Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/v3G_ZNRwd6izLka98DSJE1euPXk.roa
File: v3G_ZNRwd6izLka98DSJE1euPXk.roa (raw, json)
Hash identifier: CmBj+RCnKOQDUEbjln0dGCUGIhbS23O88X0Rnco8eT0=
Subject key identifier: BF:71:BF:64:D4:70:77:A8:B3:2E:46:BD:F0:34:89:13:57:AE:3D:79
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 03529B1B
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/v3G_ZNRwd6izLka98DSJE1euPXk.roa
Signing time: Sat 01 Jan 2022 02:02:05 +0000
ROA not before: Sat 01 Jan 2022 02:02:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39409
IP address blocks: 185.216.8.0/24 maxlen: 24
2a10:9906::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55745307 (0x3529b1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 02:02:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf71bf64d47077a8b32e46bdf034891357ae3d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:59:86:c3:25:38:60:f0:56:1d:6a:57:ce:
c2:57:d1:6b:a9:e2:4e:1b:50:99:a4:0e:73:6d:d3:
95:65:f8:04:ea:f4:4f:55:52:e3:db:39:80:88:c2:
ac:04:f6:45:91:86:77:92:1a:ed:b8:95:89:58:47:
63:34:62:d1:5d:f4:df:34:42:eb:cf:97:39:ed:ad:
51:63:3b:81:ab:54:d4:71:df:83:91:cf:5a:86:97:
5d:f1:c7:f2:97:5f:66:ea:56:e0:4e:db:61:63:2c:
a6:9f:45:c6:b3:08:1a:f1:61:11:03:d5:18:af:c5:
70:b2:99:c2:af:8b:a6:4f:68:2b:45:77:79:68:b5:
70:6c:d1:43:b2:59:4d:8b:c7:b2:4b:e3:00:b0:ca:
33:e6:7b:43:d7:08:4c:3b:d3:94:de:5e:1d:34:96:
31:6f:02:44:00:d5:b2:c4:94:c5:af:63:a2:c6:d9:
b8:2c:27:c8:70:62:fa:45:90:aa:5d:bf:7d:9a:22:
54:0a:01:4e:a5:6a:c9:ab:6e:fc:d9:27:17:6a:7f:
72:65:12:1c:be:d0:78:64:d2:33:8e:a2:cd:2e:bc:
66:4a:b7:c3:c4:44:ca:b2:68:c0:8e:2c:fa:dc:a4:
2e:23:7c:d1:39:98:e7:d1:ec:cd:28:41:93:55:45:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:71:BF:64:D4:70:77:A8:B3:2E:46:BD:F0:34:89:13:57:AE:3D:79
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/v3G_ZNRwd6izLka98DSJE1euPXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.8.0/24
IPv6:
2a10:9906::/36
Signature Algorithm: sha256WithRSAEncryption
83:a8:eb:81:99:a2:03:12:56:a4:76:aa:81:23:56:9f:93:8c:
9f:bc:8f:17:77:a0:78:84:70:f9:76:c5:6f:2d:a4:23:5a:93:
2c:68:ff:f7:48:02:63:17:f1:53:3b:9c:b8:c8:68:3e:b8:e7:
ec:84:5d:f6:b8:3f:c1:2c:0e:c7:1a:e2:74:1d:8c:9c:03:c3:
95:de:7e:a2:60:05:8c:5a:ad:08:d5:fd:61:ca:bf:95:21:82:
4e:1c:08:4e:ef:a3:6e:4c:09:8a:aa:df:a0:fd:bc:3d:90:95:
af:8d:1a:20:09:e9:1a:ec:bc:0d:b7:e7:51:1e:63:1e:5d:4c:
41:c0:4c:c1:b8:53:4f:2c:ad:4f:cf:62:93:7d:7b:5a:a3:af:
4c:82:21:00:6d:a2:5a:79:03:c7:df:00:3c:35:d0:fa:68:b1:
2c:b8:15:93:c1:27:bf:a8:2b:62:ff:20:c5:42:ee:16:45:79:
cf:f1:58:7d:f8:21:cb:6f:53:71:a2:eb:ba:41:77:a9:79:1b:
b7:46:60:fb:90:b1:c3:b1:68:50:73:ed:67:d3:1e:0e:1b:00:
b8:13:15:b6:07:c6:c2:5f:3d:10:c1:fe:a4:ab:2c:7d:64:97:
1a:c8:a5:d7:35:1f:e1:3b:d2:a3:43:cf:0f:6f:6b:4b:f0:db:
9f:27:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:20 2024 by rpki-client on console-fra.rpki-client.org