Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/z3jmMnJruV2nrkfzbiSM4xX4ru8.roa
File: z3jmMnJruV2nrkfzbiSM4xX4ru8.roa (raw, json)
Hash identifier: 7n5GqoRceVH7ZoKtgQfykAEImKAytEU2S8jcGkNBNUs=
Subject key identifier: CF:78:E6:32:72:6B:B9:5D:A7:AE:47:F3:6E:24:8C:E3:15:F8:AE:EF
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 2CB2E327
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/z3jmMnJruV2nrkfzbiSM4xX4ru8.roa
Signing time: Sat 01 Jan 2022 04:59:44 +0000
ROA not before: Sat 01 Jan 2022 04:59:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201845
IP address blocks: 85.232.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749921063 (0x2cb2e327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 1 04:59:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf78e632726bb95da7ae47f36e248ce315f8aeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:72:53:2b:c5:aa:ee:27:ea:3c:ac:38:19:
4e:6c:52:97:50:22:aa:30:5b:2c:5c:ba:8d:ad:c3:
6f:28:71:0a:fb:44:bc:cd:19:a9:eb:23:18:aa:92:
bf:bb:3a:f1:a8:b1:34:95:9e:83:52:f5:9b:29:e8:
05:7b:42:5a:12:4c:f9:e4:ed:f8:0e:a8:95:f0:ff:
e7:d9:16:b6:51:5c:b1:77:4a:38:9d:52:b1:b4:6d:
50:2e:76:4f:cc:30:52:23:57:2f:8a:0a:91:47:ef:
db:a5:88:b9:9e:3b:8f:ff:e6:e7:9e:3d:fb:f9:1a:
f4:90:1d:bc:5a:2e:fe:4b:d6:bf:3d:ea:a6:d7:5c:
9b:c6:e0:04:d0:a8:f5:8a:18:d3:84:bf:8f:1b:d2:
80:ce:10:3a:f8:b9:b7:34:e2:1d:d7:ba:f5:8c:86:
18:a2:dd:9f:b5:63:6b:75:38:01:ac:3f:5a:0b:6c:
ca:e4:6b:3e:7d:89:be:ad:3d:03:5f:db:6a:14:95:
f3:3d:b2:5e:46:ca:66:d0:a4:31:84:f8:08:1a:09:
d1:d4:a8:33:8d:8b:b2:42:04:34:24:cd:e5:8b:c6:
d4:73:08:b0:95:f6:01:0a:69:e6:11:07:00:03:b7:
53:4b:d3:db:29:34:b1:e4:2d:e5:37:27:80:51:bd:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:E6:32:72:6B:B9:5D:A7:AE:47:F3:6E:24:8C:E3:15:F8:AE:EF
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/z3jmMnJruV2nrkfzbiSM4xX4ru8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:36:b1:be:59:47:18:8a:f5:b9:96:ae:a2:b1:f3:d7:6d:dd:
c3:cc:87:cb:14:7e:6a:b8:75:1a:28:7d:1f:e3:6b:89:05:44:
74:c5:d6:95:06:5d:d5:b7:e6:b1:32:4a:de:54:2c:77:70:cd:
bb:56:7f:1a:b7:6a:73:53:57:fe:57:2e:e3:25:25:b1:bf:a0:
92:c9:b8:e1:11:c0:0a:a9:9c:7a:84:3c:aa:ec:8c:b5:6c:79:
f1:c1:73:bb:c9:2c:b9:7e:a8:0b:87:74:f6:d5:c3:b9:fe:08:
97:01:b7:1f:ef:d0:8b:11:31:ea:3f:29:ff:60:73:e4:a2:30:
a7:c3:32:b5:de:94:13:66:58:18:58:ee:d3:e1:fd:d2:4d:98:
8a:eb:5e:ba:1e:8c:21:71:7b:24:a7:89:c4:a3:42:aa:d7:f6:
cd:c5:10:40:93:cb:19:de:53:10:d5:83:f2:dd:59:ff:6f:4b:
79:c3:4a:e7:29:44:10:98:21:f4:49:8f:03:89:87:cb:f5:e0:
1c:bb:6f:36:1c:00:cc:0e:b9:c5:c5:33:9e:50:a2:2b:62:4b:
0e:4c:f0:70:ac:93:5e:42:8b:05:23:07:44:a9:4d:e7:24:0d:
d0:ef:56:a0:c0:f8:6b:c1:4c:75:cc:df:b7:7a:2f:7f:39:c7:
6f:0d:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org