Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zX22nzjqJDNG6T7QIIDcoD93ZRI.roa
File: zX22nzjqJDNG6T7QIIDcoD93ZRI.roa (raw, json)
Hash identifier: RoA7o5YKNdjymijaG8Ivp80TmnafZoMXBIsEJg/7ra4=
Subject key identifier: CD:7D:B6:9F:38:EA:24:33:46:E9:3E:D0:20:80:DC:A0:3F:77:65:12
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 03BC60F0
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zX22nzjqJDNG6T7QIIDcoD93ZRI.roa
Signing time: Tue 19 Apr 2022 16:40:34 +0000
ROA not before: Tue 19 Apr 2022 16:40:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 195.133.208.0/23 maxlen: 24
188.240.40.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62677232 (0x3bc60f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 19 16:40:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd7db69f38ea243346e93ed02080dca03f776512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:46:ec:63:fc:a6:26:6e:ae:de:f7:47:80:e0:
c9:48:a6:a6:81:f5:b3:60:ea:69:02:0b:eb:f6:be:
e0:f1:f5:3e:bd:0a:36:9e:68:45:4e:4e:82:ba:1a:
f3:d5:c1:00:47:57:2a:60:9f:c8:16:c4:20:d5:71:
1c:17:a7:d1:ec:f4:4f:1a:0f:13:b1:fb:f5:6a:c7:
49:f9:70:f1:61:89:a3:6b:22:fa:16:d0:01:b7:6e:
e6:64:03:eb:72:4b:18:0e:5b:f3:fb:2e:f2:c9:df:
d5:2a:96:b7:5c:19:59:79:1b:6d:0d:69:eb:a9:dd:
b4:cc:73:ce:4c:a5:75:29:b5:80:61:ed:a6:03:e9:
68:8e:ff:44:ad:33:ff:13:f4:4f:c5:8b:50:fa:e0:
f1:66:ec:bb:d6:4d:60:d8:81:1c:5e:07:4e:00:57:
bc:24:38:69:42:d6:b4:dd:a3:c4:14:5f:a4:b2:33:
43:11:7e:26:05:b3:eb:d0:d9:77:d5:a7:ec:5b:97:
1a:22:19:02:95:72:9f:37:e7:a5:3a:15:8c:ae:48:
c6:90:7a:0b:d4:7d:e0:91:e6:de:9f:f0:92:ce:56:
50:ac:e0:4c:51:71:c3:92:c5:36:52:31:4b:64:0d:
96:84:1b:97:a0:ca:0a:e6:4c:7f:d0:79:7b:b9:3d:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:B6:9F:38:EA:24:33:46:E9:3E:D0:20:80:DC:A0:3F:77:65:12
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/zX22nzjqJDNG6T7QIIDcoD93ZRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.40.0/23
195.133.208.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:09:6a:33:74:80:21:e2:73:08:bc:53:6f:38:94:c7:32:b3:
e9:69:1f:43:10:a9:e9:92:11:33:03:46:75:b4:5c:ec:40:be:
26:64:8a:5f:e6:13:88:bd:10:01:e0:51:a7:cf:6f:ed:99:38:
5c:fa:20:2a:80:53:1c:e3:5f:ad:5e:7e:e1:b1:3c:6d:b2:f9:
aa:7f:94:6a:a9:aa:69:c2:18:db:6e:92:2a:02:ba:77:15:a2:
67:e7:aa:36:9b:11:0b:67:2b:c5:2d:23:1a:b5:31:c5:6a:71:
78:55:63:82:32:ea:6e:90:23:cf:c3:e8:28:24:6a:ab:43:04:
82:23:3e:55:84:f4:52:11:60:65:35:53:a2:a8:0a:08:84:90:
62:c7:1d:6e:74:1b:c9:3c:3b:2b:a5:09:1e:db:41:bf:fe:e6:
9c:94:70:fc:96:94:4d:3c:86:92:31:e2:8b:5c:7c:96:12:e2:
a3:a6:8c:1e:3a:51:5c:b0:ae:b3:63:15:4d:4a:c6:c2:c4:5f:
a3:fa:2b:08:14:6d:87:f4:99:3c:35:61:f3:0c:08:36:a1:f0:
4d:90:44:31:d9:41:89:b8:d5:25:c6:17:05:c3:2e:e7:11:88:
52:7e:0a:a7:93:9b:9a:71:6c:48:24:2e:f9:28:a2:01:65:b5:
84:1a:99:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org