Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/ZvCRfoucTCKjIfqe6k21OY3RWLo.roa
File: ZvCRfoucTCKjIfqe6k21OY3RWLo.roa (raw, json)
Hash identifier: ft/yGpiG9d0gbjKF/xOduOarvRzWockG2OP+2vnJuo0=
Subject key identifier: 66:F0:91:7E:8B:9C:4C:22:A3:21:FA:9E:EA:4D:B5:39:8D:D1:58:BA
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 10D28628
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/ZvCRfoucTCKjIfqe6k21OY3RWLo.roa
Signing time: Sat 01 Jan 2022 12:56:59 +0000
ROA not before: Sat 01 Jan 2022 12:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51815
IP address blocks: 185.152.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282232360 (0x10d28628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jan 1 12:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66f0917e8b9c4c22a321fa9eea4db5398dd158ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:fd:b0:ce:1f:f8:14:ae:21:43:f2:e9:f8:
dc:bc:58:c1:71:47:ed:eb:98:4b:9c:fb:5d:eb:e5:
4b:af:67:b3:fc:83:84:97:98:74:e9:c7:97:18:5e:
2b:60:e3:53:07:93:e4:3c:88:19:90:be:c1:ec:b8:
e3:e2:f7:8e:67:bd:20:cf:75:44:09:b3:51:37:08:
a9:f8:7a:25:ab:fc:d0:31:5b:cf:06:54:b4:5d:9d:
6e:cd:d5:a0:63:2e:0c:52:db:f0:84:3a:ce:5a:c4:
48:13:a9:7e:43:fc:d9:c4:ef:a8:d8:9d:88:b1:e0:
ee:8c:7f:ca:5a:25:ac:0d:6b:78:45:26:e4:87:51:
11:4d:53:66:3c:5c:0e:4a:48:cf:b3:bc:48:96:c2:
5a:8a:b3:6b:45:5c:e9:93:1e:45:a4:4d:82:c1:1e:
ae:5d:d5:6b:94:e9:18:55:3a:80:1b:45:62:84:a1:
a8:5f:4d:d2:cd:39:fc:02:b4:6d:5e:e6:dc:ce:dc:
34:7f:2f:7c:d9:b0:e1:5d:ff:f1:70:b6:9f:17:95:
f8:13:50:51:25:f3:e7:37:94:3d:80:08:cc:49:10:
90:df:ac:81:c1:20:97:c4:d9:57:53:7a:7c:d9:7f:
df:29:c2:ca:bb:22:dc:95:53:71:28:e8:b1:a3:a1:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:91:7E:8B:9C:4C:22:A3:21:FA:9E:EA:4D:B5:39:8D:D1:58:BA
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/ZvCRfoucTCKjIfqe6k21OY3RWLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a4:34:c2:32:06:e7:40:13:71:14:43:f0:df:4a:2d:79:a2:
a6:b6:8e:f4:5a:8c:91:fa:db:ce:af:59:cd:8d:95:45:87:bf:
4d:a6:97:1e:92:63:c7:71:81:94:47:0a:76:15:ef:5f:9a:08:
d0:5b:76:36:ba:f4:9c:33:dd:34:39:1a:c9:20:a3:a8:3d:4e:
9c:03:6b:e4:d9:cf:3e:55:7b:0f:8e:ab:fd:fd:a2:6a:b1:a3:
45:af:f2:a5:67:50:a0:f3:27:3a:e0:56:5a:87:b6:f9:86:10:
46:b2:aa:cb:26:d7:cd:18:88:39:10:37:7b:d8:bf:8b:1b:bb:
aa:f7:6a:26:0a:b6:31:aa:e3:9b:8a:d0:53:a2:b4:d2:33:64:
3f:11:0d:b2:68:7d:f9:b3:25:ad:57:06:80:e1:7c:cf:81:d8:
91:da:e5:8a:6b:bb:31:51:01:7d:50:3c:67:c9:e4:44:1e:1f:
ee:1e:12:1d:3d:cd:c9:16:5f:09:54:89:18:44:ae:c6:71:bb:
f5:24:68:7a:e0:f8:a1:c2:97:92:59:71:42:95:0c:ea:38:b5:
dc:2f:13:bd:b6:c8:43:f2:76:4b:af:6c:40:c9:65:65:4d:cb:
59:e1:de:2a:4e:e5:bc:27:67:63:60:ab:f5:da:28:a0:7d:6c:
7a:8b:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:48 2024 by rpki-client on console-ams.rpki-client.org