Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/ZxeKUZHhj7OAoxGvCsLHTRx2E5M.roa
File: ZxeKUZHhj7OAoxGvCsLHTRx2E5M.roa (raw, json)
Hash identifier: NmHgw1keDpBmNHgzuxvoTnuC6TwdRJ5kaBx8zQ9Y4Rw=
Subject key identifier: 67:17:8A:51:91:E1:8F:B3:80:A3:11:AF:0A:C2:C7:4D:1C:76:13:93
Certificate issuer: /CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Certificate serial: 37E65E20
Authority key identifier: 62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/ZxeKUZHhj7OAoxGvCsLHTRx2E5M.roa
Signing time: Wed 22 Jun 2022 20:26:32 +0000
ROA not before: Wed 22 Jun 2022 20:26:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56616
IP address blocks: 185.116.22.0/23 maxlen: 23
185.116.20.0/22 maxlen: 22
185.116.20.0/23 maxlen: 23
31.7.88.0/23 maxlen: 23
31.7.90.0/23 maxlen: 23
2a0a:d340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937844256 (0x37e65e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6264318c1aaa7ca0603155a883d43926ef97e87c
Validity
Not Before: Jun 22 20:26:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67178a5191e18fb380a311af0ac2c74d1c761393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:75:a9:14:27:1b:ed:6f:c1:f5:49:70:4a:
07:fd:b0:a7:db:7d:9a:ca:b2:12:52:4b:ff:dd:b5:
09:fa:f4:1a:75:de:55:96:4a:66:92:67:5e:ad:04:
b0:c1:ab:5d:83:2e:bf:fb:a0:fb:43:8d:5c:ea:83:
7f:b8:60:48:19:03:ad:8d:f3:5c:c7:6f:5f:38:fd:
7a:15:d7:12:e8:5e:1f:36:81:93:68:c7:bb:59:84:
6f:bc:61:f2:53:8a:bc:9e:7b:79:0c:b9:6f:d5:09:
77:f4:93:83:f8:d2:37:43:98:2d:6d:cb:c3:bf:9a:
5e:44:ed:01:28:b2:3e:64:7a:93:ba:08:77:c8:36:
2d:da:b9:a9:de:a5:c1:cf:87:5f:8f:c4:33:96:8f:
b6:08:d6:a3:4b:ee:1d:d5:51:ad:ad:f6:fa:ab:c4:
1f:46:39:2f:c3:a5:31:57:8b:77:91:af:a1:f8:fe:
dd:21:98:a8:8a:aa:ad:fb:8f:ca:6a:24:0f:cc:fe:
5a:53:fa:3e:03:99:62:d8:28:b2:07:2d:d5:4b:67:
ce:1d:c9:be:b6:50:5b:dc:48:18:97:be:58:35:65:
72:ac:02:92:39:29:83:a1:9a:24:c0:2b:d8:05:b0:
4c:f1:36:37:d6:e1:df:fa:54:99:29:1e:48:2a:84:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:8A:51:91:E1:8F:B3:80:A3:11:AF:0A:C2:C7:4D:1C:76:13:93
X509v3 Authority Key Identifier:
keyid:62:64:31:8C:1A:AA:7C:A0:60:31:55:A8:83:D4:39:26:EF:97:E8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/ZxeKUZHhj7OAoxGvCsLHTRx2E5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6b642-872b-4b7d-bd6a-b91a27055204/1/YmQxjBqqfKBgMVWog9Q5Ju-X6Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.88.0/22
185.116.20.0/22
IPv6:
2a0a:d340::/29
Signature Algorithm: sha256WithRSAEncryption
03:62:fb:bc:14:35:30:89:66:c9:fa:45:42:a2:5c:f9:31:ae:
12:db:18:03:d4:5e:ab:c2:2b:88:4b:50:d6:0e:fd:8d:22:b2:
d1:68:f8:59:6f:ce:32:02:84:87:43:40:47:40:20:7f:89:00:
08:28:23:70:95:df:50:fd:df:a4:7c:e4:99:e1:3d:43:8c:51:
4d:a5:65:5f:15:59:cb:49:d8:23:44:95:7c:24:7e:ec:4c:56:
f2:5e:3a:9e:e2:fb:78:3e:e7:ca:d9:f3:40:8f:77:2b:b0:c4:
e2:3f:98:25:3a:e7:1c:f3:b2:37:ab:82:a9:1c:12:51:37:84:
fd:14:4d:18:cc:3f:40:ee:17:5e:59:fe:8c:a1:31:3e:19:2b:
9f:5b:a7:ed:e3:41:8f:f2:38:80:a8:e8:25:46:70:ff:38:c8:
e4:f7:63:8a:2d:1b:dc:b0:13:78:f7:69:8a:a5:11:b2:0b:39:
a5:44:e9:53:76:f9:b2:20:0d:45:d1:f1:75:e8:75:f6:f3:4b:
78:c7:1e:f1:44:d3:1e:07:5c:da:c5:c9:f9:71:cc:d0:0d:09:
7a:51:f0:6e:b5:50:77:c7:ac:b4:61:77:6f:df:3f:96:cf:44:
dd:bf:0b:3a:39:3a:6a:f2:55:99:6e:a9:da:26:95:3e:6c:b5:
0c:71:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:11 2024 by rpki-client on console-fra.rpki-client.org