Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/ZIQpRfqLZJf7uIF1Prs2zoDg-Gs.roa
File: ZIQpRfqLZJf7uIF1Prs2zoDg-Gs.roa (raw, json)
Hash identifier: 85bdzrGT1BCUDMczw/ngy7ZnhOPa4TaP9NnPJPh/8ow=
Subject key identifier: 64:84:29:45:FA:8B:64:97:FB:B8:81:75:3E:BB:36:CE:80:E0:F8:6B
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 01854D4F02A3EFA70D2240BB0DC8CEDD029D
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/ZIQpRfqLZJf7uIF1Prs2zoDg-Gs.roa
Signing time: Mon 26 Dec 2022 07:21:41 +0000
ROA not before: Mon 26 Dec 2022 07:21:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30860
IP address blocks: 185.233.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:4f:02:a3:ef:a7:0d:22:40:bb:0d:c8:ce:dd:02:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Dec 26 07:21:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64842945fa8b6497fbb881753ebb36ce80e0f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:11:e0:9c:80:55:23:ec:3b:a1:60:96:67:
7c:f2:0b:ba:c6:43:37:7f:f8:fe:57:20:97:cf:98:
f7:f7:dd:b1:54:03:c6:7c:16:1f:bd:66:19:74:d4:
96:42:cf:dd:59:1f:0e:b2:12:28:ed:9b:1d:19:96:
fd:74:b9:c0:71:13:5f:ab:fc:9d:43:2d:c6:14:86:
0d:53:7e:7a:75:65:52:b2:e8:46:cf:dd:ad:15:dc:
e5:cb:7f:88:64:29:2f:7f:ba:9e:7d:f3:b5:82:05:
f2:ea:1f:9c:9c:81:5e:f0:41:cd:7c:31:fb:03:db:
4a:6b:07:9a:88:f1:d2:33:c9:44:74:34:62:1c:61:
eb:2c:59:7e:db:74:14:93:97:b9:30:37:cc:d0:16:
16:2d:a5:39:24:37:e9:1d:7e:82:44:2e:a6:e7:4e:
93:52:cf:1d:79:da:e2:a3:91:1e:15:5a:f5:a4:2b:
40:e2:19:33:c4:e5:53:ce:d5:6f:92:3a:17:9a:d5:
e8:a2:b1:c8:38:11:7c:58:6c:19:4a:c4:08:b4:87:
11:7e:68:11:f7:d7:1d:37:fb:7a:d6:7f:35:63:e4:
c6:58:d3:75:62:96:15:f6:99:8b:c2:00:f1:e4:ff:
72:e8:ed:02:36:4c:9a:42:36:8a:af:00:ed:23:cb:
d2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:84:29:45:FA:8B:64:97:FB:B8:81:75:3E:BB:36:CE:80:E0:F8:6B
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/ZIQpRfqLZJf7uIF1Prs2zoDg-Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.185.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:80:2b:7c:6f:2c:b1:8b:20:fb:87:2a:f8:c7:40:09:80:b4:
1e:65:db:53:2d:3f:4d:23:24:f1:57:c0:8e:04:48:18:1c:ce:
ca:85:d9:86:68:23:bc:d1:89:41:ac:3b:df:7e:34:19:80:94:
11:7d:c9:b4:fe:99:99:8b:85:49:4b:bf:9b:19:4e:6d:5b:8d:
90:87:01:29:0e:05:46:d2:6f:3e:6b:7d:2b:77:1e:cb:37:73:
b6:65:e0:f9:08:94:d2:03:93:4d:24:85:a7:af:dd:33:54:2c:
a7:d8:b4:0c:6e:f7:a7:c8:ac:52:50:60:ce:3f:40:d9:79:85:
0d:fe:f7:db:52:11:8b:6c:fa:0d:c8:f3:0c:e4:f1:00:05:17:
8e:9b:fd:fd:b9:6d:a8:d0:71:32:dd:ed:2e:e1:fe:8c:23:39:
8c:53:ba:b6:af:63:8e:62:f0:af:46:b0:ac:05:ec:83:f5:d8:
f0:b4:ad:c5:32:11:c1:82:d4:44:04:47:ac:4a:38:de:3c:e1:
f0:2d:9f:7c:6b:e2:c2:05:36:03:ea:8e:3f:21:cd:05:ad:02:
1f:2a:66:b7:cc:44:82:9d:c5:42:d7:76:53:b2:ae:08:f1:7e:
d2:31:32:bc:ae:ea:c7:ae:0b:53:e2:e4:14:7a:cb:97:52:71:
f4:db:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org