Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zKL7ye-vIDNiuUhJe2zbQyFWU-U.roa
File: zKL7ye-vIDNiuUhJe2zbQyFWU-U.roa (raw, json)
Hash identifier: FgHe6jsButxYiFonakblUI/obF1/4/tWOPwVZDEQUc4=
Subject key identifier: CC:A2:FB:C9:EF:AF:20:33:62:B9:48:49:7B:6C:DB:43:21:56:53:E5
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018439EDB427E5D4BCB6961B74BE037D33E8
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zKL7ye-vIDNiuUhJe2zbQyFWU-U.roa
Signing time: Wed 02 Nov 2022 19:59:50 +0000
ROA not before: Wed 02 Nov 2022 19:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 194.180.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:ed:b4:27:e5:d4:bc:b6:96:1b:74:be:03:7d:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Nov 2 19:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cca2fbc9efaf203362b948497b6cdb43215653e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:6e:a0:ab:f0:b6:7d:d8:a9:26:08:ae:8b:
2f:84:2b:57:3e:fe:ec:d6:08:41:e2:af:79:34:d2:
2a:b2:d6:62:5b:6e:31:0c:7b:9f:62:87:b4:97:b9:
3a:80:38:9b:24:a6:c9:42:fc:82:98:08:ad:c8:37:
9f:ed:4b:c2:38:6a:c1:36:56:cf:47:be:15:81:f3:
06:79:02:76:1e:05:2a:e1:cd:e7:b9:b9:99:5c:40:
19:f3:a1:93:06:ff:f8:aa:b8:fb:26:e1:ab:49:f3:
f2:fa:7e:03:dd:dd:a3:9d:4b:a5:2b:9b:43:c9:71:
e1:5d:92:b7:46:9f:e9:4f:68:a7:ab:1c:b9:c6:82:
35:7c:a3:37:1c:b9:e8:2b:a7:95:1b:a7:97:4e:3a:
95:43:f6:ce:8f:f4:55:29:ca:56:e9:af:13:ed:86:
3c:06:f0:91:e5:2e:fb:bd:d3:bc:66:5a:33:52:98:
82:b6:ac:41:d6:cf:0d:48:dc:e5:07:cf:e3:f2:d8:
7b:59:d6:95:53:1e:f3:72:17:2c:13:69:06:b3:db:
35:a6:35:ea:ef:fb:5d:73:75:6b:35:ba:b0:4a:09:
da:aa:87:93:21:8b:a8:80:49:28:44:ce:27:70:90:
42:f9:52:2e:42:b4:2a:4a:c7:a6:86:2a:34:3b:ba:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A2:FB:C9:EF:AF:20:33:62:B9:48:49:7B:6C:DB:43:21:56:53:E5
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/zKL7ye-vIDNiuUhJe2zbQyFWU-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.208.0/24
Signature Algorithm: sha256WithRSAEncryption
17:af:f3:b2:5a:88:80:1c:46:9f:31:00:ce:80:ca:24:df:bf:
7e:ba:2d:83:f7:c1:75:73:9d:cc:96:7e:20:87:74:fc:14:79:
8c:01:35:c7:5b:04:93:06:eb:76:e4:d8:2a:29:96:e8:f0:88:
2f:74:9c:79:24:03:1b:31:ea:0a:d5:2a:1b:ea:a3:fb:60:6c:
7d:41:cb:d3:ef:7e:34:e3:3d:92:b9:da:cd:28:5c:61:db:5c:
b2:60:61:bf:59:19:f0:98:34:45:17:f1:74:f2:81:30:ae:ef:
c2:ee:17:07:bd:d2:f6:68:90:f7:4a:8c:c9:34:99:87:18:f7:
37:7d:6b:d1:6c:c5:34:f1:8c:de:83:9d:56:bf:63:df:87:b0:
52:4d:c3:e7:52:bc:d8:0b:c4:8b:e2:39:29:8e:bc:10:a0:52:
3f:90:7e:4c:ad:16:20:6d:10:c7:92:d6:07:a5:01:7c:2e:41:
57:a4:aa:d3:7d:1c:61:32:ce:d7:bc:dc:d8:f4:d2:2f:b6:fa:
98:5d:0c:89:3c:bc:8e:31:28:10:5f:73:d0:e9:ca:dd:9a:cd:
9a:37:c4:db:e8:53:a2:bd:d8:14:7c:a0:31:26:d2:a6:92:30:
bf:20:99:e9:5e:96:17:0a:cc:8d:a6:f2:f6:f4:6f:e5:e6:64:
c9:8d:08:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:20 2023 by rpki-client on console-fra.rpki-client.org