Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ZLLs8WDpPhdchJ2eK3HUOH3ORRU.roa
File: ZLLs8WDpPhdchJ2eK3HUOH3ORRU.roa (raw, json)
Hash identifier: vLO5/pdKF0rRIGePO8AofeWWxgBxJt9Qygccgq15ztg=
Subject key identifier: 64:B2:EC:F1:60:E9:3E:17:5C:84:9D:9E:2B:71:D4:38:7D:CE:45:15
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 0589F092
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ZLLs8WDpPhdchJ2eK3HUOH3ORRU.roa
Signing time: Sat 01 Jan 2022 06:04:29 +0000
ROA not before: Sat 01 Jan 2022 06:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205659
IP address blocks: 185.218.232.0/24 maxlen: 24
185.218.233.0/24 maxlen: 24
185.218.234.0/24 maxlen: 24
185.229.242.0/24 maxlen: 24
185.235.12.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92926098 (0x589f092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 06:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64b2ecf160e93e175c849d9e2b71d4387dce4515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:94:e5:37:af:5a:f3:61:cf:d3:84:47:86:
97:0b:f4:46:af:dc:d2:8b:66:77:c1:25:b2:01:f5:
03:8c:61:a8:ed:82:f4:88:95:a8:eb:91:61:ab:5c:
26:d5:2c:72:24:ab:86:9d:68:ea:47:c7:1f:20:9f:
4e:dd:36:14:f0:5f:83:ae:43:5f:8f:c6:35:1c:2e:
b2:14:dd:21:9e:1b:e4:e7:3d:48:f2:b7:e7:c7:9f:
9c:45:c0:e5:7f:8e:5f:e3:89:49:f9:09:77:8f:4d:
d8:fb:a6:94:59:7c:d0:92:3e:0d:d2:9a:5e:1e:27:
13:6b:7d:48:1d:08:fe:de:7b:e9:91:83:45:cf:2e:
4a:cf:d3:37:7c:53:57:d3:e9:b9:aa:b5:86:3a:f1:
28:e2:1c:bf:d7:ab:eb:9f:a8:a1:90:e4:e6:2c:e1:
13:17:09:9c:14:8f:44:c8:63:94:2c:48:8f:26:aa:
30:1b:95:fa:cf:5e:d4:99:57:4a:77:74:36:f0:92:
47:c2:a5:86:5e:c7:65:8f:36:c0:20:84:d2:14:a1:
35:77:e2:2c:09:c4:40:91:61:dd:6d:0d:a2:75:aa:
2a:a7:b7:5b:ae:6e:ac:a7:17:46:11:13:b6:3d:2a:
e5:7b:72:4b:13:3d:d3:2f:72:70:1e:7f:d6:35:cc:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:EC:F1:60:E9:3E:17:5C:84:9D:9E:2B:71:D4:38:7D:CE:45:15
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/ZLLs8WDpPhdchJ2eK3HUOH3ORRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.232.0-185.218.234.255
185.229.242.0/24
185.235.12.0/23
Signature Algorithm: sha256WithRSAEncryption
36:ca:c9:3a:72:2a:35:e2:e6:d0:df:e3:62:6b:dc:bd:b5:73:
94:ce:34:3b:71:08:c3:c7:c8:7a:32:ee:76:4b:90:8a:b9:fc:
2a:ea:5c:a4:52:3d:2c:38:fc:dd:ce:8f:6e:64:18:45:d3:d2:
98:9d:9f:19:56:99:41:ab:5f:3c:d1:07:75:e2:ff:0d:ee:f0:
b9:41:e7:7f:42:d7:7e:44:28:52:68:3b:54:d8:8a:7a:68:f0:
b7:83:84:50:cf:9f:eb:ee:0c:7e:ef:8b:4f:73:3a:7c:55:6d:
a7:8b:e4:a6:75:7c:0d:10:50:65:16:a8:b9:b3:66:79:18:91:
bd:87:eb:03:4d:d0:5d:c9:0e:00:a9:18:34:87:ac:31:91:22:
f4:78:ca:9b:0c:b5:f9:f2:30:c7:cc:65:ff:fb:24:1e:a9:72:
f7:8a:5f:a6:94:3b:0e:66:7e:91:c3:02:62:95:02:85:97:f0:
dc:e7:2f:fc:7d:83:04:8b:d9:41:fe:54:c1:19:9a:12:92:14:
7c:01:3d:22:3c:cc:49:16:38:a5:12:d7:92:c4:ff:fb:6b:30:
b1:b8:af:1d:33:81:8a:c6:58:7e:fa:71:04:51:1c:9c:1a:98:
5a:59:e9:49:80:62:3c:6b:b2:0f:ab:3c:dc:6b:99:38:48:67:
8e:05:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org