Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/zNuseKL8AUTROFPFX6226zvyZzY.roa
File: zNuseKL8AUTROFPFX6226zvyZzY.roa (raw, json)
Hash identifier: dcVaTCdpv9BLFK2f4qGHWZdoEDbGvr0uI6/GYKiaJWA=
Subject key identifier: CC:DB:AC:78:A2:FC:01:44:D1:38:53:C5:5F:AD:B6:EB:3B:F2:67:36
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 1C9BA3
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/zNuseKL8AUTROFPFX6226zvyZzY.roa
Signing time: Sat 01 Jan 2022 02:54:53 +0000
ROA not before: Sat 01 Jan 2022 02:54:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209620
IP address blocks: 185.184.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874851 (0x1c9ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Jan 1 02:54:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccdbac78a2fc0144d13853c55fadb6eb3bf26736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:66:8e:bb:56:b2:fe:28:9c:e1:4f:90:fa:
82:91:7b:00:69:34:ab:9d:49:29:d2:01:89:5e:3f:
40:d7:02:34:75:d0:7d:85:60:3d:8b:b3:a0:bf:13:
c6:cb:a6:63:e4:29:5c:f2:5a:46:ab:27:88:40:13:
ef:c6:57:35:be:e3:52:84:ba:4b:20:a3:c1:23:08:
ca:e7:28:cb:3c:e8:33:af:68:a5:ab:0c:d7:78:44:
f0:54:e5:12:cb:91:08:e2:2f:3a:be:17:4a:08:63:
ab:02:fe:3a:ff:49:75:0d:2a:f3:4d:49:b3:73:51:
d7:2e:a0:96:74:01:47:b9:c8:02:e3:11:57:17:1a:
a6:50:c4:49:11:86:77:d6:9b:63:78:22:f3:b2:44:
41:58:f4:bf:9e:2c:32:64:b6:a9:93:5f:42:51:3a:
7d:3e:ce:d0:49:cd:a4:96:f4:3b:86:a1:51:2e:e4:
43:82:08:f9:d4:ae:a0:92:86:d8:3d:5b:fa:71:33:
ed:4b:b7:e1:52:05:c4:69:4d:d6:cd:8b:dd:e9:35:
91:6a:69:02:6b:81:44:60:f5:a8:9b:01:f1:2f:c1:
b0:30:58:74:a2:1f:f5:f2:bf:14:53:16:25:18:a9:
23:3c:e3:d8:34:c7:67:d9:b5:72:36:ed:8f:63:05:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DB:AC:78:A2:FC:01:44:D1:38:53:C5:5F:AD:B6:EB:3B:F2:67:36
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/zNuseKL8AUTROFPFX6226zvyZzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.213.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3f:bd:11:b0:00:e2:af:2e:98:14:3f:d6:7d:67:e8:c3:65:
10:27:f9:53:ac:3a:23:f6:2e:24:e6:e1:4a:0d:0a:e6:5e:c5:
85:cf:f4:18:b1:7d:57:39:85:00:ca:89:11:c7:0f:90:27:2b:
c0:0a:78:ba:d4:24:62:7a:c0:b7:ca:98:d0:8f:23:d0:22:31:
da:65:12:c0:03:3d:a1:ee:fe:12:19:9d:f3:4f:35:8d:dc:b5:
02:da:94:28:e7:bb:e5:7e:4b:b4:cf:f2:b8:e1:f3:4d:29:4f:
86:f9:ab:39:48:59:7d:48:8d:8e:75:31:8f:f9:61:a0:0f:fc:
64:31:39:37:2e:9b:ac:c0:b3:76:ce:89:c5:d8:b1:d5:9f:45:
10:5f:1d:ae:a8:3f:b5:0d:5e:a9:f5:b2:f9:d9:b3:95:5b:94:
98:db:88:63:d2:b6:43:4a:9f:b6:cc:71:bd:0b:95:dc:02:b0:
1f:2f:ab:8e:be:e0:66:cd:5a:88:6b:db:55:85:99:9e:aa:eb:
f9:9b:b5:3c:9f:72:9b:d7:e6:d4:2c:13:db:46:be:85:6c:e6:
19:e6:3f:36:fc:d3:1a:c1:f9:bd:55:f2:24:02:c6:4a:5e:ed:
7b:c5:ea:3e:ab:48:46:df:7e:f3:cd:e1:ac:2a:63:49:d2:83:
19:9f:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:12 2023 by rpki-client on console-ams.rpki-client.org