Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NZX7Ke1sEJSFrv3G0pwjrXUoJ7s.roa
File: NZX7Ke1sEJSFrv3G0pwjrXUoJ7s.roa (raw, json)
Hash identifier: QiSq34QvSqki6K6HAhxp1GmEo8fIAl6aSxMxmvLDdfI=
Subject key identifier: 35:95:FB:29:ED:6C:10:94:85:AE:FD:C6:D2:9C:23:AD:75:28:27:BB
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 033178F0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NZX7Ke1sEJSFrv3G0pwjrXUoJ7s.roa
Signing time: Sat 01 Jan 2022 16:04:29 +0000
ROA not before: Sat 01 Jan 2022 16:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202402
IP address blocks: 193.34.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53573872 (0x33178f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3595fb29ed6c109485aefdc6d29c23ad752827bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:65:cd:45:ea:8c:40:96:b2:e3:bb:db:85:
77:e3:cb:e8:6f:7e:9b:92:b3:ca:3c:be:ad:c0:95:
61:30:85:2f:2e:bb:01:aa:a5:58:9e:0d:8a:61:28:
2d:7e:79:2e:19:27:2e:0a:15:b1:ca:6a:4f:45:f3:
10:27:4c:b3:fa:fd:84:18:3a:d9:f1:81:b8:43:8a:
7b:56:35:70:7b:ed:54:63:48:6b:6f:b7:b1:42:fa:
a4:8e:2a:f6:7e:ae:14:c9:72:bc:94:d7:2d:75:d8:
96:d7:ef:e7:b0:c5:2e:3c:72:6a:39:f1:be:d5:34:
9c:d8:ac:22:9e:3d:90:19:cd:00:2a:32:b5:5f:bc:
2c:aa:04:dc:88:a1:94:9e:1d:45:ce:a5:bf:ad:37:
73:af:02:a8:1f:d3:f2:58:fb:0a:9c:52:87:6d:78:
15:84:45:35:06:5e:a1:be:c5:3c:60:d9:8c:e3:8d:
21:47:5b:72:3c:e5:18:ee:9e:f1:e2:1b:8e:b8:65:
ce:17:de:22:3e:94:7c:00:c4:29:c4:01:71:1e:cc:
5c:23:c0:c0:14:d9:9e:2d:09:d2:73:06:81:17:a9:
88:ef:8f:31:c5:6c:c9:82:2a:c2:e7:a1:f5:43:d3:
54:0f:74:d8:eb:de:e0:03:d5:fb:13:20:56:08:2b:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:FB:29:ED:6C:10:94:85:AE:FD:C6:D2:9C:23:AD:75:28:27:BB
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NZX7Ke1sEJSFrv3G0pwjrXUoJ7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
94:98:c2:4a:f3:6e:9e:9b:65:17:09:56:ca:b8:b8:7b:3d:1a:
58:9d:f5:09:71:99:6f:77:e7:1a:a8:e4:f5:0e:4b:c7:98:c7:
eb:c1:5f:78:89:41:c1:dd:a1:91:ad:77:a7:d6:1a:8f:d0:bd:
78:7c:ad:85:ad:b7:de:39:a5:e2:7d:b6:d2:c3:1c:6b:e1:61:
83:d3:01:c9:d9:56:67:2d:45:55:a0:cc:e7:2a:ff:73:5a:6a:
df:31:4d:a6:92:ff:a4:8e:2a:f9:5a:aa:3b:31:40:f8:ff:b1:
d3:df:ee:36:51:6b:70:99:52:c2:4e:47:2f:61:00:77:5c:d8:
5f:54:9e:0d:c8:42:f7:26:f2:6b:a5:8e:f8:18:21:fe:df:02:
7a:43:72:44:00:a5:d7:b5:f1:80:62:e0:bb:b9:7b:df:2a:4d:
44:38:d3:5a:55:61:9e:c3:c2:cb:44:a4:29:4b:bd:33:de:16:
e9:e6:05:f5:e5:7f:4e:d9:57:e8:db:d7:70:0f:84:b6:1e:02:
9e:e6:e7:0e:f3:67:c0:c0:35:d8:de:b4:3e:a7:40:36:95:e8:
00:90:2d:f4:95:5f:e6:13:84:0e:02:a7:ba:67:69:a1:2c:35:
7a:36:d0:2c:8d:f8:a3:bc:40:c3:d3:62:7e:3e:6c:90:d9:be:
a0:27:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org