Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e4b824-c98f-4449-b242-d60703e5be5b/1/r_ZaxLPgKjsE5c2WggUJ4Hzdqoo.roa
File: r_ZaxLPgKjsE5c2WggUJ4Hzdqoo.roa (raw, json)
Hash identifier: FbrgWF/PX8/ppf9WPzcEYeazdK7Y3PiZJVz+vThUHC8=
Subject key identifier: AF:F6:5A:C4:B3:E0:2A:3B:04:E5:CD:96:82:05:09:E0:7C:DD:AA:8A
Certificate issuer: /CN=e7bb7116d9e0ae890ad22cdd435ffc5bc80dfa8a
Certificate serial: 01B76A90
Authority key identifier: E7:BB:71:16:D9:E0:AE:89:0A:D2:2C:DD:43:5F:FC:5B:C8:0D:FA:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57txFtngrokK0izdQ1_8W8gN-oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e4b824-c98f-4449-b242-d60703e5be5b/1/r_ZaxLPgKjsE5c2WggUJ4Hzdqoo.roa
Signing time: Sat 01 Jan 2022 12:04:28 +0000
ROA not before: Sat 01 Jan 2022 12:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21217
IP address blocks: 185.34.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28797584 (0x1b76a90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7bb7116d9e0ae890ad22cdd435ffc5bc80dfa8a
Validity
Not Before: Jan 1 12:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aff65ac4b3e02a3b04e5cd96820509e07cddaa8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:02:22:60:c2:f8:d7:41:34:bb:19:78:18:
26:0b:c4:9f:47:9e:f4:3b:19:5b:9a:e4:83:fb:51:
59:f5:7a:a6:8b:c6:aa:7c:71:88:46:93:8f:40:01:
17:5c:9a:20:d2:43:13:30:43:d6:8c:98:1f:4c:97:
99:8f:6f:d7:76:f9:5a:53:bf:b7:a0:ee:0a:8b:47:
e0:fe:5c:e4:4a:36:af:e7:09:57:fa:ff:4e:14:06:
d9:ef:1b:80:06:42:2b:d2:2b:f5:a3:ba:0d:96:6b:
98:30:2f:2d:5e:aa:70:e2:e8:8d:d6:a7:3c:ec:66:
db:4b:f1:c5:26:06:fa:eb:9a:bc:37:5e:76:a1:11:
0a:fa:19:55:85:a4:bf:06:77:1d:68:f6:ad:36:43:
c3:6c:39:b3:5e:47:fd:39:7e:91:4d:ac:30:75:e4:
31:4d:05:24:62:1c:0c:fc:6b:cd:0a:c7:c8:6a:38:
a7:64:88:4c:d6:5a:11:75:7c:c3:b1:f6:cb:51:78:
8e:c5:16:19:a7:78:56:f5:01:d9:32:14:1a:1e:ad:
f7:4b:f3:8d:6b:fe:75:f7:35:f0:22:15:ce:18:fa:
e3:e0:b6:27:ce:cd:7c:b3:ed:1e:a6:f9:9c:f8:3f:
98:69:b6:30:b6:7a:8e:45:25:08:61:7a:27:9a:5a:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:5A:C4:B3:E0:2A:3B:04:E5:CD:96:82:05:09:E0:7C:DD:AA:8A
X509v3 Authority Key Identifier:
keyid:E7:BB:71:16:D9:E0:AE:89:0A:D2:2C:DD:43:5F:FC:5B:C8:0D:FA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57txFtngrokK0izdQ1_8W8gN-oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e4b824-c98f-4449-b242-d60703e5be5b/1/r_ZaxLPgKjsE5c2WggUJ4Hzdqoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e4b824-c98f-4449-b242-d60703e5be5b/1/57txFtngrokK0izdQ1_8W8gN-oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.102.0/24
Signature Algorithm: sha256WithRSAEncryption
41:56:5c:6d:b1:09:88:43:a6:d0:2e:80:10:2c:42:9a:a7:e7:
4d:60:b7:c6:28:34:9b:db:01:8e:49:82:44:04:58:4b:e8:13:
a4:8a:d6:f7:62:d0:78:06:b1:40:96:0b:ee:e0:74:11:1a:df:
35:32:69:15:a3:81:fc:b9:94:f6:69:7e:47:62:1c:7f:24:ab:
50:70:0d:96:72:64:83:5b:a3:3d:43:ad:70:cc:6a:eb:74:2a:
5a:c0:e6:0e:65:a3:cb:8f:11:2d:45:cc:90:9d:13:d1:06:76:
89:4a:41:cb:38:8b:21:a5:f0:68:3f:a9:de:e2:94:d5:21:86:
09:e2:2d:09:44:3c:d0:ca:c9:c2:ae:35:31:3d:8a:94:e6:17:
f3:d1:8a:49:04:c0:27:d8:47:84:e5:30:e2:d0:a1:78:66:ea:
74:f1:23:45:f8:8c:71:48:e9:a2:52:75:cc:4f:43:86:af:3a:
1f:dd:25:89:1a:75:31:33:99:63:6d:6c:bb:c2:41:f9:1d:ac:
89:cc:40:a0:b1:8a:1d:7a:44:bd:83:9b:23:bb:da:b2:37:ec:
37:89:c2:35:92:10:61:97:cf:a9:c5:dd:00:5a:42:78:fb:4e:
ee:a6:76:3c:98:a1:a7:f7:f2:37:0f:5a:93:d8:11:2c:05:4d:
1b:f4:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:38 2023 by rpki-client on console-fra.rpki-client.org