Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/zHkvGis-HFdOITCvafxVm_6WlHA.roa
File: zHkvGis-HFdOITCvafxVm_6WlHA.roa (raw, json)
Hash identifier: ApyhYNWdSOfk21g2RudUrdkolp12PNdri6RPpSDZqaU=
Subject key identifier: CC:79:2F:1A:2B:3E:1C:57:4E:21:30:AF:69:FC:55:9B:FE:96:94:70
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 0D4A9D9C
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/zHkvGis-HFdOITCvafxVm_6WlHA.roa
Signing time: Sat 01 Jan 2022 05:03:57 +0000
ROA not before: Sat 01 Jan 2022 05:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64415
IP address blocks: 185.100.249.0/24 maxlen: 24
185.100.248.0/22 maxlen: 22
185.100.248.0/24 maxlen: 24
185.100.250.0/24 maxlen: 24
2a00:9da0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222993820 (0xd4a9d9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jan 1 05:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc792f1a2b3e1c574e2130af69fc559bfe969470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:98:4b:b0:33:1d:d1:8b:59:81:99:bb:af:
a9:39:f3:ab:f7:6b:88:93:bf:fb:fe:ba:00:db:e2:
7b:d4:11:3a:ba:9f:e9:97:83:17:5d:84:4b:e1:58:
cd:2d:33:79:08:d3:31:98:d5:14:15:ff:9b:46:4b:
4f:b9:1d:b5:9b:2e:2c:73:0b:8c:85:65:68:47:47:
5f:86:a2:8d:cf:4b:42:f7:a9:97:36:57:cd:e7:93:
e8:71:47:c1:f6:c1:cb:4d:c2:67:c8:88:c2:cc:1d:
79:37:4d:14:79:2b:21:e0:25:57:8a:17:50:53:c3:
a7:a3:16:80:b7:12:39:c4:63:43:6d:04:4c:fd:fa:
12:6c:7d:2f:e4:91:9b:91:86:8b:8e:8b:00:bf:70:
dd:ce:da:db:8e:49:09:72:d3:ce:c1:5c:84:ae:15:
ed:d6:1c:b5:a1:a8:7d:ab:3f:31:61:fb:f8:5e:1f:
b5:52:ff:21:d0:27:cc:ae:88:bf:1a:f4:1e:ad:fe:
7e:04:8c:cd:1e:83:49:8f:d0:13:cb:c6:bf:f5:70:
36:89:c3:e0:cb:5b:5c:ad:f5:48:63:22:9e:ad:7f:
76:c3:ca:7c:e3:68:e7:19:f0:d2:c7:b4:0e:5a:d7:
f6:33:96:46:18:c1:6c:f8:6b:e6:67:3a:c2:8e:b8:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:79:2F:1A:2B:3E:1C:57:4E:21:30:AF:69:FC:55:9B:FE:96:94:70
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/zHkvGis-HFdOITCvafxVm_6WlHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.248.0/22
IPv6:
2a00:9da0::/32
Signature Algorithm: sha256WithRSAEncryption
31:bc:77:60:2c:11:c9:25:cb:63:9e:61:16:2a:9f:8f:4e:b2:
43:78:76:1e:72:44:db:14:af:52:46:85:7f:30:9e:2e:fb:d2:
44:99:68:69:b6:ca:74:76:22:fe:45:1d:e6:9a:fc:82:8c:2e:
7c:8a:2a:ef:15:16:67:d4:d0:d7:5b:8e:32:4e:42:7d:ce:48:
b0:76:ef:a3:78:df:ed:49:3e:74:ce:89:66:05:82:65:21:e7:
f2:63:4d:7c:52:21:1f:72:a1:e3:5d:d9:5b:09:f2:ef:e2:8f:
fe:6a:d8:ba:ce:d0:cf:eb:c0:f0:35:42:59:6a:31:bb:09:ae:
22:d6:f9:ab:77:9b:f5:18:4b:c1:46:6e:20:b3:13:77:61:5e:
07:1b:65:0f:26:f6:4b:c5:99:76:f5:a9:15:f7:65:72:8f:ff:
80:b1:a6:23:f1:7e:57:70:9d:f7:63:28:42:e1:de:bf:98:ad:
76:e4:18:66:7c:a8:b3:ad:be:f3:e1:68:71:f6:63:4c:36:6d:
e4:63:99:27:da:e0:e5:b7:47:3a:54:ac:b4:9c:e6:d7:1f:30:
36:b8:ad:0a:c4:8a:26:62:1b:e5:88:0f:b2:0c:88:67:3e:35:
f2:d8:d4:c7:85:75:59:bc:9d:2d:07:bf:15:b9:31:8b:68:7b:
67:e4:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:29 2024 by rpki-client on console-ams.rpki-client.org