Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/sZ8_mzVMue35yoQQbHrYVfAjo8A.roa
File: sZ8_mzVMue35yoQQbHrYVfAjo8A.roa (raw, json)
Hash identifier: /qPu2zJDXYPyltl/Q4DIaYr5LN7PCBIZzhwz+qHuXr8=
Subject key identifier: B1:9F:3F:9B:35:4C:B9:ED:F9:CA:84:10:6C:7A:D8:55:F0:23:A3:C0
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 35126162
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/sZ8_mzVMue35yoQQbHrYVfAjo8A.roa
Signing time: Sat 01 Jan 2022 05:58:42 +0000
ROA not before: Sat 01 Jan 2022 05:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57230
IP address blocks: 87.236.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890397026 (0x35126162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 05:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b19f3f9b354cb9edf9ca84106c7ad855f023a3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:5c:c9:ec:ee:f2:b2:ec:18:f3:f0:1b:ba:
b2:c1:4e:4f:79:f7:c7:2a:19:76:b3:56:bc:0c:17:
9a:02:d5:bf:be:d6:da:a2:cf:c0:a8:5d:38:97:8a:
70:02:aa:98:57:da:e4:ba:b8:09:bb:e1:0b:47:72:
7d:22:91:da:3d:ce:c0:fe:fe:a8:67:72:23:82:d7:
a7:e5:50:6d:ed:3d:8f:17:d7:ad:c3:6a:3c:14:f7:
1b:4e:16:8f:55:ea:f5:0e:55:1d:41:f4:0a:1a:74:
60:c2:27:3d:24:36:06:e0:86:4e:91:38:f8:46:e6:
78:b3:33:39:5d:dc:b4:62:9f:03:47:2e:07:46:6d:
94:fa:4e:9d:e2:41:db:0b:c1:e7:37:05:fe:be:25:
cb:b7:8f:7c:62:26:4d:62:fc:d9:d6:1c:86:54:1d:
26:e4:87:da:2b:82:a9:0e:c1:ae:61:0e:48:2d:fe:
57:92:ce:7c:0b:74:38:e1:2b:17:44:15:49:97:b4:
3d:4c:2c:5d:de:01:08:f8:3d:52:7f:27:d1:80:52:
33:8d:53:f9:b9:87:ce:f9:d6:74:b3:c3:9b:3a:bd:
96:46:3f:98:0b:23:24:8b:f3:9f:3b:f7:f4:a3:c2:
15:e9:7a:72:3f:ae:80:48:69:b6:8c:92:95:ab:be:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9F:3F:9B:35:4C:B9:ED:F9:CA:84:10:6C:7A:D8:55:F0:23:A3:C0
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/sZ8_mzVMue35yoQQbHrYVfAjo8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.210.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5f:1e:5f:07:c5:ad:e7:49:9a:f5:93:38:95:e4:0f:6f:3e:
bb:3a:f9:22:15:ea:75:f0:11:fb:2b:c5:f4:b3:ee:16:47:3e:
a4:85:8e:87:e1:ca:90:26:0b:8d:9c:48:a5:71:df:2c:02:a3:
c8:7b:82:75:a3:98:b0:ce:6d:60:98:0f:2d:be:d5:7d:9a:52:
5a:2a:dd:4a:32:72:03:27:ed:2a:9b:5f:5a:59:49:ab:0c:a2:
92:fd:ec:c1:f5:cf:fb:eb:f6:ed:2f:7c:60:42:7f:77:8d:11:
16:c9:28:59:36:41:7c:44:32:85:d6:e7:ca:72:00:f3:ad:30:
b9:44:9d:09:ef:1d:7f:d7:3d:95:8b:f1:5c:0f:30:17:f8:2d:
ba:39:d8:18:33:c3:29:31:9d:af:93:2c:8e:aa:4e:f8:f6:a7:
c8:1f:0f:0d:5f:27:dc:ad:97:23:03:f2:31:8c:0c:89:17:e4:
1e:29:22:3d:fc:13:af:64:57:76:7e:7c:18:83:de:ed:e0:ec:
b6:67:a4:b1:d5:80:07:e1:0e:64:ca:c1:87:e5:35:f7:23:46:
2a:ba:be:31:dc:69:a3:2e:e2:b4:67:c7:f3:d4:93:8e:3a:b2:
2c:29:9d:a4:64:2a:eb:22:e9:23:7e:97:3e:93:14:ff:1f:ae:
f6:58:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org