Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/bZZxrECswPX3iMS_2fgPF_ce4Nw.roa
File: bZZxrECswPX3iMS_2fgPF_ce4Nw.roa (raw, json)
Hash identifier: HnvehJg0CCfvVnOM3JFbVdY/TyZyae4gjpq9/vvUjJw=
Subject key identifier: 6D:96:71:AC:40:AC:C0:F5:F7:88:C4:BF:D9:F8:0F:17:F7:1E:E0:DC
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 0C4A4302
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/bZZxrECswPX3iMS_2fgPF_ce4Nw.roa
Signing time: Thu 31 Mar 2022 15:04:16 +0000
ROA not before: Thu 31 Mar 2022 15:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57335
IP address blocks: 185.203.206.0/24 maxlen: 24
185.203.204.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 206193410 (0xc4a4302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Mar 31 15:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d9671ac40acc0f5f788c4bfd9f80f17f71ee0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:b6:99:9e:55:1b:bd:f0:67:c8:e6:f6:49:
51:ff:04:22:7f:c0:84:c1:4b:1b:9a:92:32:ab:5f:
69:01:93:a9:f0:ad:80:37:47:a2:39:06:90:ac:aa:
fb:2b:92:27:32:6f:8a:a9:15:a5:05:6f:97:1c:c7:
d4:40:d3:5c:74:1b:ed:4b:0d:2f:e7:fd:71:d9:9c:
f6:0f:5c:53:9b:34:c4:61:e8:3d:e9:71:00:ea:22:
d2:f0:33:10:97:aa:80:0a:81:66:b8:72:e7:a6:92:
22:33:52:75:40:6a:5f:32:13:ff:e3:9e:d6:f6:86:
8b:18:12:f2:e8:80:94:f5:5c:37:39:b4:af:d8:bc:
44:fa:aa:f8:eb:c7:8a:6c:25:85:b0:0c:16:72:fa:
18:50:c6:6c:da:2d:f8:a7:d7:de:23:69:d8:62:b7:
9c:ae:7c:c7:aa:7a:c0:c2:b1:3d:a5:19:ae:23:45:
d9:03:2a:bd:6a:a5:a5:61:02:11:0c:af:3b:ff:aa:
7a:31:0a:b7:8c:23:8c:0a:2b:4c:e3:9e:8b:d5:67:
5c:ed:46:af:c8:db:4b:c1:09:14:c6:25:35:43:f6:
61:72:7e:09:ee:99:32:32:33:c8:6b:bc:f2:8a:9d:
b4:11:24:14:3b:b7:85:84:52:94:66:89:02:22:a4:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:96:71:AC:40:AC:C0:F5:F7:88:C4:BF:D9:F8:0F:17:F7:1E:E0:DC
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/bZZxrECswPX3iMS_2fgPF_ce4Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.204.0-185.203.206.255
Signature Algorithm: sha256WithRSAEncryption
15:20:e6:e2:83:cd:fa:fa:ef:81:98:6d:2a:6a:e1:16:c7:4f:
c7:04:08:5f:49:b6:5f:81:ec:35:23:33:db:5e:be:f2:59:bc:
61:e2:f0:f2:ef:6e:93:4d:37:ba:b7:bf:da:0c:84:63:be:55:
7e:97:76:e4:ed:a0:58:5a:8e:4b:ff:e3:e3:02:63:7a:7a:2e:
dc:67:34:53:8e:5f:57:1f:ac:0f:be:78:8f:c0:c9:91:0b:0e:
5e:b9:a6:5a:15:3a:62:15:c5:0d:05:08:f5:92:87:97:96:13:
46:2a:2c:63:e5:f6:f5:f5:62:b1:25:af:5e:90:b8:1f:68:27:
f0:43:84:87:b0:55:5f:d0:28:ab:f8:2c:34:6c:4c:a7:29:3a:
b9:0c:40:b3:c5:6b:cf:b0:fc:ba:21:39:73:6c:70:06:91:9c:
59:88:b5:d3:4e:67:1c:8d:de:46:29:6f:0b:23:32:8b:4e:18:
4b:b6:2a:43:c5:10:86:37:31:51:bc:7e:b1:55:e3:d7:3c:88:
ed:9f:4a:15:d8:be:79:ac:36:c0:9b:55:d1:77:e2:3d:6f:c8:
6b:e4:5b:57:89:c1:55:75:c1:38:df:ed:d8:37:80:f2:c5:cd:
a2:01:75:2f:a2:25:37:c8:8e:2b:00:f2:62:cd:d0:e4:3c:65:
9d:c8:21:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:19 2024 by rpki-client on console-fra.rpki-client.org