Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/zMRIzOwTptu7YfzJLD8ynJmvuRQ.roa
File: zMRIzOwTptu7YfzJLD8ynJmvuRQ.roa (raw, json)
Hash identifier: sPjl9LhmSS94loWCaDtBzangcitWJt/YGCKYO/EEtGQ=
Subject key identifier: CC:C4:48:CC:EC:13:A6:DB:BB:61:FC:C9:2C:3F:32:9C:99:AF:B9:14
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 102814E6
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/zMRIzOwTptu7YfzJLD8ynJmvuRQ.roa
Signing time: Sat 01 Jan 2022 14:02:48 +0000
ROA not before: Sat 01 Jan 2022 14:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61365
IP address blocks: 185.184.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271062246 (0x102814e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Jan 1 14:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccc448ccec13a6dbbb61fcc92c3f329c99afb914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1f:e4:20:76:16:d6:4a:f2:df:9d:12:1d:b1:
2a:09:f5:18:c8:0e:26:2a:c4:54:5c:e4:bd:9f:7b:
ae:16:62:e0:fd:63:39:26:ce:56:a0:00:96:74:f7:
15:e0:c1:bf:c6:fd:2b:f3:04:40:0b:bc:b0:f2:5e:
66:5a:1a:c9:40:62:a2:66:3c:df:c1:fb:59:b3:31:
7d:3f:d7:d5:7b:ab:a4:cf:da:22:df:ac:30:35:fb:
8c:fc:46:40:fe:9f:d2:02:2c:d2:45:63:77:aa:d4:
5b:1f:4f:57:75:74:4c:46:b9:0e:fc:ee:dc:16:3a:
26:b9:cc:0a:43:f5:8a:99:1e:4e:f4:97:79:27:a3:
1a:a1:d8:0a:40:24:1f:83:9f:ac:ff:75:dd:2f:3e:
3f:2b:b5:6b:ab:5b:37:f6:27:56:88:fe:f9:b0:08:
89:8e:31:62:a3:9a:34:7f:77:ba:2b:eb:9a:a5:4d:
e7:e6:06:72:fe:4a:bf:c8:09:50:29:22:15:9f:7d:
9d:a5:aa:dc:b6:e5:f4:2f:c4:d5:7e:f9:7d:54:0c:
5c:a2:6a:21:c7:9f:31:65:3c:8d:04:be:97:09:88:
e9:26:98:4a:08:34:8e:48:e2:4d:ae:d4:cf:21:54:
c6:63:3b:19:a4:ec:1c:2f:3e:46:06:28:1c:ce:cf:
b8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C4:48:CC:EC:13:A6:DB:BB:61:FC:C9:2C:3F:32:9C:99:AF:B9:14
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/zMRIzOwTptu7YfzJLD8ynJmvuRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.16.0/22
Signature Algorithm: sha256WithRSAEncryption
57:84:0d:aa:64:48:39:40:ce:5d:54:49:29:94:6f:22:80:ad:
56:9a:ec:f8:e0:35:7c:65:1c:77:2b:03:83:15:1f:26:c9:73:
1a:91:c2:34:65:ce:b9:5e:27:eb:46:8f:38:6a:a0:4c:6b:3b:
16:8c:29:7a:96:12:80:4c:25:d3:2a:cc:69:79:d3:16:8d:9a:
f2:03:8e:cb:8a:83:f0:6f:64:57:c5:0e:d1:e1:87:4e:44:41:
01:08:f7:aa:1b:15:aa:b3:06:94:5f:b6:ca:b0:a1:57:6b:01:
be:f4:de:7a:30:a0:5d:ed:1d:61:bb:64:4a:10:bc:92:e5:a5:
0d:45:55:e2:ef:bc:eb:5a:7e:ed:7f:0e:4f:94:21:fd:82:3c:
87:d7:3e:4f:b4:24:cb:0e:b7:d1:0f:eb:a1:47:28:d8:1b:7b:
ad:92:95:38:1c:d9:7c:3e:60:7c:d1:f0:9e:e2:42:90:60:bb:
c1:8b:a0:65:1e:95:7d:87:20:a9:93:76:b5:66:ca:ef:15:f9:
4b:83:9f:e8:65:6b:27:88:0c:9c:a9:77:ee:3c:0a:3a:bb:65:
8c:1a:05:b0:5e:4d:6e:c3:25:2a:a8:7e:22:9d:96:76:0c:b9:
a9:8b:f4:1f:98:ea:9b:c0:d8:9c:70:f6:d1:83:22:8c:14:3b:
69:17:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:46 2023 by rpki-client on console-fra.rpki-client.org