:7F:36:F7:05:40:96:6C:4A:D9:3A:4B:94:4F:1F:D8
X509v3 Authority Key Identifier:
keyid:71:90:F5:D5:F9:2A:48:63:62:17:7A:42:B3:D5:EF:DA:20:E2:20:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZD11fkqSGNiF3pCs9Xv2iDiIOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/2ZIpOLJ_NvcFQJZsStk6S5RPH9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/68a014-7dba-4430-8dde-01c827d6e0fe/1/cZD11fkqSGNiF3pCs9Xv2iDiIOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.203.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e1:3d:28:06:8f:1a:c9:ab:24:da:5d:a8:93:8c:12:ca:e1:
71:bd:66:fe:02:e4:ae:4f:1c:ea:c2:ad:ca:02:79:9c:12:63:
83:de:41:28:61:94:f2:58:65:15:86:7c:fe:03:1a:dd:84:ef:
80:68:04:f2:92:63:12:a0:2f:51:ba:07:55:6e:94:ce:55:db:
c7:73:85:88:cb:27:3d:5e:fd:97:01:77:bc:87:0c:f2:20:98:
06:66:77:73:d3:b1:35:be:91:f3:bb:f4:d6:55:ca:9e:f5:e6:
9e:87:a1:2d:39:24:47:d1:2a:1c:1b:a9:07:8d:a4:29:fb:88:
9f:5b:9e:9e:76:c0:6f:ec:4a:c4:3a:53:07:4b:d3:21:df:a2:
3c:f4:67:74:30:34:64:9d:81:da:43:be:85:51:2f:6f:d8:1f:
1b:4b:36:62:1a:05:94:d0:c3:1e:c2:df:0d:c0:a2:48:9e:fe:
70:c7:47:3c:c8:56:5f:91:98:f7:45:18:9b:79:d4:a2:1c:1d:
7f:f9:6e:fc:9e:ca:a9:3b:ea:0c:af:eb:0a:1f:80:c0:d9:68:
a0:6f:f6:6c:2b:df:19:6c:6e:d4:45:59:f9:ca:d0:74:e9:f8:
da:3f:e1:b5:b9:75:a1:7c:7b:72:67:92:98:7e:37:e5:04:cb:
71:5d:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:49 2024 by rpki-client on console-fra.rpki-client.org