Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/zcurQ08XbEoza67K01U-M3o2Ws4.roa
File: zcurQ08XbEoza67K01U-M3o2Ws4.roa (raw, json)
Hash identifier: jefvlP4AU9xSnJUK4mlHGdHbI4WuhwgLCpSFPQmNOiU=
Subject key identifier: CD:CB:AB:43:4F:17:6C:4A:33:6B:AE:CA:D3:55:3E:33:7A:36:5A:CE
Certificate issuer: /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial: 0182D549E58908BB1941B3F299BA665A3965
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/zcurQ08XbEoza67K01U-M3o2Ws4.roa
Signing time: Thu 25 Aug 2022 13:56:06 +0000
ROA not before: Thu 25 Aug 2022 13:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29522
IP address blocks: 193.143.77.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:49:e5:89:08:bb:19:41:b3:f2:99:ba:66:5a:39:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Validity
Not Before: Aug 25 13:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdcbab434f176c4a336baecad3553e337a365ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dd:a1:c7:7a:45:33:46:ff:75:58:1c:71:63:
16:df:44:82:ab:5e:30:c0:a5:ab:6a:80:5c:50:1d:
10:1c:6b:1d:7f:1a:2d:7b:85:88:9c:92:5e:f5:82:
0d:13:1e:e8:86:a9:6e:06:85:19:13:f1:55:01:a5:
cd:49:78:db:bd:cb:75:f3:63:11:c2:05:86:a7:47:
0f:36:73:70:a9:dd:4c:94:06:c6:70:fb:36:33:98:
8b:31:6e:93:3a:0c:5f:aa:8b:0e:77:5f:34:31:31:
30:9d:b6:18:35:55:9c:bb:f9:e0:a0:29:e4:2b:1e:
af:ca:4d:1d:a3:df:a6:13:69:16:ca:23:ce:9c:24:
00:c7:47:8a:49:4b:72:1e:1e:2c:97:77:54:d6:f6:
4b:3f:7e:b7:a3:e5:c3:f3:49:a2:07:50:3c:b5:28:
e3:55:7b:80:4f:4a:6c:94:1e:9d:5e:5c:7f:c2:22:
4d:94:77:9b:69:75:55:4a:0e:fb:9c:f5:66:85:ce:
b2:79:f6:73:92:69:45:27:57:ea:be:35:2f:30:d8:
90:e9:54:26:ba:db:4b:cf:6d:f1:24:ed:c8:3b:3f:
d4:45:df:26:7d:2a:6b:ec:2b:39:79:bd:d5:04:79:
8d:5c:17:02:52:5f:c9:e6:f3:ba:60:e0:8b:c0:3e:
3e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:AB:43:4F:17:6C:4A:33:6B:AE:CA:D3:55:3E:33:7A:36:5A:CE
X509v3 Authority Key Identifier:
keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/zcurQ08XbEoza67K01U-M3o2Ws4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:6b:4f:d5:d8:c4:2f:0b:c3:1a:14:70:87:dc:bd:f3:d2:11:
e3:bc:26:1f:85:bc:7d:4f:f6:8b:94:9d:f0:71:d8:1b:36:e4:
91:29:9a:a5:e3:c2:c7:12:29:e5:6e:e5:ca:40:b2:27:10:f6:
03:41:77:9e:65:3c:20:7f:23:3e:6e:6a:09:be:f7:54:18:71:
ca:18:57:38:47:1a:e8:44:73:87:d4:68:9a:6c:4a:a0:86:28:
92:39:ee:ed:51:02:e9:bb:a9:09:fb:c1:39:8b:4d:e3:3e:29:
61:fa:63:73:63:26:1f:a1:39:38:37:34:5d:64:80:b8:e5:84:
bc:f3:3d:c1:ca:6a:6b:ab:c1:d2:5f:1d:89:93:92:30:1c:12:
a0:c7:94:20:dd:22:69:9c:d2:e6:93:d1:c6:fe:b4:98:32:3d:
2c:83:00:39:93:93:7d:07:31:15:a4:a7:87:d4:d3:a1:0a:23:
80:60:69:e4:6b:49:44:49:ea:28:ee:5a:db:a7:7e:fc:2c:07:
6a:a9:fe:21:3c:d5:00:e2:d7:8e:27:f4:3e:50:b5:9c:b6:4c:
ad:1e:1d:86:b8:d6:d9:15:c6:d3:86:dd:a2:0b:49:e1:b1:5a:
51:8b:39:22:ec:9c:42:e9:35:cf:e3:23:9d:42:66:94:f1:77:
8c:30:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:29 2024 by rpki-client on console-ams.rpki-client.org