Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/fzT1ZBMFmwn2QF6rvwh9JFhrl0w.roa
File: fzT1ZBMFmwn2QF6rvwh9JFhrl0w.roa (raw, json)
Hash identifier: VjN1GTPECokG5OrHBX+ZcV+ZYwu70qmAjtDBa+rUqCo=
Subject key identifier: 7F:34:F5:64:13:05:9B:09:F6:40:5E:AB:BF:08:7D:24:58:6B:97:4C
Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial: 0184BD9E820514DD9DAF27F99770033A1747
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/fzT1ZBMFmwn2QF6rvwh9JFhrl0w.roa
Signing time: Mon 28 Nov 2022 09:43:12 +0000
ROA not before: Mon 28 Nov 2022 09:43:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210433
IP address blocks: 185.81.200.0/22 maxlen: 24
2a03:6260::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:9e:82:05:14:dd:9d:af:27:f9:97:70:03:3a:17:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Validity
Not Before: Nov 28 09:43:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f34f56413059b09f6405eabbf087d24586b974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:2f:b8:5c:08:81:41:66:41:e5:99:a7:64:
06:e4:9e:25:06:bf:95:3b:3c:ba:91:59:1d:3c:4d:
c5:7e:53:bf:03:f8:4e:00:a5:8c:e8:4d:ab:9f:19:
36:64:8f:4e:a5:2f:21:35:6f:a7:0d:d8:97:83:72:
34:3a:2f:c5:80:03:5a:ff:92:71:e2:f8:81:c7:44:
c6:b7:a1:c9:f6:33:73:80:0c:df:96:be:39:5e:3a:
6d:e9:d1:d8:7a:e2:0a:61:b0:8e:4a:86:b4:98:30:
db:85:0a:f1:00:59:8c:a0:f8:41:4c:f7:89:f0:93:
93:bf:bf:cb:be:b0:a5:cc:90:6a:71:e8:19:d2:af:
b6:07:b6:6f:20:db:89:67:b3:fc:c6:52:1b:71:06:
e2:94:7b:bd:1f:4f:a8:41:ad:e0:85:9d:1d:2e:a3:
fc:e2:a6:a2:47:d4:67:12:b1:60:d8:2e:84:dc:2d:
df:d4:d3:65:60:51:21:45:ef:64:83:cc:1e:4c:b8:
66:49:a6:4d:6c:7f:28:92:54:fa:f8:d4:4f:fc:7f:
d9:28:ce:0c:48:46:cb:20:a3:a8:7b:7d:b8:d1:30:
03:36:ed:ef:94:63:31:23:4d:6a:36:11:96:bb:cd:
f1:0d:8d:eb:cf:c3:a1:94:25:b8:fb:eb:a1:23:9b:
5e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:34:F5:64:13:05:9B:09:F6:40:5E:AB:BF:08:7D:24:58:6B:97:4C
X509v3 Authority Key Identifier:
keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/fzT1ZBMFmwn2QF6rvwh9JFhrl0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.200.0/22
IPv6:
2a03:6260::/32
Signature Algorithm: sha256WithRSAEncryption
32:b6:53:6d:fb:be:ef:53:64:27:c1:c3:04:2c:6c:a4:de:00:
1e:ac:0f:85:f6:35:90:f9:b2:b7:81:46:79:3b:c8:ef:2a:63:
ee:33:41:f4:03:cf:7c:25:99:57:fb:6a:b1:2e:7b:36:25:c2:
4b:db:20:7f:c9:d3:88:ff:16:cf:e2:24:10:91:02:3a:6e:b6:
bb:c1:6b:5d:29:78:00:6f:12:d2:db:ea:ca:dc:94:10:d4:46:
4f:fe:3d:d1:35:60:82:b3:87:2d:72:76:6e:8d:62:8d:1d:d9:
3f:37:00:fb:7d:da:e8:55:26:76:38:92:af:00:c7:95:2e:35:
44:3f:ad:a4:8c:94:02:66:3b:39:f8:62:00:5a:92:88:f1:9f:
29:46:8b:3a:d6:96:ef:c6:b4:cb:f9:e3:e2:90:4e:65:3f:fa:
46:60:33:2b:41:59:fe:c3:93:28:aa:a3:c9:aa:4c:8a:12:91:
6f:5b:8e:29:c3:e1:86:87:a3:e9:5b:58:fa:d8:b2:69:3f:e0:
87:51:b9:e3:b8:02:45:ba:43:c2:e6:81:2b:50:f7:30:44:f3:
5d:ef:3e:37:55:33:69:e0:83:88:2b:95:a3:df:52:e1:dc:c6:
c5:0c:60:ef:39:97:d0:ab:1d:f4:7e:a1:57:13:14:88:52:0e:
e7:c6:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:44 2024 by rpki-client on console-ams.rpki-client.org