Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/zrHeX4U4E6cnJaum-auCKlUoNbs.roa
File: zrHeX4U4E6cnJaum-auCKlUoNbs.roa (raw, json)
Hash identifier: oH8iZ6moGP1ZFvoFzLXDQCpSKGkQWGRTLkZWsum1q7M=
Subject key identifier: CE:B1:DE:5F:85:38:13:A7:27:25:AB:A6:F9:AB:82:2A:55:28:35:BB
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0171792A
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/zrHeX4U4E6cnJaum-auCKlUoNbs.roa
Signing time: Sat 01 Jan 2022 05:01:09 +0000
ROA not before: Sat 01 Jan 2022 05:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211820
IP address blocks: 194.45.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24213802 (0x171792a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Jan 1 05:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ceb1de5f853813a72725aba6f9ab822a552835bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f4:77:d8:44:6b:8a:b9:ae:22:b1:95:49:70:
d0:af:a3:41:f0:d3:9a:6d:6f:4e:0e:21:79:55:3e:
2f:38:cf:f3:12:a8:5a:80:be:ca:d7:c6:e7:2b:d3:
81:12:90:2d:14:50:18:f8:7b:fc:fa:64:53:38:06:
d3:5e:c1:dd:48:7c:e1:e8:a0:8d:3b:8c:f4:56:a1:
28:f9:9a:ca:73:bd:2e:ab:e9:d4:50:48:70:34:05:
a0:81:e2:3b:e1:cf:7f:1e:fd:ad:85:4d:8e:d6:e2:
e3:ca:08:57:54:0c:d0:89:9e:05:93:5d:74:2f:ef:
e1:83:be:25:84:77:d5:6b:36:98:d4:d7:66:65:c5:
49:b9:b2:05:2c:b1:c7:3f:b6:e2:e3:0b:7f:8d:23:
68:7a:95:74:7f:53:55:23:98:79:cd:07:f8:c7:cf:
e4:23:06:19:53:b3:b1:5d:87:bc:f5:7a:98:b9:c7:
ee:a7:0b:f0:92:05:f3:73:f0:f0:e4:b8:2e:aa:d1:
19:1c:04:d2:a4:30:06:c8:be:0c:cd:0c:e6:a2:34:
2e:5f:a2:6c:fa:8b:72:7d:24:93:5a:cf:e1:74:3a:
1f:4e:73:91:3f:db:9c:70:61:6c:d4:e4:5a:a7:83:
8a:b5:18:89:9c:86:55:ca:30:fd:f6:8f:f8:85:b2:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B1:DE:5F:85:38:13:A7:27:25:AB:A6:F9:AB:82:2A:55:28:35:BB
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/zrHeX4U4E6cnJaum-auCKlUoNbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.20.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f6:c4:ce:96:85:94:1d:75:e1:c5:f6:18:45:00:96:b3:f2:
61:81:04:5e:d7:2a:55:9b:f2:f3:62:0f:2f:ef:c8:5e:60:15:
b1:86:d1:f7:37:84:50:8d:06:03:c1:a9:4b:f7:e2:92:89:b1:
a4:c3:d7:76:e9:af:c1:2c:5c:74:f0:1e:4b:af:d6:1b:22:aa:
3e:ec:91:80:ba:70:cd:4c:11:08:85:39:44:90:71:7a:4c:4f:
72:67:7b:19:00:01:98:39:21:2c:60:cc:57:34:9c:ab:d4:dc:
07:5a:de:96:20:68:d6:49:8e:26:c9:31:e0:f3:89:30:43:7a:
04:d3:a9:50:d6:85:34:a3:11:90:45:06:67:46:f1:ca:c9:b1:
f0:f0:4b:11:1c:30:fd:ef:7f:19:90:41:ae:0b:42:68:dc:35:
71:8a:b6:04:88:3e:b4:d8:4e:81:a0:43:2f:c6:1e:85:d7:56:
3f:d6:15:f8:ed:5b:0a:28:d2:44:1e:14:0c:e9:67:67:db:7a:
7f:29:01:76:bd:93:e0:0e:ab:e5:ca:5c:6d:2b:24:84:00:5e:
d6:2f:61:4c:f7:88:76:15:e5:e7:80:ab:8b:7f:9d:de:97:f1:
c4:05:23:a4:b4:ce:2c:ee:b0:05:64:4e:4c:37:9b:8a:7f:2f:
d6:95:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:00 2023 by rpki-client on console-ams.rpki-client.org