Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/zAxs6fGabvGKobhzwqG-eCf3Mjg.roa
File: zAxs6fGabvGKobhzwqG-eCf3Mjg.roa (raw, json)
Hash identifier: 9TVpxv45WlJbZwYjjSg7A0bVV9SMh6H7mm/tezOuIC4=
Subject key identifier: CC:0C:6C:E9:F1:9A:6E:F1:8A:A1:B8:73:C2:A1:BE:78:27:F7:32:38
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 09ECFDC8
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/zAxs6fGabvGKobhzwqG-eCf3Mjg.roa
Signing time: Sat 01 Jan 2022 06:53:59 +0000
ROA not before: Sat 01 Jan 2022 06:53:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60144
IP address blocks: 185.111.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166526408 (0x9ecfdc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: Jan 1 06:53:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0c6ce9f19a6ef18aa1b873c2a1be7827f73238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:9e:8d:2c:e8:a8:c2:7f:3a:91:fb:4b:f5:
c1:d1:75:54:c7:95:b9:9c:88:c5:20:4c:49:08:8f:
63:1d:8f:cd:05:12:09:b2:fe:07:c1:3d:7d:d1:68:
8e:33:6c:01:27:25:be:b7:db:ad:09:e7:06:04:ec:
8f:46:45:d0:cc:98:ac:f5:10:35:17:5b:8b:c0:21:
0f:23:68:a1:bc:41:00:f1:32:fc:f4:9e:35:f0:a8:
6d:f5:9c:14:5d:0a:d5:4e:b9:ab:97:06:a0:91:71:
a8:78:8a:20:31:68:eb:a3:1d:38:5c:73:71:7e:8c:
64:30:1d:13:37:c1:50:46:45:97:69:33:ab:c2:79:
c8:49:5a:28:c8:42:c5:13:8f:77:e3:e7:4f:b4:14:
d3:83:c6:39:12:61:a2:42:41:20:2b:8b:c6:6f:5d:
fc:5e:a6:4b:01:c6:cc:62:35:06:7e:42:b5:1f:b1:
1f:49:42:f6:e5:c1:ba:21:de:e5:3c:f8:f5:36:c7:
0c:76:50:0e:7c:39:55:86:8b:47:5c:63:21:b1:79:
39:07:5f:be:d0:e1:83:41:90:45:47:7c:fd:7a:f3:
b0:6e:aa:39:d3:99:84:31:57:40:44:da:b0:01:74:
77:24:18:a2:a9:1b:b9:50:2b:16:96:04:0a:d6:11:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0C:6C:E9:F1:9A:6E:F1:8A:A1:B8:73:C2:A1:BE:78:27:F7:32:38
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/zAxs6fGabvGKobhzwqG-eCf3Mjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.235.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3c:9d:e4:86:85:29:bc:7b:cc:f1:e8:0c:2e:73:ec:70:be:
eb:1a:d9:64:cc:00:83:70:9c:8d:f1:1a:9e:ec:1d:f1:7b:de:
4f:b5:bb:d0:83:58:f6:d9:8d:c1:7c:55:b5:6e:7e:e1:4e:bc:
fb:0f:e6:50:3a:23:e8:41:0f:b0:38:c1:e2:a8:bd:76:d2:b3:
66:96:a7:df:5b:a2:fa:97:44:5a:4e:69:ff:20:29:97:6d:6d:
17:09:81:2d:75:e6:20:76:7a:93:56:b5:b9:b1:84:ac:03:ad:
ea:9d:b0:8f:db:07:6e:9c:dc:08:1f:dd:81:ee:59:9a:27:b9:
c4:a7:be:89:ee:28:a0:da:2c:84:8e:13:34:d6:d1:01:91:ca:
e2:80:a4:28:87:52:14:51:7f:04:c9:4a:c5:70:76:a8:95:cf:
4c:fc:50:f4:2e:8a:67:5e:e6:5a:72:22:85:6c:85:9f:c9:d6:
aa:a1:ec:d2:1b:05:5c:10:10:03:c4:9a:d1:66:06:38:09:2c:
6c:11:34:ab:fa:f3:45:72:b5:21:88:dd:77:a6:2d:58:2e:8c:
b6:ab:f0:6d:2f:bb:b3:16:93:12:dd:a7:4a:b1:ce:07:54:3c:
e1:f0:8a:6b:45:14:67:eb:71:a4:b4:fd:1c:b5:d5:4f:1f:56:
ec:56:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org