Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/NzJo4qcm1PpaXOxzIdQRqMoIsrE.roa
File: NzJo4qcm1PpaXOxzIdQRqMoIsrE.roa (raw, json)
Hash identifier: Zrlx/E9jiX0kF12+GFEeYCC1uKsISRHDIGUqBEqkZA4=
Subject key identifier: 37:32:68:E2:A7:26:D4:FA:5A:5C:EC:73:21:D4:11:A8:CA:08:B2:B1
Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Certificate serial: 093C546E
Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/NzJo4qcm1PpaXOxzIdQRqMoIsrE.roa
Signing time: Sat 01 Jan 2022 12:58:18 +0000
ROA not before: Sat 01 Jan 2022 12:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56650
IP address blocks: 193.34.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154948718 (0x93c546e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Validity
Not Before: Jan 1 12:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=373268e2a726d4fa5a5cec7321d411a8ca08b2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:fc:98:e4:49:fd:95:e6:85:7e:c0:14:5f:
9f:c6:ef:55:fd:09:31:da:23:1f:a5:5d:1d:78:4c:
84:f5:a1:8c:55:42:51:9b:f9:97:fe:a5:4d:b9:fc:
e9:a5:95:cf:9f:d3:25:ed:f0:94:9e:52:9b:2a:72:
0c:1b:8a:f7:ec:3e:b6:f7:41:30:c3:02:b3:ab:3c:
c6:19:23:57:90:73:18:e6:d4:a3:06:79:73:54:4b:
bc:b2:79:08:c8:7b:e3:0a:8a:cf:9a:e5:f1:ed:49:
4a:09:bd:a1:a3:30:0c:b3:94:00:f6:9b:52:80:13:
a8:11:b5:4a:2f:44:41:44:87:cd:0b:a2:80:de:5d:
43:e2:2b:68:af:26:a4:f8:22:af:31:93:2a:08:ef:
92:20:60:8e:c7:08:97:44:54:1f:92:ee:67:16:af:
59:1d:77:ec:40:cc:f1:e3:93:ea:4d:04:69:b2:47:
43:15:12:ee:4b:b8:47:91:91:7a:9f:e0:80:81:ba:
d5:3d:17:74:90:91:62:20:3f:ea:9e:ba:58:bf:c3:
e0:59:32:a7:46:ef:53:4c:f3:ea:7b:bb:96:15:ba:
24:c5:ca:88:8c:cd:46:12:e4:8a:d5:55:ff:41:c4:
50:9b:46:33:df:e3:1f:ec:28:a7:1f:1d:4e:ff:9c:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:32:68:E2:A7:26:D4:FA:5A:5C:EC:73:21:D4:11:A8:CA:08:B2:B1
X509v3 Authority Key Identifier:
keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/NzJo4qcm1PpaXOxzIdQRqMoIsrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.205.0/24
Signature Algorithm: sha256WithRSAEncryption
74:77:27:aa:b1:a4:a6:2f:af:a4:52:d1:09:4a:16:59:39:2a:
92:45:76:ca:6a:f6:ea:db:3e:b3:a2:9e:3d:a4:22:04:8c:18:
99:97:f9:87:a6:c9:64:9b:3e:22:b2:16:d5:bf:aa:a4:71:06:
6f:2c:d6:2d:ae:23:e6:47:ea:54:b8:4e:1c:1e:41:d5:63:27:
93:21:8f:27:5b:e7:67:17:b8:b7:52:f9:2a:ab:30:09:89:64:
a3:5c:8e:93:9f:ff:58:b4:dd:b8:36:29:6d:bb:db:81:f4:6b:
bd:3d:30:92:e0:7c:92:8c:24:14:cd:bc:d3:40:d8:22:d8:c8:
37:1e:e9:df:f1:8a:73:44:29:97:f7:fc:ae:88:f2:ed:d9:c1:
00:2d:b4:61:f1:51:30:72:e8:21:47:38:31:2a:f8:6c:f1:9d:
17:92:0f:09:f0:aa:14:42:19:40:c2:c3:b9:8e:00:e9:95:3d:
f1:1b:67:5b:8e:59:90:dd:dc:36:be:19:d0:49:ee:7f:c9:e3:
9b:c1:f8:b1:fb:82:bd:6c:e4:d9:73:c1:08:6e:0c:d1:92:0f:
0d:b3:4b:22:63:56:6f:54:bd:3d:94:22:c8:20:18:18:38:65:
26:40:b7:c3:5d:59:8c:d4:20:9a:54:c0:ea:f3:d0:56:d3:32:
91:a0:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:29 2023 by rpki-client on console.sobornost.net