Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/ZYt_dCcoYOaI6BtjPrti9ps8ewI.roa
File: ZYt_dCcoYOaI6BtjPrti9ps8ewI.roa (raw, json)
Hash identifier: gTHrDfbUV79eBzonfqzuswxQuoei/BzmoY3KfSWWsPQ=
Subject key identifier: 65:8B:7F:74:27:28:60:E6:88:E8:1B:63:3E:BB:62:F6:9B:3C:7B:02
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 01856F823F4E13E4FE46168AAE88DCC63178
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/ZYt_dCcoYOaI6BtjPrti9ps8ewI.roa
Signing time: Sun 01 Jan 2023 22:44:44 +0000
ROA not before: Sun 01 Jan 2023 22:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20818
IP address blocks: 185.111.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:3f:4e:13:e4:fe:46:16:8a:ae:88:dc:c6:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: Jan 1 22:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658b7f74272860e688e81b633ebb62f69b3c7b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:89:ad:bf:64:5c:4d:62:83:c8:2f:e3:8b:
1d:16:94:86:b3:34:b7:87:8b:4b:74:97:2e:eb:55:
aa:c2:47:61:0a:26:d9:71:a2:7a:85:6c:b2:3c:65:
ec:8d:a5:2a:57:49:7f:a5:3a:ca:10:5d:bb:16:39:
8d:3b:b4:40:bb:63:42:39:15:0f:23:8c:3d:50:11:
8f:cc:4d:5f:96:90:4c:f3:ae:c0:f7:46:9c:04:96:
d6:19:58:3c:b9:c2:9a:6c:14:a7:fc:82:6c:23:56:
16:52:15:a3:d5:51:b8:6f:4e:08:b0:e7:bb:ab:e7:
b8:6f:47:df:36:fb:79:e4:fb:62:b8:49:ae:94:df:
f3:8b:f4:33:65:ab:3b:a8:c0:97:5c:99:9c:a6:22:
b5:a6:eb:22:85:05:4c:c8:de:1c:d6:22:eb:63:4f:
54:86:3a:e9:c8:d1:77:1a:cb:4e:6b:65:a5:34:d8:
3b:96:b4:b7:ad:0f:67:71:36:f2:fc:29:e2:e9:b2:
23:f2:39:52:42:d3:44:5d:36:40:fd:ad:74:1b:6e:
77:fa:8d:66:bd:23:c8:d0:93:d2:40:18:4c:f8:31:
ce:06:b7:49:c8:8b:e2:1d:b8:9b:ed:71:d6:92:45:
fc:7d:07:2b:1e:5c:48:54:04:ba:c8:18:32:cc:a9:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8B:7F:74:27:28:60:E6:88:E8:1B:63:3E:BB:62:F6:9B:3C:7B:02
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/ZYt_dCcoYOaI6BtjPrti9ps8ewI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:91:04:85:cf:b8:0e:2e:d5:37:6d:f1:9d:0a:e8:e5:15:b8:
48:33:7b:16:ff:9b:5d:f5:3a:bc:a0:c7:96:1f:f4:39:d3:85:
61:9b:c8:59:88:87:34:8a:a7:7e:d8:f2:4b:3c:47:b3:a7:fb:
3e:04:a5:92:6d:74:b2:17:16:16:9a:1b:50:64:3a:dd:78:64:
76:2d:76:fc:30:b6:7b:47:37:e6:c7:17:4d:71:a1:a3:bc:71:
04:f5:6b:7a:b7:a8:52:29:21:62:34:e5:bb:55:7c:71:fd:c2:
bd:f2:39:fc:0d:1c:15:68:83:8b:81:d4:fc:68:e7:5b:78:e4:
25:a1:54:db:d3:a1:56:2f:29:44:da:9e:3f:b0:6e:49:fb:c4:
32:00:d5:ba:b1:6e:76:74:53:2b:b1:cd:e3:87:8f:e5:76:5e:
09:2c:41:77:c7:c4:43:0f:f2:05:36:36:f7:b7:1a:05:79:77:
b1:ca:87:66:73:07:48:99:ca:0a:e8:7c:f3:5f:06:4f:41:76:
db:b1:9a:d6:af:87:8d:aa:d8:69:db:25:c9:05:98:9e:fa:b9:
e7:5f:13:8b:55:29:b3:fe:df:60:52:a9:6c:e5:5e:cf:57:3d:
4a:45:2a:0f:5e:1a:59:7f:36:c2:e1:92:d7:22:9b:ab:d7:7b:
ba:5d:f5:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvgj9OE+T+RhaKrojcxjF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMWY3MjFiN2I3ZTZkMDQ5ZmJmZTUyMGUxY2E4OWMxY2Ey
NTY4MTMwHhcNMjMwMTAxMjI0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NThiN2Y3NDI3Mjg2MGU2ODhlODFiNjMzZWJiNjJmNjliM2M3YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcKJrb9kXE1ig8gv44sdFpSGszS3
h4tLdJcu61WqwkdhCibZcaJ6hWyyPGXsjaUqV0l/pTrKEF27FjmNO7RAu2NCORUP
I4w9UBGPzE1flpBM867A90acBJbWGVg8ucKabBSn/IJsI1YWUhWj1VG4b04IsOe7
q+e4b0ffNvt55PtiuEmulN/zi/QzZas7qMCXXJmcpiK1pusihQVMyN4c1iLrY09U
hjrpyNF3GstOa2WlNNg7lrS3rQ9ncTby/Cni6bIj8jlSQtNEXTZA/a10G253+o1m
vSPI0JPSQBhM+DHOBrdJyIviHbib7XHWkkX8fQcrHlxIVAS6yBgyzKnkNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWLf3QnKGDmiOgbYz67YvabPHsCMB8GA1UdIwQY
MBaAFKwfcht7fm0En7/lIOHKicHKJWgTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjIt
NjRkMjljODZiZjNlLzEvWll0X2RDY29ZT2FJNkJ0alBydGk5cHM4ZXdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81NmQyNjctMWM0My00N2M4LWFmYjItNjRkMjljODZiZjNl
LzEvckI5eUczdC1iUVNmdi1VZzRjcUp3Y29sYUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW/UMA0G
CSqGSIb3DQEBCwUAA4IBAQB+kQSFz7gOLtU3bfGdCujlFbhIM3sW/5td9Tq8oMeW
H/Q504Vhm8hZiIc0iqd+2PJLPEezp/s+BKWSbXSyFxYWmhtQZDrdeGR2LXb8MLZ7
RzfmxxdNcaGjvHEE9Wt6t6hSKSFiNOW7VXxx/cK98jn8DRwVaIOLgdT8aOdbeOQl
oVTb06FWLylE2p4/sG5J+8QyANW6sW52dFMrsc3jh4/ldl4JLEF3x8RDD/IFNjb3
txoFeXexyodmcwdImcoK6HzzXwZPQXbbsZrWr4eNqthp2yXJBZie+rnnXxOLVSmz
/t9gUqls5V7PVz1KRSoPXhpZfzbC4ZLXIpur13u6XfVS
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:08 2025 by rpki-client