Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7Z1zf5pElevOyax2ztfbgQyGFog.roa
File: 7Z1zf5pElevOyax2ztfbgQyGFog.roa (raw, json)
Hash identifier: 7wxQ5t0ErmLI/FmsLN06SuPVTlsurNUmnlSFEwFxjlc=
Subject key identifier: ED:9D:73:7F:9A:44:95:EB:CE:C9:AC:76:CE:D7:DB:81:0C:86:16:88
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 443ED0B9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7Z1zf5pElevOyax2ztfbgQyGFog.roa
Signing time: Thu 16 Jun 2022 09:38:45 +0000
ROA not before: Thu 16 Jun 2022 09:38:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211353
IP address blocks: 193.182.244.0/24 maxlen: 24
193.182.243.0/24 maxlen: 24
194.103.46.0/24 maxlen: 24
193.183.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144967353 (0x443ed0b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 16 09:38:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed9d737f9a4495ebcec9ac76ced7db810c861688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:be:2d:93:72:6d:15:c7:0c:94:ee:ae:93:
42:c4:28:d5:85:4b:cc:10:8e:59:5e:d4:48:b8:4c:
6c:ba:41:a3:a2:78:5e:10:79:18:e3:f1:19:b5:22:
8f:fc:fa:3a:f6:ef:54:4a:c8:08:57:a0:cd:0f:f0:
97:62:8f:31:58:82:f1:45:d2:70:72:91:7d:6d:84:
84:0c:ae:ce:93:dc:89:93:6f:cf:a6:eb:aa:01:d4:
af:e1:db:1d:c9:74:fd:35:aa:8b:e5:27:14:19:c7:
75:e7:7d:97:c3:b3:b0:3f:e5:9a:a2:0c:75:29:49:
56:3a:53:0a:be:2e:cc:03:da:a7:ed:4b:14:d6:ce:
18:6b:fc:88:37:ef:eb:37:dc:5d:1a:34:2e:91:c3:
4f:72:32:bb:ee:0f:79:79:2f:00:31:9d:05:7c:4d:
02:6e:23:7f:c5:16:ec:db:bf:97:6d:5f:77:27:49:
3f:19:a7:90:4e:31:3c:8e:e6:cf:ee:83:89:e3:bd:
3d:d1:a7:08:5c:94:c4:1a:39:47:25:30:eb:e4:39:
f0:87:7c:7c:98:74:5e:0f:36:37:c7:e3:83:5c:18:
c1:5d:86:ac:1c:06:c2:19:80:92:bd:4d:00:a2:8f:
4c:13:c0:09:49:86:1f:51:d1:a5:d3:fa:5f:e0:d4:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:73:7F:9A:44:95:EB:CE:C9:AC:76:CE:D7:DB:81:0C:86:16:88
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7Z1zf5pElevOyax2ztfbgQyGFog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.243.0-193.182.244.255
193.183.85.0/24
194.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
67:00:03:2f:32:dc:ff:3e:38:88:bb:3b:e1:db:18:53:f2:b3:
ad:1b:44:eb:20:56:2d:8c:e7:f2:cb:4a:7b:27:83:45:10:23:
39:93:9c:95:0e:f4:f9:2b:5f:8e:92:39:52:f9:f3:87:15:49:
dd:c0:71:0c:33:d6:44:ea:12:08:a4:c8:8b:23:57:cc:7d:8e:
23:9f:f5:27:66:14:db:51:64:de:0a:de:92:4c:6e:af:7d:4c:
0a:d9:79:ba:74:d2:5d:03:63:d4:7c:60:54:73:33:0c:24:36:
bc:5b:45:d6:9e:1b:b5:9a:b0:af:9e:dc:23:19:42:d2:6d:a1:
90:f3:08:9a:53:0d:4b:7e:23:fd:49:03:1b:c1:73:02:24:7b:
5d:9e:b8:a5:dc:13:67:81:26:17:f9:c0:a8:c2:76:79:63:9c:
de:6c:43:ea:33:3a:a8:de:cf:df:9a:51:32:b5:62:1f:42:7c:
d2:bf:a1:02:44:8c:9e:d3:23:bf:03:f8:fc:d6:37:1f:2a:75:
01:ec:8a:bc:ec:36:01:d2:c5:62:f4:a5:eb:88:8a:eb:ba:16:
f6:67:66:d5:76:f8:fb:99:f5:bf:88:2b:ec:5a:7b:c7:ef:0f:
5a:9b:37:54:44:86:99:d3:d6:71:f7:6b:72:7d:8d:6d:45:3b:
58:b3:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org