Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/zXL-V6GX3dJlwa91PuowJ5kOdDI.roa
File: zXL-V6GX3dJlwa91PuowJ5kOdDI.roa (raw, json)
Hash identifier: 7VpbuKrAE2JMAWxeV4vmSTodS4AcCCLgc3Go9GY1lZg=
Subject key identifier: CD:72:FE:57:A1:97:DD:D2:65:C1:AF:75:3E:EA:30:27:99:0E:74:32
Certificate issuer: /CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Certificate serial: 0184AA13215D5D1C038A9AEA08A7C65F2CEE
Authority key identifier: AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/zXL-V6GX3dJlwa91PuowJ5kOdDI.roa
Signing time: Thu 24 Nov 2022 14:38:11 +0000
ROA not before: Thu 24 Nov 2022 14:38:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196876
IP address blocks: 193.105.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:13:21:5d:5d:1c:03:8a:9a:ea:08:a7:c6:5f:2c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7a4e5c431ff6c79e4f5bd1b46b05f9f44110ce
Validity
Not Before: Nov 24 14:38:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd72fe57a197ddd265c1af753eea3027990e7432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:d0:c3:02:35:ec:0a:f1:53:35:9c:59:9d:
6e:c9:23:01:ee:29:24:47:89:5f:9d:28:7e:4a:ef:
c0:da:41:77:bd:a8:08:72:18:8f:d0:c2:95:57:2b:
76:ab:cc:45:88:e5:19:9f:a8:b8:6f:4d:bc:ba:77:
c8:dd:2f:fa:a6:72:8d:7f:07:80:59:91:9f:ba:89:
52:71:56:50:66:49:05:05:b0:2f:fa:dd:75:79:31:
10:04:cf:75:a0:c9:1b:24:c6:2e:5d:7e:37:bd:be:
6d:e3:73:57:a5:f0:06:29:d4:f2:ed:9c:2d:d5:ef:
20:4c:b2:3a:80:87:cc:34:05:2d:4e:7c:9e:8b:2d:
aa:9e:68:92:c9:3f:07:61:16:78:78:a2:6e:1c:18:
d2:30:70:a3:16:55:e8:8b:41:f5:84:65:00:7f:0c:
e4:aa:4f:93:9a:82:ec:19:30:4f:a2:71:bd:f6:97:
26:52:3d:84:9c:04:e9:6a:9d:6e:07:13:d2:8c:32:
38:54:c0:d8:9d:ac:09:2e:e6:f4:9e:36:41:bd:81:
47:4e:b1:19:73:9d:2c:7d:d9:d7:61:7b:d2:f1:27:
3d:49:88:39:7f:ce:1f:e2:ab:7e:17:11:09:9f:02:
f1:da:fc:a5:7f:92:93:29:89:75:e9:d2:b8:c3:7a:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:FE:57:A1:97:DD:D2:65:C1:AF:75:3E:EA:30:27:99:0E:74:32
X509v3 Authority Key Identifier:
keyid:AC:7A:4E:5C:43:1F:F6:C7:9E:4F:5B:D1:B4:6B:05:F9:F4:41:10:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHpOXEMf9seeT1vRtGsF-fRBEM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/zXL-V6GX3dJlwa91PuowJ5kOdDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c88d50-923b-4853-909c-f4efd177e9d0/1/rHpOXEMf9seeT1vRtGsF-fRBEM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e1:65:55:2b:38:ed:18:0f:03:e6:44:e6:1f:85:0e:fc:f3:
c5:e5:ef:0a:37:69:03:5b:b5:b3:02:7a:fc:53:3a:c2:6e:50:
8e:5e:3d:97:10:40:31:f0:fe:e7:bf:21:0a:5b:70:70:c9:74:
ae:5e:6d:7b:61:1a:5a:7f:cb:be:21:54:9c:5b:b8:1e:9e:c7:
a2:a0:9c:7a:2a:be:31:a2:0c:2d:eb:3d:9a:22:b1:ec:c3:35:
13:9f:92:26:73:a5:e5:7d:e2:1b:ae:77:93:67:b8:93:2c:0a:
9f:dc:86:4f:a1:a0:f2:83:90:7b:b9:04:a9:2d:6a:d7:78:9b:
46:57:d2:e7:31:9c:b8:c6:6e:e8:17:bc:1c:f6:6b:2b:13:88:
30:b9:96:f1:bf:cf:8c:c3:8e:18:aa:56:94:87:f8:04:8f:0e:
1a:ad:c0:79:6d:e4:28:49:0e:de:6d:56:e4:92:11:d9:39:5a:
b2:17:e0:f5:9d:dc:f8:e9:ab:2f:be:df:b2:5c:47:af:d0:70:
b9:d9:71:83:9f:70:51:78:fd:3f:1f:4a:74:43:00:c7:50:63:
d6:f3:ab:9b:c9:5a:66:91:c4:77:1d:ba:1b:f9:73:bc:d7:64:
e2:8e:c1:dc:17:d3:a3:ee:79:a5:96:a9:c4:49:ad:3f:4d:be:
b3:6d:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:37 2023 by rpki-client on console.sobornost.net