Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Z2Hs-b3KB-hi8ztbq70J6jh0dWA.roa
File: Z2Hs-b3KB-hi8ztbq70J6jh0dWA.roa (raw, json)
Hash identifier: 7WWfD9baGW5vqh7rHRI9tEZx4rGlGWoWXwb1vapRKSw=
Subject key identifier: 67:61:EC:F9:BD:CA:07:E8:62:F3:3B:5B:AB:BD:09:EA:38:74:75:60
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD51713111141FCF9D6305B62CA5779
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Z2Hs-b3KB-hi8ztbq70J6jh0dWA.roa
Signing time: Mon 02 Jan 2023 00:15:14 +0000
ROA not before: Mon 02 Jan 2023 00:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34353
IP address blocks: 188.210.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:17:13:11:11:41:fc:f9:d6:30:5b:62:ca:57:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6761ecf9bdca07e862f33b5babbd09ea38747560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:6f:43:d3:17:bb:1e:a4:f0:18:93:b5:1e:
85:0d:82:2e:18:ee:9c:da:1c:4d:34:fd:dd:ab:ca:
c0:6f:b9:0f:66:6d:1a:39:17:6d:2c:df:73:cd:3f:
20:27:07:c6:49:e8:03:41:80:79:37:6a:a7:db:5b:
d7:20:0c:3c:dc:91:cc:86:9d:cb:ef:6d:1a:d2:e7:
45:1c:7b:ee:18:64:c8:7a:31:26:d1:98:07:74:33:
2c:ea:85:1d:1e:02:f1:bf:7d:ce:3d:a2:50:7e:13:
65:90:0c:2e:94:60:d7:bc:9f:30:c1:a5:16:83:0b:
6c:c3:fc:1c:e0:5a:87:50:70:85:c4:74:fd:25:e6:
be:80:57:fb:7d:70:20:3d:1f:40:81:38:4c:32:ca:
5e:27:b1:a9:71:51:1c:67:21:81:7f:76:db:a3:4e:
e1:37:d5:f4:ee:26:d1:96:6e:c7:42:e5:83:b7:a2:
be:58:3d:d4:84:ac:af:36:fd:fb:74:d9:4f:93:f7:
4a:92:d2:51:62:2e:ff:d8:0e:e1:65:aa:54:2b:36:
e7:7c:f7:28:54:7d:e6:5a:40:e4:f4:c9:d5:09:39:
08:19:26:10:f3:d6:36:38:b8:e0:e8:1b:3d:3d:ef:
d5:c1:7a:11:c7:81:04:61:c7:7c:f5:d0:3d:7a:07:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:61:EC:F9:BD:CA:07:E8:62:F3:3B:5B:AB:BD:09:EA:38:74:75:60
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Z2Hs-b3KB-hi8ztbq70J6jh0dWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.210.237.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5e:4f:4a:97:cc:20:45:1b:d0:44:bf:36:fc:10:c2:03:e9:
96:ed:da:f6:3a:30:1f:c0:9c:68:9f:c5:59:d9:f2:6e:95:06:
6e:89:c0:9a:db:8c:2d:0b:6e:6b:13:d0:78:83:1a:83:04:b0:
1d:9f:d0:e5:c1:48:ce:f9:55:a8:4d:9c:50:c3:6f:a9:77:4a:
e2:e9:cf:76:e8:45:0c:84:cb:f4:41:94:f6:43:b5:6c:c2:7c:
04:7e:74:f8:ba:1b:c3:16:06:7a:b1:4b:64:d1:c8:14:71:fc:
ec:f1:11:05:68:24:69:f3:b0:65:cc:0f:93:0b:a0:e1:d4:9e:
4d:1d:17:ee:0a:ab:12:7d:75:06:9c:5f:82:14:43:24:a0:2e:
89:ea:7d:9b:eb:ba:dc:26:a0:06:ec:41:5a:01:dd:fc:33:b0:
18:be:24:07:1d:e0:1d:6c:e6:bf:16:9d:1b:1b:9e:3e:e2:3b:
38:df:52:d2:46:4b:93:2f:a1:b4:09:97:70:82:fd:13:0a:3c:
8d:90:a4:68:dd:e8:b9:d5:5c:f7:29:25:20:ba:c8:47:1e:35:
54:89:8a:2f:4e:fc:38:40:c5:db:cf:5c:25:20:3f:a5:90:85:
6c:dd:80:c1:d5:71:cb:a5:ba:47:3c:98:be:2f:f6:b2:d9:50:
3b:b6:6f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:55 2025 by rpki-client