Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1ZsRF3070h76LnbGfnFgRquywY4.roa
File: 1ZsRF3070h76LnbGfnFgRquywY4.roa (raw, json)
Hash identifier: ebzlnKPguNkx4d8HmLoQ2lPiRV/gKwhgHYQvFw7+Hv8=
Subject key identifier: D5:9B:11:17:7D:3B:D2:1E:FA:2E:76:C6:7E:71:60:46:AB:B2:C1:8E
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 09345B68
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1ZsRF3070h76LnbGfnFgRquywY4.roa
Signing time: Sat 01 Jan 2022 16:00:58 +0000
ROA not before: Sat 01 Jan 2022 16:00:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 185.185.43.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154426216 (0x9345b68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d59b11177d3bd21efa2e76c67e716046abb2c18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:49:e0:b7:a9:a8:71:ec:ea:75:55:af:0a:b1:
c8:2d:e9:33:01:9e:c4:24:1a:3a:e9:b4:e6:c7:64:
29:a4:53:b4:6c:52:cc:9d:01:13:59:26:be:ec:e3:
82:25:fd:00:01:de:00:7d:b1:54:5a:b2:25:a1:a8:
0d:db:e3:6a:41:07:be:8c:4e:e6:42:56:40:c2:bb:
0a:1e:bf:57:f0:f3:23:22:17:56:f1:dc:77:89:6b:
9c:08:2b:e4:d4:0f:c1:19:63:ae:29:53:a2:9a:af:
d3:db:40:43:0d:c7:66:b4:87:cc:2b:81:84:c5:e3:
ef:ea:f5:8f:24:5f:4a:94:07:84:88:81:3c:41:9f:
f7:e0:d6:b8:c9:eb:c7:c2:fc:e6:3a:a2:61:c1:c4:
e2:35:54:ac:ab:b3:3b:40:16:53:43:f3:ea:cf:af:
20:4e:80:10:64:56:aa:f0:de:d1:5f:91:52:20:26:
86:45:c3:e2:46:8b:a5:2f:b0:87:31:6e:73:5b:1d:
45:4b:0e:c5:c8:ae:6c:40:80:ef:8d:ff:21:75:95:
3e:e1:19:94:31:82:e0:65:aa:f3:9d:67:96:8f:e4:
75:00:99:a4:83:b1:6d:7c:02:9e:a1:17:b3:18:93:
31:bc:56:ec:6f:52:c1:42:4c:46:97:b9:df:b5:80:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:11:17:7D:3B:D2:1E:FA:2E:76:C6:7E:71:60:46:AB:B2:C1:8E
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1ZsRF3070h76LnbGfnFgRquywY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.162.0/24
185.185.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ec:d4:a0:f1:9c:4f:54:3b:6b:ca:47:59:83:52:b3:ae:8d:
f9:bd:42:03:f2:5e:cf:2b:8b:af:8b:bf:6e:e1:ba:26:86:2b:
50:66:aa:91:90:99:e1:dd:8a:be:13:59:32:ce:bb:16:5d:4e:
34:3b:84:8e:9a:6b:cd:73:13:b5:41:1a:ce:6a:b9:03:06:de:
50:d2:31:41:1d:ac:67:37:1a:08:88:ed:e5:29:40:19:d5:63:
54:86:f7:f6:aa:8e:93:73:41:bb:93:23:e4:e2:d4:b8:60:0e:
b9:a7:b1:33:42:b8:70:11:c5:99:08:11:ae:f5:bc:a2:f6:d9:
1d:b0:c8:61:c4:1d:b7:8c:74:06:6c:1e:04:81:29:a1:be:ba:
77:1c:1c:b9:2f:36:8c:3a:14:cc:8a:2c:a6:85:6e:7c:f3:70:
3f:dd:b0:4c:2b:bd:79:ea:a5:29:d0:97:08:86:c9:e6:69:3d:
a8:fd:ad:a8:9f:d9:51:0b:0a:00:67:a3:62:c5:7f:cc:b5:86:
14:0f:72:2c:64:dc:95:1c:57:36:21:6f:0d:19:73:63:88:fe:
ae:56:c7:ae:bf:ee:0f:9c:89:ef:2d:a1:2a:a9:2e:c3:2e:c6:
a7:ce:df:7a:52:23:d7:28:99:d1:30:1c:5f:9e:23:8f:42:84:
89:60:f6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org