Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/zwBnGAy1RZQS9Prr--fA0ab9afc.roa
File: zwBnGAy1RZQS9Prr--fA0ab9afc.roa (raw, json)
Hash identifier: u1UZq/tJNzPL6CNaZtxeAfPUUJa3fCXMXHjLYhZQbTE=
Subject key identifier: CF:00:67:18:0C:B5:45:94:12:F4:FA:EB:FB:E7:C0:D1:A6:FD:69:F7
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 1E60E8
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/zwBnGAy1RZQS9Prr--fA0ab9afc.roa
Signing time: Thu 24 Mar 2022 21:26:32 +0000
ROA not before: Thu 24 Mar 2022 21:26:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201014
IP address blocks: 185.88.224.0/22 maxlen: 22
2a05:cf00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1990888 (0x1e60e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Mar 24 21:26:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf0067180cb5459412f4faebfbe7c0d1a6fd69f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:91:01:f1:1a:24:63:e1:63:a3:e9:14:6a:
cd:a4:bb:a5:11:f4:7e:9f:80:66:06:9d:16:29:be:
32:59:66:19:21:f5:cf:76:0f:94:7f:0a:90:ee:28:
a6:f8:c7:50:5e:00:8d:9d:43:51:89:ea:0f:fa:30:
c8:ff:79:83:c1:be:af:41:32:2b:23:88:da:00:77:
54:23:8b:2f:ac:4d:73:a1:0a:6d:c8:1e:fa:74:53:
90:0c:6e:b0:6e:05:75:43:09:14:1b:2e:77:57:6d:
33:6c:d6:b3:84:bf:d5:d9:dd:80:8a:e8:5a:77:d7:
81:d7:60:f9:b1:2c:de:03:33:1d:8e:4d:4c:d2:ad:
c9:60:34:85:06:51:62:3d:55:24:45:ac:ed:c6:9c:
95:eb:f4:97:ba:d0:11:a3:de:4f:32:8f:ff:fd:27:
51:f2:50:fa:c8:48:4b:68:2d:85:d4:a2:db:49:d3:
25:db:27:c8:25:df:c1:b4:6e:b2:21:1d:35:27:18:
e5:8a:ee:74:9f:ca:99:2c:23:a0:54:ac:20:4f:22:
7a:6c:b8:f1:ae:4d:08:f3:8a:82:5c:b6:70:a7:d8:
ca:cc:3f:09:b5:e3:ae:cc:9a:c4:70:a0:28:34:58:
5a:e9:5e:e4:5d:10:35:d9:cb:af:c0:b0:da:75:a8:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:67:18:0C:B5:45:94:12:F4:FA:EB:FB:E7:C0:D1:A6:FD:69:F7
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/zwBnGAy1RZQS9Prr--fA0ab9afc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.224.0/22
IPv6:
2a05:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
67:1c:4b:f5:bb:54:ee:fd:97:82:25:2a:72:94:87:2a:dd:2b:
dd:77:2c:c3:8d:86:79:dc:31:17:38:0f:e4:69:59:ce:94:ff:
02:31:6c:14:d9:dd:60:cb:ed:48:ff:f3:04:1c:f0:d8:6e:e1:
c4:fd:ce:c0:1c:d1:df:8c:33:96:dd:a6:57:ab:49:59:10:8a:
01:5c:2a:89:92:86:f4:17:c6:e1:e7:7f:c8:6c:7e:a8:a6:35:
8d:dc:21:6b:54:63:04:57:00:0a:45:aa:33:6a:52:00:ca:f6:
bf:44:d7:70:12:d9:ec:30:4c:b4:bc:6a:c3:e8:cc:c9:61:45:
c8:ba:2f:38:1a:d6:12:36:da:75:f1:98:c7:10:84:c7:ab:8c:
06:3f:43:42:ec:d5:79:f4:60:94:92:a0:82:ee:af:cd:32:ad:
c3:5b:09:a2:95:0f:a0:64:50:8b:77:04:38:cc:29:68:d5:cc:
c4:b9:57:70:08:66:5b:b8:7d:9f:8e:1a:a0:58:67:d6:49:b1:
d3:84:99:8e:65:45:9c:53:24:39:59:73:14:9d:b9:8e:ee:29:
55:da:f8:88:6d:ab:fa:4c:a8:82:15:dd:b0:8d:fb:d5:ec:05:
44:42:32:eb:97:e6:31:8f:59:72:f5:4d:88:1b:58:42:19:2b:
76:d3:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:12 2024 by rpki-client on console-ams.rpki-client.org