Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/zZCfZNuXtuyU7bjmMHOnumUvUlU.roa
File: zZCfZNuXtuyU7bjmMHOnumUvUlU.roa (raw, json)
Hash identifier: 56U0I7RRU4iemZDz+COm3eAmbrOjAM5ozLl9/OEuaZ0=
Subject key identifier: CD:90:9F:64:DB:97:B6:EC:94:ED:B8:E6:30:73:A7:BA:65:2F:52:55
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 015F5D72
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/zZCfZNuXtuyU7bjmMHOnumUvUlU.roa
Signing time: Sat 01 Jan 2022 12:00:48 +0000
ROA not before: Sat 01 Jan 2022 12:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 217.169.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23027058 (0x15f5d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Jan 1 12:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd909f64db97b6ec94edb8e63073a7ba652f5255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:88:fe:82:1f:bf:ba:4b:bd:f3:29:6b:7b:
f3:e8:0a:39:45:8c:23:de:e1:3b:db:0a:97:fc:bf:
40:13:4d:ae:53:53:11:8e:ee:a3:1b:8d:27:c2:21:
45:96:2d:76:df:ef:af:e2:86:ac:a5:7b:ec:b8:0b:
64:ce:e0:51:2b:68:f5:cd:11:3a:f6:3f:a6:9c:ae:
58:5b:0c:c4:cf:3d:a3:cb:d3:92:11:ab:68:87:91:
b4:4c:13:5b:9f:4c:ae:86:6d:74:3e:ff:0e:e9:8a:
4f:1c:42:0d:d8:0b:e9:d4:89:2e:1c:a8:78:82:34:
1d:76:da:95:11:f1:a2:4a:af:7b:bd:2e:c6:39:38:
ad:31:2c:99:4b:9e:8f:7a:91:73:a6:f6:09:96:f3:
74:3b:fa:72:1a:de:84:44:bf:63:04:ea:f9:b0:da:
5a:41:5c:b0:7f:51:48:25:09:62:66:72:3d:14:c6:
e1:9b:cc:3a:3b:4d:e7:ee:99:47:1c:9e:ae:8e:db:
39:13:52:80:b7:bd:e1:66:64:ba:a2:c0:65:ab:67:
92:29:a9:61:b7:c6:70:82:76:c1:19:d0:95:72:f6:
ef:72:1c:6f:53:6c:10:90:dc:78:fe:17:fa:62:05:
df:f0:32:1a:1b:6e:d4:e1:b8:f9:03:4d:d2:e9:04:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:90:9F:64:DB:97:B6:EC:94:ED:B8:E6:30:73:A7:BA:65:2F:52:55
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/zZCfZNuXtuyU7bjmMHOnumUvUlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.118.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d5:2d:30:18:69:4d:93:49:74:70:87:c7:40:79:cb:d8:e9:
ee:19:c1:2e:c3:a4:f6:7f:4f:d2:60:d0:07:51:df:35:dd:32:
6b:e8:85:50:af:c7:1d:75:07:5a:f4:d4:8a:ec:2f:1c:9c:38:
8c:6a:cb:00:6f:cd:32:1e:df:8d:f5:eb:27:c0:6c:19:11:8f:
e3:17:c1:3d:5d:ed:6f:68:5b:e4:85:d2:b9:0a:51:51:06:95:
35:44:58:be:f4:4d:20:ae:08:d9:83:f5:6d:81:f3:b9:23:5a:
ad:d1:2c:94:f0:79:18:0d:7f:59:16:c5:0b:1a:d8:72:76:ab:
b6:a3:52:5d:86:3e:55:ac:c8:62:7b:a5:96:2b:66:38:d3:78:
f0:34:cd:0c:0b:0a:ec:2a:87:a3:c3:28:fd:09:da:65:b9:90:
d7:12:d1:e5:e7:43:e6:9e:04:0d:93:f5:74:ac:9c:81:2a:95:
ac:1c:fd:04:26:b2:48:03:93:4c:ec:60:3d:40:4a:98:d6:71:
dd:a1:24:41:f7:26:56:32:bd:af:68:55:de:e7:90:4b:e9:8e:
6d:86:2e:26:91:ee:fd:f3:f8:4a:21:15:62:cf:f3:7c:d9:66:
bd:dc:e0:0c:05:79:2c:78:54:08:69:4c:59:f7:7a:0b:a6:66:
64:6a:5e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:03 2024 by rpki-client on console-fra.rpki-client.org