Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/zycmaux93ILAusz2pOVLPUO6O_s.roa
File: zycmaux93ILAusz2pOVLPUO6O_s.roa (raw, json)
Hash identifier: KV9yVIlayzt4PVZN9Gd3stLadGpqZbOiFwQ4R90Nigw=
Subject key identifier: CF:27:26:6A:EC:7D:DC:82:C0:BA:CC:F6:A4:E5:4B:3D:43:BA:3B:FB
Certificate issuer: /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial: 01849147DB29583B4ABB0A2F93C7D6D684E2
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/zycmaux93ILAusz2pOVLPUO6O_s.roa
Signing time: Sat 19 Nov 2022 19:05:16 +0000
ROA not before: Sat 19 Nov 2022 19:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39306
IP address blocks: 193.37.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:91:47:db:29:58:3b:4a:bb:0a:2f:93:c7:d6:d6:84:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Validity
Not Before: Nov 19 19:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf27266aec7ddc82c0baccf6a4e54b3d43ba3bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:75:f4:17:30:49:65:5a:fe:82:40:58:87:
ee:f3:7b:ff:7d:e7:f5:5d:a7:3c:1b:00:ef:ad:fc:
aa:27:7e:7f:9c:05:ec:7d:de:c4:6f:dc:8f:be:11:
cf:33:f4:21:63:90:1b:22:b9:a9:3d:04:6e:53:f5:
67:b2:bc:b0:c4:98:b1:2d:c5:d2:dd:51:9e:4f:92:
02:11:46:81:41:e8:59:d4:e0:0d:b3:32:2c:0d:5b:
de:b6:8d:e0:e5:8f:22:57:e7:a7:74:9b:8d:a2:41:
81:c3:ae:14:44:14:7b:cd:49:d6:a0:c8:93:20:7a:
ff:76:ec:b9:23:58:67:a8:41:80:44:99:66:ec:9b:
55:5e:05:39:84:60:6e:8c:79:e9:00:7c:de:1d:28:
3f:21:7a:39:a7:81:e1:9f:5f:4c:4b:3b:67:13:00:
7b:cd:79:97:41:e9:88:68:6e:24:17:f9:66:d3:82:
29:40:aa:fb:c0:95:7d:35:1f:52:fa:38:d6:f4:6b:
ff:dd:a5:d0:92:0c:5a:b1:4c:e9:92:62:5f:19:cb:
20:d2:a3:45:42:a1:e4:4e:77:12:a5:d6:4d:ff:1f:
80:f1:b0:38:22:da:f4:20:47:da:05:aa:d5:ef:61:
03:02:0c:f8:9f:57:74:90:2e:ca:d4:e4:94:f5:07:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:26:6A:EC:7D:DC:82:C0:BA:CC:F6:A4:E5:4B:3D:43:BA:3B:FB
X509v3 Authority Key Identifier:
keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/zycmaux93ILAusz2pOVLPUO6O_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.138.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e4:68:6e:03:d3:66:0b:a7:62:b7:80:1b:0b:02:63:5d:d7:
ab:f6:c9:33:32:b0:f1:b3:99:4a:dd:92:d8:94:8a:87:b2:b3:
26:f6:5e:5a:ed:01:f7:80:48:dd:24:90:5b:81:69:58:90:5c:
65:f5:ed:29:37:11:61:56:ba:56:d0:68:50:f5:c4:d6:ad:f3:
bb:56:02:6d:c1:6b:5d:89:d1:3d:96:1c:48:9a:7c:dd:2b:62:
f8:d5:37:bb:3a:69:7f:7f:e6:47:b7:db:9b:e1:6d:50:6c:18:
69:7d:43:24:9f:bd:0e:c6:10:fd:eb:04:f6:9f:d1:02:40:43:
7c:d4:a1:6c:64:90:06:b9:77:ba:04:90:02:4f:8a:d5:91:86:
0e:15:58:d2:dd:99:d1:50:6a:8a:82:09:cf:2c:b4:76:1e:00:
d9:be:8a:79:c9:14:78:33:70:53:7e:77:ff:e6:36:bd:47:12:
88:40:90:82:d3:d5:32:36:34:01:ed:df:b9:99:48:c0:93:37:
88:91:fe:f7:52:1a:f2:be:13:09:5f:1d:ef:76:31:a9:d6:bc:
22:01:bd:03:7d:e8:ce:01:63:ad:a6:dc:22:5e:f2:70:de:de:
05:32:f6:fd:35:02:53:d6:7f:a8:fc:48:c3:b3:20:d5:4c:98:
4d:d5:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:06 2023 by rpki-client on console.sobornost.net