Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/zgvhaXpKxrYbsuBlb2LRv3-OAaY.roa
File: zgvhaXpKxrYbsuBlb2LRv3-OAaY.roa (raw, json)
Hash identifier: o6AX6LMcGkXARbHMC6aTIkxSgJ/MoAFvZNRM83fpNbY=
Subject key identifier: CE:0B:E1:69:7A:4A:C6:B6:1B:B2:E0:65:6F:62:D1:BF:7F:8E:01:A6
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 073226F6
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/zgvhaXpKxrYbsuBlb2LRv3-OAaY.roa
Signing time: Sat 01 Jan 2022 07:57:22 +0000
ROA not before: Sat 01 Jan 2022 07:57:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 194.42.96.0/23 maxlen: 24
194.42.104.0/23 maxlen: 24
2a0f:340::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120727286 (0x73226f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Jan 1 07:57:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce0be1697a4ac6b61bb2e0656f62d1bf7f8e01a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:20:ff:f1:76:ac:1a:28:7d:d1:6b:cd:af:
98:2f:37:92:8f:0d:cf:7f:0a:47:57:99:a4:a1:b0:
08:fb:55:ff:b1:c9:4e:50:23:ab:eb:a3:39:62:59:
b8:61:e2:a7:a2:28:4e:15:e0:0f:86:93:b5:21:cc:
f4:65:24:ef:c3:e6:96:03:37:eb:82:40:da:6d:1d:
e6:e6:6b:cd:88:fd:a0:76:4d:15:13:cb:87:a5:1c:
2e:3c:6c:90:8a:ee:99:c2:3c:c0:43:96:6c:68:b2:
89:63:76:ca:a2:41:69:09:2a:e0:9f:1f:f5:6c:89:
31:f3:46:8a:f5:d0:60:b4:32:74:17:0b:c3:0c:61:
b1:68:4d:4f:f6:a7:79:c3:52:9a:ad:e2:4e:a8:39:
f8:ec:10:ac:a8:88:77:95:c8:68:8e:d5:d4:a9:8e:
2b:09:f7:8a:d1:89:f8:22:c5:5c:6c:ba:b8:2e:fd:
12:7d:65:99:23:30:84:cd:a0:9e:d4:50:78:8e:5f:
24:57:4d:e4:db:90:72:7e:60:32:4d:87:c2:e4:eb:
18:fe:ac:02:c7:a2:70:96:c8:44:71:99:a8:fa:b6:
1c:30:70:d6:5a:1b:05:76:79:18:59:a4:0b:78:2a:
76:f4:ab:87:bd:c1:df:67:3f:62:ba:0a:c8:0e:7a:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:E1:69:7A:4A:C6:B6:1B:B2:E0:65:6F:62:D1:BF:7F:8E:01:A6
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/zgvhaXpKxrYbsuBlb2LRv3-OAaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.96.0/23
194.42.104.0/23
IPv6:
2a0f:340::/29
Signature Algorithm: sha256WithRSAEncryption
5d:f0:6e:b1:1b:29:72:72:a9:13:6a:75:e7:ea:20:c9:4a:23:
b5:b4:86:ec:24:cc:4c:b9:ff:6d:2f:f3:21:6b:92:77:b0:1b:
c2:9e:1b:5c:e2:31:46:b6:8c:43:20:e5:07:c9:f0:41:1c:b5:
88:52:8b:e0:a9:3c:13:0d:ea:80:10:80:f7:c0:41:5f:0a:b5:
bc:c8:6f:72:b8:f3:63:09:4a:34:98:9a:bc:92:e7:72:ce:86:
d9:92:23:2f:c7:8e:7b:87:ff:a1:3e:c6:1f:0a:aa:5c:aa:f4:
11:34:2e:35:61:5a:9a:35:ae:5a:4a:2a:f8:56:df:4d:b4:20:
30:68:bd:cc:58:ca:1f:c5:9b:02:5c:3b:14:db:2f:de:2b:cb:
4a:82:9d:bc:e0:8f:5f:43:5e:6a:18:f2:45:16:a8:1d:c5:76:
7a:f1:22:ee:54:4d:1f:eb:e4:69:e3:36:2e:65:a2:a5:18:48:
83:47:03:35:80:76:c3:42:5f:da:21:79:78:09:a3:de:34:92:
a5:e2:fc:e5:e9:e9:bc:78:b8:c7:29:1d:d8:0e:9d:00:54:9a:
e1:9d:e7:1f:e7:08:87:a1:d5:c5:08:6f:21:eb:36:8f:5e:6d:
4a:28:9d:cf:4f:2a:33:35:ab:a9:3b:6a:1e:0b:26:60:88:fa:
b4:10:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:03 2024 by rpki-client on console-ams.rpki-client.org