Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/ZMP2kmDOIBnnAO_qlGE2hMmXfC4.roa
File: ZMP2kmDOIBnnAO_qlGE2hMmXfC4.roa (raw, json)
Hash identifier: o6o3HEuyBcCsRuBcuowOxJPRCbxAEYYidM/WSfH+KUI=
Subject key identifier: 64:C3:F6:92:60:CE:20:19:E7:00:EF:EA:94:61:36:84:C9:97:7C:2E
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018321697AD78FE8FC7FA2B743256270F69F
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/ZMP2kmDOIBnnAO_qlGE2hMmXfC4.roa
Signing time: Fri 09 Sep 2022 08:41:44 +0000
ROA not before: Fri 09 Sep 2022 08:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5394
IP address blocks: 194.20.96.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:69:7a:d7:8f:e8:fc:7f:a2:b7:43:25:62:70:f6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Sep 9 08:41:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64c3f69260ce2019e700efea94613684c9977c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:77:9f:cd:6e:5e:89:e0:8d:a2:9c:71:b3:b5:
9a:a1:97:a3:8c:02:5b:16:60:78:67:79:a4:15:76:
5e:af:bb:e1:d2:6a:c8:18:ad:98:1e:66:db:80:5a:
6a:43:6e:8c:27:89:d1:83:1c:bb:3b:74:33:7f:43:
d1:33:66:26:e1:7c:53:a9:08:18:7a:13:d8:38:d4:
5b:a7:c8:ce:42:5a:c8:b3:51:b7:0b:7d:11:a3:f5:
9f:2d:f0:3e:f4:37:6b:00:49:b8:f0:b5:2f:88:67:
5a:71:e6:5e:4e:bc:8c:81:fa:fd:8f:10:98:db:b2:
17:e7:f7:ca:8f:c9:99:4d:ac:ad:70:33:b8:34:b5:
1c:10:c4:7e:5e:c4:96:29:56:f1:28:dc:f3:79:06:
45:9e:64:ff:82:af:d9:32:46:d9:43:63:3d:9d:a3:
85:13:fc:7d:11:96:ba:de:4a:e0:d2:ec:07:7a:e6:
13:d8:1e:5e:62:69:f0:fe:40:2a:1e:91:b4:a1:01:
d1:fa:f7:53:7b:87:dc:50:c7:c3:40:bc:e2:19:6b:
0a:1c:e8:a9:5b:4b:60:68:38:ac:5c:6e:4f:6e:7c:
6a:ec:c8:63:34:c4:81:3c:8e:5b:65:6d:5d:0d:bc:
d1:33:2e:dc:cb:17:cb:e5:bc:00:a0:29:de:3f:90:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C3:F6:92:60:CE:20:19:E7:00:EF:EA:94:61:36:84:C9:97:7C:2E
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/ZMP2kmDOIBnnAO_qlGE2hMmXfC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:39:2c:20:8a:b3:0d:1e:93:e3:c5:4b:76:ff:8b:ae:32:c7:
a2:b2:ee:6f:bb:90:6b:c2:f8:64:a0:a4:10:a3:50:0d:74:a7:
5c:03:6b:e2:98:0d:31:a1:f0:9e:cc:49:98:91:89:33:20:fe:
a4:68:ed:61:f4:08:f7:12:df:7f:7d:1a:aa:95:57:a9:bb:8f:
fb:b4:f5:eb:ed:16:93:6c:cb:42:22:39:f6:50:d8:e5:2d:0c:
f4:49:03:eb:52:6d:34:54:4c:92:61:3d:dc:c3:48:07:de:5a:
36:04:85:6d:d2:1f:b9:2b:18:ba:0b:89:09:3b:52:20:53:da:
61:9e:ca:b4:d4:76:30:21:43:84:a5:77:08:b9:66:b0:81:35:
b0:0a:2d:57:e4:bc:62:cc:80:e4:f6:48:90:a0:50:77:cc:3a:
bd:51:a0:ab:27:83:57:2a:8c:3a:83:d1:fa:7e:7a:da:ad:10:
e4:1d:47:2f:05:bd:b1:71:ab:76:a7:a8:c6:9e:23:58:24:1f:
87:34:9d:fb:dc:d0:d8:34:d5:07:12:5c:b4:ff:ee:a0:5c:20:
ca:a6:4b:9c:cb:ff:63:3f:f2:e0:d1:13:50:48:ba:8f:58:54:
e1:26:89:51:97:2c:58:92:e1:b2:68:d4:e3:81:f9:e7:1b:21:
5f:49:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net