Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/ZdbE3zVoLe3W3OVinrFoiBpQFW8.roa
File: ZdbE3zVoLe3W3OVinrFoiBpQFW8.roa (raw, json)
Hash identifier: cY7FziLCwkdDbBSuZH3MeSFMWhFEawky0v7jhni/J4E=
Subject key identifier: 65:D6:C4:DF:35:68:2D:ED:D6:DC:E5:62:9E:B1:68:88:1A:50:15:6F
Certificate issuer: /CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Certificate serial: 024B7102
Authority key identifier: 9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/ZdbE3zVoLe3W3OVinrFoiBpQFW8.roa
Signing time: Sat 01 Jan 2022 06:58:19 +0000
ROA not before: Sat 01 Jan 2022 06:58:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39142
IP address blocks: 193.17.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38498562 (0x24b7102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c83133a7e0593bb398eadb92758cbc92c9d65a5
Validity
Not Before: Jan 1 06:58:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65d6c4df35682dedd6dce5629eb168881a50156f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:30:c4:62:d5:ee:9f:af:41:fb:d4:ed:b8:91:
05:26:c7:22:9d:47:8f:c3:13:2c:ff:d5:8b:a7:d3:
9a:e9:25:77:f4:a0:87:44:59:84:0e:1b:09:7f:ea:
07:40:d4:fd:04:f4:db:cf:01:ca:e6:a6:89:e5:f4:
cd:6c:60:7a:2a:47:a9:26:90:0b:e0:e0:1d:05:e4:
fe:38:f0:aa:61:db:22:e5:b2:e7:f0:5f:f9:15:08:
98:6f:c3:11:31:04:9a:fa:31:75:c4:d7:e9:c1:5a:
0f:d0:f9:54:0a:58:b0:49:3a:c9:69:af:27:64:c0:
a2:85:d9:ce:f5:81:9d:4a:75:df:5f:7e:b7:0c:10:
7e:9f:dc:4e:90:3a:ff:40:e6:f3:1c:15:68:6e:f0:
44:0b:e3:31:d3:7d:fe:74:44:f6:64:be:78:a7:3d:
fa:46:f8:f9:b7:c6:ef:5c:1e:77:ad:40:c6:da:ee:
4a:e3:a2:93:8e:5b:ec:f8:74:50:c9:44:d5:52:67:
a4:7f:88:9e:0e:6d:1a:4e:f9:36:ce:e0:86:31:b5:
ca:6c:b0:d3:8c:61:49:22:69:34:78:b5:80:b0:ac:
16:34:bf:81:e9:07:a4:4f:d7:ca:06:12:b8:a6:0d:
5e:d2:aa:d7:16:3a:fe:06:8d:8f:5e:75:d3:e6:3f:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:C4:DF:35:68:2D:ED:D6:DC:E5:62:9E:B1:68:88:1A:50:15:6F
X509v3 Authority Key Identifier:
keyid:9C:83:13:3A:7E:05:93:BB:39:8E:AD:B9:27:58:CB:C9:2C:9D:65:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIMTOn4Fk7s5jq25J1jLySydZaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/ZdbE3zVoLe3W3OVinrFoiBpQFW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/eda15a-0423-46bd-b32a-52147aae0eb4/1/nIMTOn4Fk7s5jq25J1jLySydZaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c2:59:a2:86:70:42:f2:f9:cc:92:11:c1:0d:b6:e1:66:9c:
96:56:b2:b9:e1:6f:0d:90:42:26:8d:0f:7d:4a:78:c8:43:43:
f2:11:d6:42:10:b5:61:7c:9e:e9:28:02:bc:72:a5:a2:1c:62:
5a:53:aa:ac:aa:b9:af:ad:c8:d3:1d:89:08:2a:ab:3f:a4:88:
08:a4:bc:93:09:5a:c6:02:dc:21:16:48:0b:eb:d7:96:4a:20:
00:56:82:d8:0b:af:27:f9:c4:15:b6:03:b9:a1:be:09:2c:f9:
2a:46:fa:5c:cd:54:37:63:a5:c9:b5:35:92:8b:66:a9:a1:81:
db:9a:37:6b:13:00:43:a5:ed:95:2b:6d:25:3f:d0:64:64:6b:
e5:20:a4:89:c4:47:ab:52:b2:09:84:0a:48:67:95:fc:10:b5:
27:e3:04:90:5b:93:b7:f7:0d:b8:67:2c:e3:13:d9:69:f8:6f:
c3:37:6d:0f:77:7d:7b:e9:d3:e0:a3:7e:c1:85:13:db:64:ab:
63:98:8d:55:b5:54:d3:d0:9b:0d:1f:c5:cc:34:25:f0:40:d9:
f8:8a:73:22:ae:a7:ba:c1:d1:de:b9:58:fc:46:c7:a5:40:fd:
39:a7:19:44:65:2c:ce:1d:c2:10:1c:4f:c4:f3:f5:b2:1e:3f:
95:56:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:09 2023 by rpki-client on console.sobornost.net