Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/z1M-wdgzyGrIR1_WQ8tkyYTdV5Y.roa
File: z1M-wdgzyGrIR1_WQ8tkyYTdV5Y.roa (raw, json)
Hash identifier: IfzKLd3hVOxAVkik6PqFkGz16yC1Ts340NmOWls+Z48=
Subject key identifier: CF:53:3E:C1:D8:33:C8:6A:C8:47:5F:D6:43:CB:64:C9:84:DD:57:96
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 06487317
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/z1M-wdgzyGrIR1_WQ8tkyYTdV5Y.roa
Signing time: Sat 01 Jan 2022 11:00:51 +0000
ROA not before: Sat 01 Jan 2022 11:00:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60587
IP address blocks: 46.151.200.0/24 maxlen: 24
185.29.88.0/24 maxlen: 24
91.227.230.0/24 maxlen: 24
2a00:a6a0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105411351 (0x6487317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 1 11:00:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf533ec1d833c86ac8475fd643cb64c984dd5796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:66:d4:14:81:34:12:63:ff:00:ce:0f:4f:
f3:0f:f0:a2:3f:39:b3:7f:df:86:40:01:ca:c0:c1:
d0:7a:e7:37:05:55:2d:57:a4:94:24:82:0d:3e:ed:
10:76:e0:b4:b6:30:db:e9:f3:b3:48:c9:e4:3b:13:
f3:be:ed:62:74:1b:ed:b3:42:dc:9e:64:c4:37:15:
c1:f9:a8:21:a7:e1:36:ce:a6:7c:68:18:f3:e7:43:
97:32:d1:09:24:5b:93:b5:f7:5a:86:39:91:c8:7b:
6a:92:a6:fb:14:8d:50:cc:07:b6:0f:32:cf:46:8e:
32:ee:e4:18:45:ca:0e:b1:dc:19:35:8e:1f:05:8d:
77:d3:b4:ae:c6:ee:a5:ac:c4:f8:cd:dc:49:ad:fa:
96:5c:f6:29:cf:76:10:59:51:f6:49:23:7e:75:5c:
11:c1:fb:3f:63:04:1d:90:e2:43:db:40:6a:d8:6e:
f0:de:66:04:38:cc:f8:28:c1:c7:ce:d0:af:cd:ad:
86:5f:2b:3a:52:ee:79:6a:19:e7:27:2e:1e:d4:a1:
c8:7b:61:43:1c:e9:4f:76:4d:81:0c:3f:bf:f6:1a:
74:b4:8e:82:17:e1:d8:bf:99:8c:ba:c7:18:fc:76:
4a:ba:d3:0d:7b:de:27:79:92:81:64:26:74:cb:dc:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:53:3E:C1:D8:33:C8:6A:C8:47:5F:D6:43:CB:64:C9:84:DD:57:96
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/z1M-wdgzyGrIR1_WQ8tkyYTdV5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.200.0/24
91.227.230.0/24
185.29.88.0/24
IPv6:
2a00:a6a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
3c:b2:81:b9:ad:6b:b5:65:71:48:e1:e3:ec:07:5c:9c:af:9c:
6f:4e:54:93:6c:9d:65:50:83:b5:47:70:23:83:1b:fd:3b:eb:
89:89:c3:03:c8:44:39:73:7d:05:f2:d4:5c:71:38:33:f1:de:
4b:65:d7:29:93:36:e2:25:44:94:18:cc:67:69:11:10:75:0c:
5f:24:25:90:ed:55:b4:46:0d:b2:10:36:97:19:9e:f6:ee:3d:
5b:7a:c5:50:91:12:4e:68:72:7a:c6:60:ef:7b:17:ff:01:b5:
d6:44:c7:2c:40:66:b0:7c:56:b4:e9:b1:51:8a:cd:9d:06:c2:
d1:ae:58:f4:51:62:55:72:7a:fd:e5:39:e0:02:6e:96:17:9f:
0d:e0:72:b9:ae:ea:a8:11:1c:47:86:e4:8c:88:f6:42:31:19:
e3:2c:f0:0e:3e:1d:46:ea:29:21:46:5e:74:d1:b3:ee:05:96:
e4:44:0b:c9:e6:68:2c:4d:94:f6:79:26:1c:d8:8c:8c:89:ee:
b4:6b:64:58:0a:d1:e2:67:4b:b4:23:31:12:f7:6e:6c:2c:27:
93:c7:3b:29:ea:1c:c1:1b:3e:83:ef:d9:9d:82:2a:11:e8:81:
f6:cc:32:b2:11:8f:68:3d:0a:41:28:67:34:20:4b:81:fb:c6:
d5:b8:b4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-fra.rpki-client.org