Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/pzX5ed-mvCCPHxqQDnvFZ47DVtE.roa
File: pzX5ed-mvCCPHxqQDnvFZ47DVtE.roa (raw, json)
Hash identifier: mWeUNBY5f6iQTz1Gav/I8o5WtEWgR3Vrrwp05WRQ29s=
Subject key identifier: A7:35:F9:79:DF:A6:BC:20:8F:1F:1A:90:0E:7B:C5:67:8E:C3:56:D1
Certificate issuer: /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial: 0900D914
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/pzX5ed-mvCCPHxqQDnvFZ47DVtE.roa
Signing time: Sat 01 Jan 2022 04:03:45 +0000
ROA not before: Sat 01 Jan 2022 04:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29596
IP address blocks: 87.239.88.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151050516 (0x900d914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Validity
Not Before: Jan 1 04:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a735f979dfa6bc208f1f1a900e7bc5678ec356d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:ef:48:d8:cf:62:41:77:e8:38:b9:d5:a2:
36:56:b5:7d:7c:8b:f3:1a:bf:9f:44:d6:01:aa:8d:
d9:79:3d:ef:24:8f:04:9d:6d:04:5b:cb:73:55:ad:
ee:d7:93:58:03:ae:1c:d8:07:ca:d7:c1:86:db:08:
6a:50:03:4d:a0:87:51:1b:13:df:18:f2:5a:f6:fb:
90:30:d5:7f:34:f7:3d:8f:b7:a1:a9:b6:13:6a:20:
6c:40:4e:d3:23:08:86:f0:56:6b:19:a6:9d:bb:3e:
5c:a6:e1:19:1d:88:0d:d8:c6:43:d5:d5:3d:69:9f:
1c:2a:0d:22:b5:fc:7d:bb:45:7c:25:9f:0b:a0:65:
a2:95:bd:7d:17:ae:b6:d4:d4:7a:9e:cf:02:6c:10:
15:cf:93:ef:00:c4:5b:5e:24:f6:fc:64:4d:35:52:
f3:a0:7c:43:a3:10:c5:0b:ab:aa:2e:e4:5d:f2:a5:
b7:09:e8:9c:c8:08:4c:2d:d0:34:94:23:02:3e:43:
24:d8:6e:fc:78:8a:f3:09:65:3c:55:21:a7:da:78:
84:57:4c:b1:ab:de:92:2b:84:4c:a3:e9:de:4c:22:
a0:68:1d:4f:c5:a2:44:f5:27:26:53:dd:9b:49:86:
79:d0:f7:4c:6b:32:fd:3e:44:70:6d:94:4a:0d:b8:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:F9:79:DF:A6:BC:20:8F:1F:1A:90:0E:7B:C5:67:8E:C3:56:D1
X509v3 Authority Key Identifier:
keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/pzX5ed-mvCCPHxqQDnvFZ47DVtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.88.0/21
Signature Algorithm: sha256WithRSAEncryption
72:57:24:73:f3:c6:3e:3f:d5:f8:fb:8f:ad:21:d1:9a:44:96:
84:66:02:a9:56:92:44:5b:e8:db:02:e8:f9:d0:fd:0b:ff:0c:
42:5d:4a:ee:e0:24:8d:a4:c8:27:f7:36:98:74:da:a6:be:5a:
00:ec:bb:e7:86:35:63:21:d6:af:18:85:ee:04:84:c1:a2:c7:
df:58:2c:e3:06:70:30:5e:cc:0e:81:5a:aa:72:98:6c:9f:53:
1b:50:5a:72:8f:eb:9a:a2:93:c7:6d:75:55:2d:35:e9:be:b2:
9c:0b:bb:a5:0e:f0:90:96:1f:9b:e0:91:54:91:9a:ad:1a:af:
53:e8:fb:26:4b:8b:72:ea:64:cf:91:31:23:61:5e:9c:74:90:
8b:67:6d:46:85:bf:32:a8:e4:bc:db:ee:08:0f:25:b5:ce:b0:
c2:9f:b8:cc:af:fb:f5:56:3b:e6:f1:63:1f:27:83:f8:a5:3c:
44:cd:e7:91:b3:1c:6a:f7:44:cc:f5:5d:59:09:77:11:52:00:
40:55:83:74:14:8c:54:49:a8:a8:0b:7f:95:62:a0:4a:b9:ef:
58:24:2c:d4:f3:f0:57:54:b0:aa:ec:12:fd:db:36:ee:f4:48:
e6:5e:52:86:9c:fe:f6:0d:3f:05:54:12:57:ab:8a:8c:b4:06:
20:e9:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org