Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/zlruaKy_5Xovtg9gY8RufYElnfw.roa
File: zlruaKy_5Xovtg9gY8RufYElnfw.roa (raw, json)
Hash identifier: kVplrmCYHJxSS0t1J9OiLEDoKvHNCwMhI6mE8V0oRlQ=
Subject key identifier: CE:5A:EE:68:AC:BF:E5:7A:2F:B6:0F:60:63:C4:6E:7D:81:25:9D:FC
Certificate issuer: /CN=0de2720c57db027610c821c84047b110bc36ddc3
Certificate serial: 05653D1B
Authority key identifier: 0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/zlruaKy_5Xovtg9gY8RufYElnfw.roa
Signing time: Sat 01 Jan 2022 08:57:57 +0000
ROA not before: Sat 01 Jan 2022 08:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207815
IP address blocks: 194.11.83.0/24 maxlen: 24
194.11.16.0/24 maxlen: 24
194.11.19.0/24 maxlen: 24
194.11.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90520859 (0x5653d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de2720c57db027610c821c84047b110bc36ddc3
Validity
Not Before: Jan 1 08:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce5aee68acbfe57a2fb60f6063c46e7d81259dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:f1:29:e5:6a:da:e4:21:e0:0f:ca:31:7e:
81:08:4b:ac:25:0e:06:2b:ea:c8:d2:8c:a6:66:7a:
ac:23:7d:ed:e7:6c:85:9a:1d:e3:cf:2b:2d:c5:c1:
a6:7a:96:ef:78:13:83:b0:ed:2f:99:ef:92:6d:7e:
bf:56:40:35:28:5f:3c:f2:e5:0e:32:d1:11:17:30:
b7:50:b9:be:d9:cd:ae:03:c1:7a:e4:59:b7:1e:ae:
c6:f0:95:e9:95:30:d1:70:6f:48:20:30:49:92:90:
41:3b:3b:f3:24:eb:ef:1e:b2:7c:65:c8:6d:59:e0:
35:c7:26:33:86:b2:c3:a9:50:48:86:26:4b:b3:5b:
5b:05:1a:c2:ab:4b:f6:fc:2e:56:98:1a:aa:44:9a:
bd:2c:40:1e:7c:53:ca:92:b5:8b:82:79:3b:25:69:
8a:e8:31:c7:40:6e:5c:6b:7b:72:b4:1c:59:31:bc:
4e:11:3a:f5:83:9e:16:a6:b6:7c:80:38:cd:72:42:
a7:2b:88:c1:25:4d:66:9c:00:40:69:92:0f:ea:19:
f5:a7:9c:13:cf:19:80:e3:cc:93:28:5b:14:5b:f1:
27:25:6b:79:30:5f:bb:94:78:e5:57:18:cd:d1:c9:
88:9a:3c:0a:21:06:0b:b8:8e:be:c4:cc:d2:c5:d2:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:EE:68:AC:BF:E5:7A:2F:B6:0F:60:63:C4:6E:7D:81:25:9D:FC
X509v3 Authority Key Identifier:
keyid:0D:E2:72:0C:57:DB:02:76:10:C8:21:C8:40:47:B1:10:BC:36:DD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeJyDFfbAnYQyCHIQEexELw23cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/zlruaKy_5Xovtg9gY8RufYElnfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c5a530-130b-4a62-9820-6310bf63051f/1/DeJyDFfbAnYQyCHIQEexELw23cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.16.0/24
194.11.19.0/24
194.11.25.0/24
194.11.83.0/24
Signature Algorithm: sha256WithRSAEncryption
86:aa:a5:42:9c:e7:21:86:6a:a0:42:3a:f3:47:70:e9:12:d9:
52:2e:da:1b:09:6c:b1:2d:5c:06:24:09:6a:cd:4c:06:ce:91:
88:43:9d:15:a3:13:3d:ad:37:36:00:77:be:81:1a:e5:ef:1d:
8e:2d:62:32:43:46:1b:7b:70:cc:79:7c:61:34:5f:64:03:e6:
09:7b:e7:d6:7c:a9:24:24:89:69:2f:f3:1c:c5:60:c6:92:fb:
7d:dd:63:a6:d7:cb:01:6e:41:0c:d8:ad:9c:dd:76:21:17:d9:
85:38:db:6f:d4:14:2d:9d:97:7b:c6:40:d3:21:2c:d4:f7:31:
67:eb:20:2d:14:1d:3e:b4:f2:13:4b:1a:b4:89:97:15:3e:4b:
35:01:66:2c:7c:b1:d0:b5:37:00:0d:5d:d5:29:54:d7:24:d8:
f4:f7:6d:69:5c:c7:e7:3a:14:55:d6:5a:9f:9a:62:a2:5b:54:
d3:56:7c:84:f2:f8:b6:28:4f:88:58:a4:0b:dd:06:d2:66:12:
42:d0:8e:54:79:d7:a0:68:a7:1b:0d:0e:ff:90:b4:2a:e2:38:
ba:5f:5c:15:e2:e3:6b:a4:61:fe:6f:b0:14:02:6b:4f:85:21:
50:89:c8:9e:28:4a:4a:3d:1b:8d:12:d6:87:2b:98:db:4e:6a:
15:ec:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:10 2024 by rpki-client on console-ams.rpki-client.org