Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zXu1_1F0UmTRQ0zVIcjgZUyhmBk.roa
File: zXu1_1F0UmTRQ0zVIcjgZUyhmBk.roa (raw, json)
Hash identifier: Y0ViLM0PBwqfC5j/6ZM5sOCpt+g/q7TNE/eeF6MJSO4=
Subject key identifier: CD:7B:B5:FF:51:74:52:64:D1:43:4C:D5:21:C8:E0:65:4C:A1:98:19
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0A313FAD
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zXu1_1F0UmTRQ0zVIcjgZUyhmBk.roa
Signing time: Thu 07 Apr 2022 11:32:12 +0000
ROA not before: Thu 07 Apr 2022 11:32:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.185.40.0/22 maxlen: 24
193.31.30.0/24 maxlen: 24
2a0b:7080:20::/44 maxlen: 48
2a0b:b86::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170999725 (0xa313fad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 7 11:32:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd7bb5ff51745264d1434cd521c8e0654ca19819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:f7:55:c2:06:d8:e9:88:bd:a5:56:bb:f4:
33:f5:fa:9e:fe:4a:50:ed:2b:7b:7c:20:74:8c:c1:
52:f7:55:fa:d3:46:bf:d3:04:6c:9d:79:5b:e8:ce:
2a:81:45:c7:09:73:ed:46:37:7b:0f:93:7f:15:b5:
14:c5:b0:1c:2e:4d:ef:8d:05:ad:35:50:2a:3e:e1:
f4:69:6a:02:fc:e5:09:76:03:ce:33:57:a3:44:21:
e5:62:e3:d7:ab:f1:11:21:1e:f6:4d:f4:39:2d:5d:
23:54:5e:61:70:e1:7a:26:ea:e4:a0:b2:f9:98:e2:
df:e3:b2:c9:ce:ad:01:d6:05:10:c3:7f:dc:f0:58:
23:88:43:01:64:67:81:c2:8a:14:d0:92:82:e5:e0:
19:ff:c4:f8:25:1a:4d:76:6a:70:f0:8f:7a:d9:fa:
82:f6:94:a7:b7:f9:80:2d:8e:b9:a2:ad:34:d0:c8:
7c:86:10:a0:a9:fb:ea:fb:e8:d5:4f:1f:35:96:2e:
dc:4b:1c:46:c1:64:b5:fc:2f:9b:c6:7f:47:ad:c9:
19:34:a4:c4:5b:bc:90:47:db:84:a1:88:a6:1b:b4:
14:8d:c4:f2:dd:63:ce:7c:0f:4d:8e:31:15:43:55:
95:07:6a:a8:8e:af:e9:7f:67:ec:85:66:f7:b0:22:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7B:B5:FF:51:74:52:64:D1:43:4C:D5:21:C8:E0:65:4C:A1:98:19
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zXu1_1F0UmTRQ0zVIcjgZUyhmBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.40.0/22
193.31.30.0/24
IPv6:
2a0b:b86::/34
2a0b:7080:20::/44
Signature Algorithm: sha256WithRSAEncryption
35:45:eb:d9:3c:4d:cc:e3:cc:71:56:aa:af:62:96:56:3d:df:
b6:b9:96:0f:30:d4:94:10:aa:04:22:2d:f8:fc:c3:47:10:a9:
3b:64:33:89:36:fd:76:23:a4:68:95:d3:93:e8:e9:ba:74:1d:
3f:99:aa:c4:2d:9a:de:96:dc:e8:c3:68:c1:4a:39:09:73:0e:
f9:bd:6c:d1:50:43:34:15:33:16:7a:d5:88:ca:c6:97:ad:6c:
8e:75:74:eb:56:84:7e:8c:60:e1:b3:a9:1c:8d:20:cd:bc:b2:
6d:42:1a:ba:30:80:49:e8:e2:60:08:b0:6e:86:6b:30:13:66:
da:6a:76:77:43:b3:fc:fd:9e:25:1f:51:db:e2:64:83:ac:74:
7c:e0:ba:69:50:21:4a:d2:18:cf:42:36:f0:63:19:13:51:09:
6b:d7:fd:15:ed:64:bd:5d:82:d1:27:6d:29:19:4e:a6:a2:00:
3f:f7:a0:3b:f0:2d:37:ac:51:97:4b:f4:e3:1b:66:4c:44:c8:
8b:4e:54:86:09:eb:52:e4:d6:c1:7b:8e:f7:77:28:52:d1:b0:
25:42:e8:1c:a6:6b:ed:40:6d:42:59:03:11:4b:b2:86:64:ce:
9a:27:96:38:71:2c:9a:cc:92:84:47:bb:07:42:bc:20:b0:3a:
2b:1e:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org