Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/ZsFL4Ukdh8wqNsPXwk5qUKPtPyg.roa
File: ZsFL4Ukdh8wqNsPXwk5qUKPtPyg.roa (raw, json)
Hash identifier: 6+wiYhUZBVNv8FkGTh7hhGM0HKUdey3lMUxUCzqdiR0=
Subject key identifier: 66:C1:4B:E1:49:1D:87:CC:2A:36:C3:D7:C2:4E:6A:50:A3:ED:3F:28
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 0183F4969038BF32878FF59475A03CFEEF97
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/ZsFL4Ukdh8wqNsPXwk5qUKPtPyg.roa
Signing time: Thu 20 Oct 2022 08:50:51 +0000
ROA not before: Thu 20 Oct 2022 08:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42093
IP address blocks: 195.22.100.0/22 maxlen: 22
185.10.156.0/22 maxlen: 24
178.251.24.0/21 maxlen: 21
2a00:1938::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:96:90:38:bf:32:87:8f:f5:94:75:a0:3c:fe:ef:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Oct 20 08:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66c14be1491d87cc2a36c3d7c24e6a50a3ed3f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:20:b6:d9:4d:f1:21:f1:d4:2b:56:d4:2d:
c5:05:62:bc:04:d3:15:ee:b4:88:01:03:a9:2a:df:
c9:ca:e6:15:c9:3d:8d:06:d8:6e:9b:0f:c8:25:39:
00:bf:2f:18:f4:34:3c:db:52:ee:ae:28:98:5b:42:
36:a5:ba:1b:9c:1a:89:c2:6e:1b:44:97:dc:3a:3b:
5b:62:dd:ac:60:03:08:1c:63:77:9b:e4:a8:0f:2c:
14:cc:46:a9:4e:27:96:e5:7c:c1:2e:97:e9:fe:1e:
d6:e0:77:3f:84:4d:02:97:ab:81:12:4e:35:71:a0:
6c:3b:dc:74:9e:7f:0d:3f:54:73:0d:8c:3f:90:98:
00:53:3d:57:84:c9:5c:07:32:50:88:66:c2:5a:85:
b0:cd:62:b9:db:dc:2d:42:a5:29:1b:b2:09:4b:2e:
10:25:b2:5f:31:af:4e:0a:56:78:bd:c9:4a:92:c0:
20:75:45:86:39:66:19:aa:75:b0:64:ec:5d:d3:f6:
a2:cd:df:32:9d:35:79:91:70:32:06:e8:5e:e3:65:
4a:30:34:59:26:b0:7a:74:fe:ea:08:9b:e1:b2:17:
9d:27:82:ed:66:83:b0:4d:35:81:28:55:8e:db:de:
c0:d0:30:1e:22:b3:b2:8f:d9:68:21:92:15:de:79:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C1:4B:E1:49:1D:87:CC:2A:36:C3:D7:C2:4E:6A:50:A3:ED:3F:28
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/ZsFL4Ukdh8wqNsPXwk5qUKPtPyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.24.0/21
185.10.156.0/22
195.22.100.0/22
IPv6:
2a00:1938::/32
Signature Algorithm: sha256WithRSAEncryption
b8:20:0a:76:3d:29:9f:d7:03:4f:df:e0:4d:0e:e5:46:ab:46:
13:2f:93:85:a0:9a:12:49:37:20:15:5c:4f:88:b2:29:2f:b5:
5f:23:92:8d:97:9d:22:4e:a5:e2:f1:5d:1e:69:bd:dd:f7:0e:
fe:f8:bb:4d:3e:7e:f0:7c:bc:3a:3a:09:dc:88:b3:20:08:b6:
c3:98:a5:cd:50:b1:46:00:9b:42:68:f6:ca:8b:97:93:57:74:
9e:30:14:70:0d:0e:e6:0b:5d:e8:f3:5d:cc:23:37:17:e4:c6:
bd:bb:8d:00:b0:02:a6:33:28:38:9d:ab:b3:96:20:bc:92:a6:
4f:f7:99:ec:8b:91:23:fb:0a:89:4c:10:6e:94:52:65:cd:fb:
bd:65:94:16:74:6c:6a:c1:b0:39:6c:d4:13:d1:8f:f5:3a:44:
e9:b8:f3:db:ea:1b:4e:09:2f:ce:1d:69:f2:14:f8:9b:15:62:
aa:f0:5d:d3:77:af:73:ce:42:bb:80:c2:88:c6:4d:e4:e9:d9:
6a:ce:2c:97:93:97:95:61:c9:19:6b:ea:d2:70:07:ed:e9:6a:
20:e5:2c:d7:3e:6b:92:88:52:40:b4:2d:2b:a0:94:5e:21:b8:
4a:13:9c:ca:16:a1:82:9b:0e:3e:23:72:4d:81:0c:89:98:27:
5c:4d:5f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:44 2024 by rpki-client on console-fra.rpki-client.org