Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/Z-cudk2_7Z7DKQ4OJgb769gbPi8.roa
File: Z-cudk2_7Z7DKQ4OJgb769gbPi8.roa (raw, json)
Hash identifier: 2VJi2JQotCyizSP2D1P15umOUF9sAisQ+wuyER1blnI=
Subject key identifier: 67:E7:2E:76:4D:BF:ED:9E:C3:29:0E:0E:26:06:FB:EB:D8:1B:3E:2F
Certificate issuer: /CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Certificate serial: 0184D33B49076AF576780AB10018FA5D896E
Authority key identifier: 06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/Z-cudk2_7Z7DKQ4OJgb769gbPi8.roa
Signing time: Fri 02 Dec 2022 14:26:28 +0000
ROA not before: Fri 02 Dec 2022 14:26:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210644
IP address blocks: 195.20.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:3b:49:07:6a:f5:76:78:0a:b1:00:18:fa:5d:89:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648a991805f93d24bbe1edb3e961f5a1d25b248
Validity
Not Before: Dec 2 14:26:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67e72e764dbfed9ec3290e0e2606fbebd81b3e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:cb:96:26:e2:93:47:ad:dd:bd:b7:7c:0c:
b9:7f:3b:72:ac:05:1f:49:77:fb:4d:c9:f6:24:5f:
80:7a:d9:98:40:0c:1b:81:2b:29:9b:42:5e:00:01:
33:ac:99:9b:21:b7:7a:ff:e1:db:60:f9:65:b5:b6:
a7:f1:67:59:53:f8:a2:9e:65:e0:cf:5b:e3:35:fd:
48:a1:e4:ed:38:34:fc:46:88:b1:b1:a3:9e:5f:68:
d6:61:90:56:bb:8e:e4:aa:7f:93:dc:da:c4:ab:8d:
73:2c:48:72:f3:fa:97:5c:0e:d1:3d:2b:52:5e:04:
f7:0d:17:6d:d8:eb:a5:f1:27:40:cc:36:da:48:51:
7a:54:c0:7e:73:28:9b:f5:6a:2d:1c:8d:65:78:bf:
44:38:cc:93:36:fd:8d:ec:10:13:0e:96:e8:1f:51:
46:75:2f:33:f6:6f:b2:96:ef:9a:ba:a7:18:eb:07:
16:97:81:d6:f8:36:f3:5a:54:dc:44:58:f4:61:b3:
1a:9a:38:e8:6c:91:3d:7a:4f:1b:88:73:ed:b0:8b:
b5:16:2e:3e:6a:db:a9:54:b7:7b:89:9b:ed:9c:9d:
00:83:e6:f6:c8:c9:d2:4b:bc:91:b0:84:ff:f3:ef:
cd:bb:95:2b:22:17:9f:bb:29:e6:58:14:14:cc:be:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:2E:76:4D:BF:ED:9E:C3:29:0E:0E:26:06:FB:EB:D8:1B:3E:2F
X509v3 Authority Key Identifier:
keyid:06:48:A9:91:80:5F:93:D2:4B:BE:1E:DB:3E:96:1F:5A:1D:25:B2:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkipkYBfk9JLvh7bPpYfWh0lskg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/Z-cudk2_7Z7DKQ4OJgb769gbPi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a0237-836b-4596-849e-2d423b81df1c/1/BkipkYBfk9JLvh7bPpYfWh0lskg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.16.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d2:27:de:43:1a:32:55:f8:a2:d1:d7:bd:1d:db:c8:67:65:
ab:7d:98:d5:be:50:96:67:52:31:d6:5a:ca:c1:4d:72:8e:bd:
6c:eb:4b:f8:e2:b1:a8:42:cf:5f:b1:9a:61:0d:41:48:9a:a6:
8f:47:d4:f0:fc:6b:07:96:1a:f1:fa:48:a8:dc:f1:59:ef:56:
c1:1a:71:37:ca:95:f4:bb:ba:b0:58:18:e8:ca:30:57:8d:dd:
10:a8:bd:2a:de:a5:fc:8e:be:14:77:3e:40:ea:8d:8c:27:bf:
7c:58:8e:0d:35:56:54:1c:e4:07:5f:a3:27:38:9f:05:5a:3b:
97:ec:63:e7:3e:56:72:77:66:b3:a0:b5:31:74:bf:20:d2:a9:
e8:33:a4:e3:bb:2a:ae:c2:2d:a3:89:7e:68:b4:d3:16:04:fd:
3b:40:ce:45:d9:3d:2b:7d:4c:f0:ac:e9:a0:ee:a5:c6:13:1c:
65:65:3d:fd:0d:ed:9d:6d:6a:e5:bf:2e:eb:2c:a8:be:ec:20:
2b:56:b1:4f:a8:5c:17:ca:9c:28:9f:a0:31:d3:90:f2:0a:37:
be:65:d0:2d:7e:bd:63:78:f8:20:c8:df:91:50:ca:d8:3c:df:
7a:d6:47:c5:f1:0d:06:3e:a9:3d:0b:d9:0a:49:02:41:74:9a:
4e:1a:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-fra.rpki-client.org