Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/zx1aCjRXZuQekiDFqio4x6XBsz0.roa
File: zx1aCjRXZuQekiDFqio4x6XBsz0.roa (raw, json)
Hash identifier: uEYbUkwKywOqY8X+yN6P8LOJz+4UkOUizdOwfOo6RC4=
Subject key identifier: CF:1D:5A:0A:34:57:66:E4:1E:92:20:C5:AA:2A:38:C7:A5:C1:B3:3D
Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial: 37BCE58D
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/zx1aCjRXZuQekiDFqio4x6XBsz0.roa
Signing time: Sat 01 Jan 2022 12:06:55 +0000
ROA not before: Sat 01 Jan 2022 12:06:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62031
IP address blocks: 195.82.176.0/24 maxlen: 24
195.82.178.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935126413 (0x37bce58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Validity
Not Before: Jan 1 12:06:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf1d5a0a345766e41e9220c5aa2a38c7a5c1b33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:ef:5b:43:6a:63:11:38:7c:08:02:83:bb:
6e:5d:ef:43:ed:a3:5e:26:45:58:28:98:3d:d4:64:
cf:55:7b:42:7e:e8:73:9b:fe:7f:f6:b3:ac:cf:0d:
df:dd:7c:17:cf:4f:72:d7:c4:cd:86:e0:21:2c:b1:
f4:49:60:8f:64:17:76:d8:86:1e:29:6f:be:f9:07:
cd:45:60:0d:e2:89:0e:cc:c1:9f:a1:6a:28:fc:1f:
da:98:7d:0a:c5:83:ad:ef:86:9b:2b:b8:54:4f:7f:
89:71:84:8a:60:03:6e:5d:0f:19:68:2f:4a:ec:2a:
0c:05:d9:60:8a:9e:6f:87:5e:8e:d1:d0:cd:28:ac:
34:82:6a:d0:9d:70:57:64:3d:1a:64:57:7d:21:c4:
6b:c1:9f:56:65:6f:20:71:e3:8d:d5:e8:89:da:31:
99:6a:fa:ca:bf:c1:56:e0:10:b3:01:e7:dc:09:f9:
9f:6b:97:2d:45:ef:99:3d:e6:93:c6:11:93:8a:8e:
ba:4d:3e:04:96:d0:96:39:cb:ee:ff:bc:cb:df:bd:
85:95:07:07:0b:d8:76:36:06:49:3b:e7:b4:9a:13:
25:5a:1f:6c:c3:82:a1:55:5e:23:48:23:0f:1d:33:
28:7f:cb:33:4c:1c:45:ee:86:c6:bf:43:97:2b:43:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:5A:0A:34:57:66:E4:1E:92:20:C5:AA:2A:38:C7:A5:C1:B3:3D
X509v3 Authority Key Identifier:
keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/zx1aCjRXZuQekiDFqio4x6XBsz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.82.176.0/24
195.82.178.0/23
Signature Algorithm: sha256WithRSAEncryption
35:a6:2a:a2:8f:69:19:ea:4a:d1:16:d5:8a:35:71:54:4f:7a:
34:97:d1:f5:91:6a:98:a8:3f:9e:20:a4:08:f7:86:1c:75:fa:
7c:43:84:73:ef:43:34:98:5b:b1:08:d5:ef:7a:0a:a2:9c:e7:
ce:a3:2f:c2:2a:b5:98:e9:32:13:20:a4:a9:85:d2:39:27:67:
5b:4b:f8:46:83:ca:d4:e4:3e:67:46:b7:99:bf:6c:16:3f:42:
95:34:2e:00:6c:c7:df:9b:33:6b:b9:da:20:4e:5b:40:c0:16:
22:a6:5a:3f:e6:3e:6c:f3:b6:91:c7:87:b7:98:29:0b:f4:76:
b6:46:43:9a:25:82:69:41:a8:34:2c:ef:54:72:d9:27:ad:3c:
85:89:c3:65:cb:e8:d1:bb:8a:f6:69:35:17:d1:fd:3f:a6:0c:
28:f0:ab:6f:a5:83:a6:66:8c:92:06:7b:63:13:60:e6:6f:28:
eb:f6:de:9f:f4:6d:e8:fc:85:2e:be:40:78:d3:67:15:0a:d8:
38:a1:82:9f:6d:ad:11:91:93:e3:63:86:5d:45:a3:18:57:43:
3f:ce:5b:59:1c:d5:2e:22:7c:58:2f:bb:d8:fe:d4:37:f3:fd:
19:15:37:3f:e6:0f:20:1e:a9:9e:64:42:79:75:53:57:cd:57:
26:91:25:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net