Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/zkX5FBejSRg34VJz6POiprltxao.roa
File: zkX5FBejSRg34VJz6POiprltxao.roa (raw, json)
Hash identifier: Mo74y1bFIuOkZnXg53EkUPEDQGM0lMKqolzr8goWKgs=
Subject key identifier: CE:45:F9:14:17:A3:49:18:37:E1:52:73:E8:F3:A2:A6:B9:6D:C5:AA
Certificate issuer: /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial: 05A5446A
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/zkX5FBejSRg34VJz6POiprltxao.roa
Signing time: Sat 01 Jan 2022 03:55:48 +0000
ROA not before: Sat 01 Jan 2022 03:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48152
IP address blocks: 195.230.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94717034 (0x5a5446a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Validity
Not Before: Jan 1 03:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce45f91417a3491837e15273e8f3a2a6b96dc5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:3f:cd:3b:2c:15:30:5e:0b:a1:32:fc:7c:
a8:d3:a2:81:87:26:07:6a:7a:3d:44:c8:78:65:3c:
55:3d:9d:19:3c:c0:ef:8a:2b:95:22:65:95:5b:96:
f7:d6:05:46:94:3a:28:69:da:bc:60:e9:70:de:c7:
c4:a0:62:2e:93:1e:a9:7c:e2:da:41:dd:18:12:d1:
d2:43:3a:bb:1a:e7:9d:98:a6:99:4a:db:66:1b:6a:
4c:72:be:79:e3:ed:d7:5e:e9:b4:f2:c7:62:64:b6:
93:4c:fe:4f:72:03:15:59:e1:67:3c:b3:ee:ec:be:
c6:02:8a:33:d6:92:1b:ce:54:f6:be:fd:75:46:7b:
a9:de:c4:d0:c9:9a:89:19:7f:a4:1f:7e:5e:0d:04:
3f:10:af:6c:7c:fc:99:b3:31:c0:ac:89:a2:df:f6:
23:78:9e:cd:0e:23:0e:e5:88:b4:66:f2:91:47:1a:
6f:fe:17:b1:74:0f:c3:5a:37:e7:71:66:2f:3a:d2:
eb:7a:9a:02:9a:8e:0e:eb:93:be:b5:b6:07:04:e0:
63:ef:3c:4c:db:60:bd:06:fd:59:30:b3:4f:de:7d:
23:fc:b1:de:c4:f0:2a:e1:1d:a4:c2:4e:c2:0b:dd:
b8:e2:25:e7:3c:b0:e5:f3:3d:e5:3a:f5:2f:ad:25:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:F9:14:17:A3:49:18:37:E1:52:73:E8:F3:A2:A6:B9:6D:C5:AA
X509v3 Authority Key Identifier:
keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/zkX5FBejSRg34VJz6POiprltxao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.126.0/24
Signature Algorithm: sha256WithRSAEncryption
79:38:ee:12:05:26:0f:6f:e1:e6:a0:9a:49:2f:5f:80:37:9f:
06:b5:bf:19:4b:be:69:eb:1e:c7:77:36:d6:12:55:22:7f:dc:
d8:3b:f5:ea:30:58:2f:88:5e:e3:d1:eb:47:e1:4f:2e:82:55:
23:7b:2f:66:dc:96:2b:3a:00:4a:8f:21:75:d4:48:c0:32:9c:
0e:4e:c1:12:a1:2f:39:bd:6b:3e:31:5d:aa:9f:bb:ec:9d:8a:
2f:ec:19:d3:c7:68:89:3b:98:e8:a5:9b:e9:2e:f4:73:aa:86:
bb:68:0d:0d:74:f2:03:5c:dd:9f:65:cd:9a:00:bc:71:a6:59:
9e:2c:0c:1b:a4:df:29:48:4e:b0:ac:ac:32:5c:ab:3f:de:85:
57:85:9e:78:5c:eb:7a:55:10:c5:06:05:b2:f6:90:51:aa:97:
af:06:ae:88:eb:2c:12:02:f1:6a:11:a6:5a:16:99:e2:7c:14:
5c:64:18:c7:f4:14:01:dc:f0:a1:2b:7c:b9:a5:95:76:95:0c:
96:e6:54:a9:f7:06:81:00:37:ee:89:98:87:55:26:88:e7:c5:
f7:96:b7:fc:1e:96:c3:a4:dd:e1:d1:35:06:0c:34:36:d7:28:
f8:bd:5d:7e:b4:23:6b:70:bc:5d:52:b5:4a:99:5e:43:90:40:
e4:67:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:45 2024 by rpki-client on console-ams.rpki-client.org