Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/z3NVRLm0PNPLqG0yYnZTu_H1FuY.roa
File: z3NVRLm0PNPLqG0yYnZTu_H1FuY.roa (raw, json)
Hash identifier: RoY0l4KX6hrdX3WGceUauYDz6AcVhSq8pWOsC3q1m2s=
Subject key identifier: CF:73:55:44:B9:B4:3C:D3:CB:A8:6D:32:62:76:53:BB:F1:F5:16:E6
Certificate issuer: /CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Certificate serial: 120383CA
Authority key identifier: 46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/z3NVRLm0PNPLqG0yYnZTu_H1FuY.roa
Signing time: Sat 01 Jan 2022 03:01:50 +0000
ROA not before: Sat 01 Jan 2022 03:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50304
IP address blocks: 185.73.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302220234 (0x120383ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Validity
Not Before: Jan 1 03:01:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf735544b9b43cd3cba86d32627653bbf1f516e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:0a:9f:ae:90:d8:d9:8f:6a:fe:68:ef:11:
3b:1b:5a:0a:a6:cc:93:d3:5e:91:16:34:67:2a:2d:
11:0d:dd:13:78:a2:a8:ea:1b:c8:2b:74:6c:fa:f7:
c1:0a:ab:41:c8:29:7e:60:07:79:09:10:32:3b:47:
4b:ff:1f:16:f1:49:bb:9d:0b:98:d2:d2:6b:e5:23:
cd:1d:5a:94:69:45:a3:af:f6:3a:72:95:11:8e:eb:
4b:f8:de:b1:5b:bc:b8:07:5e:6d:2e:3f:8c:4f:db:
17:16:b4:b0:c2:a3:69:f2:c2:1f:05:05:dd:72:47:
5b:e3:05:30:e2:91:fe:54:c5:19:45:62:0b:e4:de:
86:a4:81:b0:7f:0f:5a:83:86:10:40:ed:81:03:e3:
83:43:7c:70:35:8b:fd:b1:15:cf:64:7c:d0:8e:12:
a8:d4:b3:5e:69:cc:49:01:57:f7:56:72:89:d9:61:
1c:1a:33:96:bc:dc:1f:7c:8b:19:64:57:32:0e:71:
0f:da:98:3a:c8:65:66:0c:57:82:e2:13:c3:ef:15:
42:30:26:8d:29:18:9c:36:67:de:77:15:0d:79:05:
38:8a:f9:ec:bc:a0:7d:98:98:58:a3:cf:c4:52:79:
50:85:dc:87:9e:3f:5f:9a:06:fd:05:d8:44:99:3e:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:55:44:B9:B4:3C:D3:CB:A8:6D:32:62:76:53:BB:F1:F5:16:E6
X509v3 Authority Key Identifier:
keyid:46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/z3NVRLm0PNPLqG0yYnZTu_H1FuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.135.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f0:fb:03:04:83:7e:3e:bc:cb:04:e9:7e:a7:b7:b0:ef:eb:
41:41:8a:b7:20:84:56:2a:f1:85:20:49:9e:90:97:af:45:a1:
b7:53:b7:74:81:86:a4:be:31:2c:e4:40:ca:20:cc:57:9c:06:
41:32:48:f9:30:b0:49:69:b3:32:57:75:08:3f:8e:46:e1:dc:
9c:d6:5c:45:71:2f:51:69:dd:f4:20:1d:e0:9a:97:08:8e:cf:
25:e9:58:b4:fa:a6:54:07:23:99:1b:80:51:0c:72:63:99:0e:
f0:59:21:26:a5:3f:f4:13:71:ac:f1:bf:14:ef:ff:77:82:fc:
de:f5:0f:09:75:cd:0c:e1:88:30:8e:34:e2:dc:28:e1:e5:f8:
62:c1:80:fb:18:ad:fd:ad:15:c9:14:c4:2d:14:7a:bb:aa:78:
b8:d7:13:ba:a4:67:d4:38:3f:d8:75:c0:e6:df:32:5a:99:c8:
70:f0:a2:9d:e6:3e:f8:c8:74:c8:3e:3b:fa:7f:5b:e5:76:34:
d7:00:6c:a9:53:fa:c9:92:a3:c2:c8:13:88:91:17:e3:12:7f:
52:52:f2:7c:f4:03:d3:34:2f:07:f5:2d:39:0e:fc:e3:16:03:
bb:5b:c8:94:9d:9a:ac:69:ef:9f:44:aa:82:be:83:ba:32:78:
73:d4:1e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:32 2024 by rpki-client on console-fra.rpki-client.org