Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/zpuZN2r5UZDQKHFjlUN7TF3Xxcs.roa
File: zpuZN2r5UZDQKHFjlUN7TF3Xxcs.roa (raw, json)
Hash identifier: Yvt6PYnAsz3dv+kRKc/odV/uI76U6P5YPF7KbdsGRfM=
Subject key identifier: CE:9B:99:37:6A:F9:51:90:D0:28:71:63:95:43:7B:4C:5D:D7:C5:CB
Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial: 05CE15CE
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/zpuZN2r5UZDQKHFjlUN7TF3Xxcs.roa
Signing time: Sat 01 Jan 2022 03:59:35 +0000
ROA not before: Sat 01 Jan 2022 03:59:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 185.242.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97392078 (0x5ce15ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
Validity
Not Before: Jan 1 03:59:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce9b99376af95190d028716395437b4c5dd7c5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:31:d5:e1:15:f2:8b:54:4d:9d:c2:a4:e6:
12:2a:7e:55:27:a0:81:9f:c1:c0:cb:41:38:d7:e8:
83:a2:a3:81:14:80:86:94:a1:8f:6d:b0:ae:26:c8:
b6:96:af:d3:87:75:82:3a:14:db:b6:cd:e5:b4:76:
24:99:fe:35:9f:c7:7b:4a:93:e5:6c:51:d6:13:c6:
96:36:ec:f3:6c:9f:cf:08:27:65:0f:ee:4c:d6:b1:
6a:e2:ad:39:38:1e:7f:12:49:34:8b:92:d2:8c:f5:
14:da:66:c6:2e:7b:61:d1:5f:c9:d0:55:dd:78:0b:
b8:3d:b2:d6:45:6f:cc:20:fa:04:ac:fe:7b:0d:97:
3a:59:55:2e:f6:f4:01:b2:66:c8:bf:f7:eb:f1:55:
8f:6c:9a:fd:ab:db:fe:ae:2d:f5:01:38:25:6a:69:
bd:06:91:61:45:f2:72:06:85:54:9a:a5:3e:d8:0a:
3c:fd:cb:b9:57:92:25:1b:5b:00:c6:31:d1:89:60:
39:02:43:ac:70:e1:d6:91:bb:05:71:bb:46:c3:2c:
fd:94:00:4f:d9:65:1e:a6:51:bd:44:1e:1e:15:38:
2e:8b:63:e4:90:ef:41:14:34:08:61:7b:12:22:70:
fb:f6:c5:2b:05:c5:c7:bb:f4:2e:f8:15:cc:6b:dd:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9B:99:37:6A:F9:51:90:D0:28:71:63:95:43:7B:4C:5D:D7:C5:CB
X509v3 Authority Key Identifier:
keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/zpuZN2r5UZDQKHFjlUN7TF3Xxcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:70:cd:55:0f:1c:6e:f4:21:62:a1:1b:da:d9:56:89:a7:9a:
5b:0e:57:74:2e:53:b6:ac:67:52:dc:29:ba:c8:c5:6a:8e:d7:
c7:00:d0:85:90:94:ea:05:d7:fa:f9:31:37:4e:7e:33:8f:48:
fe:3b:e1:f9:e4:cd:89:98:1a:3b:4f:cf:03:45:5e:69:6c:64:
a9:74:27:85:1f:71:03:e8:9e:5a:4f:db:1a:2a:89:d2:18:5d:
c9:67:a2:7a:59:cf:46:1f:c0:c1:82:46:33:41:c1:4f:c1:4f:
fd:4e:31:8f:94:48:3f:5b:13:3b:48:2a:05:8b:4d:e3:e2:bd:
c0:33:8e:dc:5e:fb:b1:86:c7:3b:d5:a6:62:d5:64:7b:1c:da:
71:8e:3e:d4:57:ed:b0:33:00:e2:d3:f4:d2:b4:3d:0b:b7:79:
6f:23:e2:84:7f:00:be:a5:b5:fb:e0:5a:d2:b2:57:d9:d2:f1:
4b:5c:cc:a1:b4:77:a5:65:9b:31:76:02:e7:94:a7:78:76:9f:
9d:78:36:05:5a:fa:e4:d2:78:0c:ba:5f:40:a7:0f:71:9a:fd:
77:24:01:ca:6e:f7:9a:22:e7:2d:3a:44:4d:3f:b6:3a:3f:fb:
a6:0c:27:9d:0a:2d:16:5f:e8:23:ea:6d:16:b0:6a:1a:9d:e0:
f1:a0:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:14 2023 by rpki-client on console-ams.rpki-client.org