Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zzcqfzY9pBxnBqLfjDyCa6k9IZo.roa
File: zzcqfzY9pBxnBqLfjDyCa6k9IZo.roa (raw, json)
Hash identifier: MDAUXB3o/gDSwMKGmI1UCzWUOnY8fTIPv5fLa49dAJo=
Subject key identifier: CF:37:2A:7F:36:3D:A4:1C:67:06:A2:DF:8C:3C:82:6B:A9:3D:21:9A
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 08FCC9B9
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zzcqfzY9pBxnBqLfjDyCa6k9IZo.roa
Signing time: Sat 01 Jan 2022 16:00:22 +0000
ROA not before: Sat 01 Jan 2022 16:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 78.108.216.0/24 maxlen: 24
85.202.163.0/24 maxlen: 24
185.234.72.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150784441 (0x8fcc9b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 16:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf372a7f363da41c6706a2df8c3c826ba93d219a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:e3:b3:96:ec:66:f3:26:c7:50:5a:4b:0b:
0a:7f:f8:77:b5:fc:7a:28:e5:f2:0d:7b:50:de:6f:
32:16:b8:ce:d1:5f:a8:7a:29:41:5b:c3:7e:ab:da:
d6:ce:33:e7:2d:b6:37:99:63:a4:0d:52:78:19:93:
13:72:85:bb:d6:61:ed:2b:1f:5d:15:12:06:f0:06:
e0:6a:0a:86:6c:e1:84:e0:ed:40:19:e1:f6:4c:ee:
51:57:6e:5c:e5:ea:6e:a0:bd:e3:a4:28:e7:66:9f:
16:29:4b:25:b9:2a:d4:ab:94:b8:71:f8:98:3e:0a:
22:75:9a:ab:3c:ab:d1:f9:c1:65:37:f5:fe:a1:5f:
45:1f:ee:d1:79:79:ba:a9:29:2f:5d:d3:25:c6:2e:
00:31:85:5b:23:2a:31:3e:41:64:4f:6a:65:4a:ec:
01:03:44:c7:c6:52:97:6c:f4:09:0f:28:db:fc:67:
94:80:68:98:0f:fd:47:ef:d5:c4:34:bf:5d:7a:ad:
a4:ea:b0:fa:f1:47:86:2e:ec:02:e8:64:34:99:30:
ce:e9:72:da:cd:30:06:59:d4:6a:98:12:b4:fa:09:
76:d5:4f:d9:5e:51:3a:e9:77:c6:53:9d:af:b3:2a:
83:23:5e:67:84:90:d0:22:9f:92:31:18:4b:d5:04:
9c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:37:2A:7F:36:3D:A4:1C:67:06:A2:DF:8C:3C:82:6B:A9:3D:21:9A
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/zzcqfzY9pBxnBqLfjDyCa6k9IZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.216.0/24
85.202.163.0/24
185.234.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b8:12:e6:91:4b:0c:98:ad:ea:c9:eb:78:c8:67:a7:96:51:
fd:be:04:47:4b:0b:f8:bc:e4:8f:b7:9a:53:35:dc:a5:c4:53:
19:5d:39:33:a3:ba:70:62:f6:05:c7:fc:79:6b:3f:7b:25:83:
9e:93:5f:63:84:2b:8d:3e:d8:60:3b:f7:3a:c5:ef:b5:30:63:
08:7a:f5:da:24:89:59:3f:b5:3a:db:2e:2d:fa:aa:8d:bf:2b:
17:8e:be:54:72:24:80:61:8a:ad:f8:a9:eb:06:7f:3d:23:ce:
bd:b3:4e:fa:f7:f4:10:2e:07:db:8b:ed:b5:9b:59:91:da:4b:
a2:f9:36:2c:3b:8e:2d:e1:06:2f:4f:b0:f4:6b:99:00:d7:f4:
f9:b7:94:24:a8:7b:1a:88:e1:d1:90:ef:f3:93:75:8b:00:b3:
6d:f8:4c:45:02:46:d5:16:b3:20:b2:d5:e4:e0:14:03:24:9f:
90:4c:96:eb:23:ee:b6:a1:00:00:97:a4:51:58:17:18:16:21:
34:14:05:48:be:bb:35:7a:27:ca:0b:80:46:49:f6:7b:17:05:
c2:45:c8:8f:95:d7:ba:f9:de:3d:19:c4:ed:9a:31:eb:32:f1:
f4:62:9f:23:07:ce:f4:d9:ef:1e:70:fc:66:26:b3:6b:a8:2a:
46:97:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org