Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/zNCjlC_oQRUOqoCadsyj2fhmZfQ.roa
File: zNCjlC_oQRUOqoCadsyj2fhmZfQ.roa (raw, json)
Hash identifier: iZF5Ge+fMAQdCy+q6dOtf+aTnJo8mHLfr3v0ZvFYw8Y=
Subject key identifier: CC:D0:A3:94:2F:E8:41:15:0E:AA:80:9A:76:CC:A3:D9:F8:66:65:F4
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 0C0BE3EB
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/zNCjlC_oQRUOqoCadsyj2fhmZfQ.roa
Signing time: Sat 01 Jan 2022 08:53:24 +0000
ROA not before: Sat 01 Jan 2022 08:53:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203739
IP address blocks: 185.255.69.0/24 maxlen: 24
185.255.70.0/24 maxlen: 24
185.255.71.0/24 maxlen: 24
185.255.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202105835 (0xc0be3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Jan 1 08:53:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccd0a3942fe841150eaa809a76cca3d9f86665f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:c0:31:af:33:ac:5e:c8:3b:c7:02:62:6a:
9f:12:2b:95:04:85:fa:89:34:96:c5:3f:68:06:40:
d9:9b:81:dc:8c:38:77:d7:d5:01:09:79:1d:c9:bb:
cf:ec:13:76:60:b7:a0:4d:ae:a2:02:44:d9:1c:67:
66:70:6b:80:92:f2:15:af:fd:f7:f8:ae:2f:a2:37:
a1:f5:e5:fb:53:8c:78:f5:38:b1:85:1e:1d:61:20:
84:67:69:9b:2f:66:fa:99:4f:3e:55:3f:6d:5d:18:
e1:a6:ba:61:3d:52:ce:79:43:ca:95:9b:a3:bd:5c:
a2:48:5a:40:09:05:50:e8:de:83:2d:45:33:c7:a0:
0e:65:ae:6a:02:5b:ef:00:cf:6c:5b:fc:9d:73:b1:
42:64:0d:c1:fb:fb:78:9f:2f:93:94:52:88:98:6d:
bd:f1:70:e5:c2:2c:7c:30:68:b7:5e:d2:b3:84:af:
1a:18:bb:f6:68:2b:e9:07:61:4d:fd:c0:a9:5e:48:
6f:a8:1b:6d:85:a7:11:d4:10:09:b1:2c:2c:8b:a4:
8f:39:8c:cd:cd:3a:f5:c3:53:4a:7b:e2:cc:4f:dd:
81:66:c3:57:de:0d:9a:68:a3:ed:3c:53:cc:09:3c:
6b:2b:f8:f0:aa:ea:2d:85:5f:5b:99:06:53:3d:2e:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D0:A3:94:2F:E8:41:15:0E:AA:80:9A:76:CC:A3:D9:F8:66:65:F4
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/zNCjlC_oQRUOqoCadsyj2fhmZfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:3a:99:47:be:74:7a:71:f7:a3:55:76:87:cc:0c:3d:dd:e7:
3c:4d:2a:69:b5:eb:b8:be:e3:73:fa:9c:9c:a3:1a:be:0a:44:
02:56:3b:a7:c7:ff:04:fc:b9:80:b7:56:f2:a2:ab:c2:fb:70:
f4:55:3b:c6:68:27:89:f9:cc:3c:f9:7a:4b:ce:38:5a:89:04:
7a:ba:17:1f:4c:dc:21:9b:d2:d9:9d:e7:4d:c9:60:29:30:51:
99:96:16:22:63:d4:59:20:fa:4b:b9:9b:4c:d3:a9:4b:10:73:
e7:fa:2e:e7:69:1e:36:6d:ae:cf:80:de:bb:0d:d2:e8:c3:07:
be:5d:e5:6f:d5:be:10:b4:e0:cd:8b:0d:89:2c:f1:12:4b:08:
3d:cc:b2:25:88:4f:1a:4b:81:0d:a1:70:7e:ef:da:50:d6:6d:
59:7d:23:0a:aa:b1:21:45:ea:8f:11:0f:57:8d:ce:d4:a5:50:
76:89:25:c9:09:04:69:3f:2c:c4:9c:e6:64:87:71:63:27:b8:
bb:58:ec:c5:5e:64:0d:da:2d:80:c6:52:c4:e9:e7:ea:85:7d:
13:7e:38:b8:d1:d2:0b:58:3d:14:79:a4:0d:29:1f:df:6a:62:
fc:e3:7e:f3:7b:a6:35:6f:c0:6b:af:b3:a5:32:ca:86:d9:c6:
68:a8:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:44 2024 by rpki-client on console-fra.rpki-client.org