Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/pZCJM-UKlggcyqVIVJikROYswro.roa
File: pZCJM-UKlggcyqVIVJikROYswro.roa (raw, json)
Hash identifier: 60JJODflqT/1hpovd8PmaCjbFCejHbluBfVyPMkKnQs=
Subject key identifier: A5:90:89:33:E5:0A:96:08:1C:CA:A5:48:54:98:A4:44:E6:2C:C2:BA
Certificate issuer: /CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Certificate serial: 60F514
Authority key identifier: 3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/pZCJM-UKlggcyqVIVJikROYswro.roa
Signing time: Sat 01 Jan 2022 01:52:16 +0000
ROA not before: Sat 01 Jan 2022 01:52:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24892
IP address blocks: 185.107.49.0/24 maxlen: 24
185.107.50.0/24 maxlen: 24
185.107.48.0/24 maxlen: 24
185.107.51.0/24 maxlen: 24
185.107.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6354196 (0x60f514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db8a2adddb002850854996a94b72b87f4a7b30f
Validity
Not Before: Jan 1 01:52:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5908933e50a96081ccaa5485498a444e62cc2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:8d:13:77:3b:ea:77:a6:78:57:a5:33:79:
7c:3c:8e:48:30:bd:8b:b2:92:cb:87:29:05:39:f5:
56:c6:5c:a8:67:32:82:6e:0f:ba:89:d1:0e:95:3e:
0b:65:fe:9f:e9:3f:8f:ed:2b:cb:c2:21:13:ed:b0:
30:8c:ab:54:a6:6a:e4:45:62:c4:71:bd:b6:4d:45:
60:23:d1:5f:50:00:ab:44:c4:d1:d7:e2:05:47:d6:
c1:15:c4:85:64:ce:ee:75:a4:48:44:d1:f2:c2:80:
13:f4:c3:45:9b:81:7e:97:14:58:fd:ba:5c:7f:75:
9d:3b:ba:77:62:ed:b0:bb:3b:a1:99:48:6e:d5:e0:
c8:15:e5:2d:69:12:b5:60:a1:f4:35:d6:41:ce:58:
49:1c:38:ba:89:80:a7:8e:b1:c7:49:26:00:8b:56:
26:de:41:a1:c7:88:11:34:ce:e8:48:09:89:7b:fb:
e8:7c:a9:ea:f8:26:2b:58:05:06:8b:35:6c:22:f9:
b1:05:23:de:4b:d8:bc:6e:dc:f4:13:49:b7:b1:0a:
57:5a:69:3a:bc:81:21:40:6b:89:f6:7d:7f:22:1b:
35:0e:73:b3:8c:54:90:54:b4:0e:ef:c4:fc:e7:40:
a8:b0:0a:f3:b1:17:03:e3:ab:e5:5b:ff:72:79:87:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:90:89:33:E5:0A:96:08:1C:CA:A5:48:54:98:A4:44:E6:2C:C2:BA
X509v3 Authority Key Identifier:
keyid:3D:B8:A2:AD:DD:B0:02:85:08:54:99:6A:94:B7:2B:87:F4:A7:B3:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pbiird2wAoUIVJlqlLcrh_Snsw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/pZCJM-UKlggcyqVIVJikROYswro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2d43c2-3b2e-4f2e-a6ad-a0a72a733c02/1/Pbiird2wAoUIVJlqlLcrh_Snsw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.48.0/22
Signature Algorithm: sha256WithRSAEncryption
23:20:ec:e9:d8:14:e4:c1:c6:ce:20:03:ae:7a:06:eb:a1:45:
7b:29:e9:de:b3:fd:05:f0:60:0f:f8:3d:61:0b:d6:75:f2:60:
21:86:36:27:b6:e2:1b:c6:7f:71:ac:e8:99:16:a6:56:a1:94:
db:60:3e:da:0a:55:d8:80:c4:74:8a:4c:5d:e3:b5:f4:69:62:
5e:aa:45:f3:24:26:9e:69:c3:a3:5f:23:48:92:0d:8c:52:aa:
45:bb:8f:a6:aa:b7:b0:ab:24:57:3e:d1:3a:91:a3:8e:4c:d4:
d5:6f:00:11:76:39:1e:ad:ba:14:fb:47:46:e9:10:7a:25:07:
07:b6:4c:ab:00:7c:6d:4b:5e:04:87:b9:c8:69:d4:fd:dc:3d:
d8:b3:3c:90:54:61:65:49:1f:54:56:09:87:5d:de:7c:31:c4:
9c:72:cb:03:a9:2f:4c:19:e1:f9:a1:30:15:0a:b8:e5:9a:8b:
60:3a:15:d8:e3:67:ff:a4:2e:d9:26:97:f9:e2:b0:8e:42:9f:
1e:99:4c:dd:c9:c0:cd:e5:96:ed:4f:05:27:5f:25:24:ec:ae:
10:ab:33:f2:14:1e:95:e0:61:db:05:95:4d:3f:c3:07:d8:87:
3f:69:f5:e3:9f:93:d8:87:cb:be:d6:a8:aa:b2:74:31:e5:11:
28:74:ad:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:13 2024 by rpki-client on console-ams.rpki-client.org