Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/zj44aoccKIC2-GduQUskhfZSNbo.roa
File: zj44aoccKIC2-GduQUskhfZSNbo.roa (raw, json)
Hash identifier: Hx+EUfTiaVCM/m1EuJnGbRi57LQnoqkNwJTRvos7XTE=
Subject key identifier: CE:3E:38:6A:87:1C:28:80:B6:F8:67:6E:41:4B:24:85:F6:52:35:BA
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 094950C5
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/zj44aoccKIC2-GduQUskhfZSNbo.roa
Signing time: Sat 01 Jan 2022 05:00:50 +0000
ROA not before: Sat 01 Jan 2022 05:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 185.198.4.0/24 maxlen: 24
185.198.5.0/24 maxlen: 24
185.198.7.0/24 maxlen: 24
185.198.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155799749 (0x94950c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Jan 1 05:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce3e386a871c2880b6f8676e414b2485f65235ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:90:d8:ad:49:19:e5:cf:7d:89:a7:ef:3b:
71:ce:b0:b6:49:f5:44:9d:c5:f6:91:17:62:08:c1:
41:15:ec:91:9e:08:00:c7:84:ce:e5:da:79:c2:7f:
19:44:57:f5:e6:20:2f:7a:35:5d:70:15:63:e7:7d:
05:19:a5:27:17:b2:9c:e5:85:cd:a9:4c:ac:c1:9b:
6c:5c:c8:6a:93:0b:cf:a0:53:27:fd:42:d2:28:20:
f7:c2:d2:c5:e2:d6:00:33:13:e9:8f:7c:02:74:ad:
44:1a:67:c2:b5:80:19:0f:c9:34:2f:22:4c:f0:0a:
1e:c0:a2:b7:05:6a:ea:78:18:39:6d:f3:0d:e9:7f:
75:2d:20:67:12:0e:30:b8:4a:46:25:d0:34:1b:9b:
65:a8:d3:8f:f6:46:4b:88:24:de:df:e3:05:25:2a:
0b:1b:af:ac:aa:77:3d:c1:65:5a:f0:42:5a:18:4a:
68:12:77:fc:95:5e:0f:48:e9:52:ab:8b:21:1c:48:
78:0f:9c:4f:2b:02:5d:ca:75:39:e2:dd:bf:57:64:
e7:04:a1:56:25:1b:7a:11:4d:33:b5:ce:81:69:f9:
98:dd:24:8d:d7:db:ce:f8:ae:21:7f:46:0c:99:4b:
a5:c6:ba:81:c7:19:90:3f:50:75:35:7a:60:7d:ba:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:38:6A:87:1C:28:80:B6:F8:67:6E:41:4B:24:85:F6:52:35:BA
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/zj44aoccKIC2-GduQUskhfZSNbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.4.0/22
Signature Algorithm: sha256WithRSAEncryption
af:c9:d3:b1:e6:9a:05:41:d7:23:4c:fd:21:0d:0f:57:56:f7:
83:e5:97:be:1d:9b:0a:f5:5b:56:5f:dc:b5:1b:c2:0e:6a:f5:
d6:de:f4:6b:5c:1a:0d:51:fe:3b:ac:db:43:35:d7:13:2b:9d:
08:50:e7:7b:25:91:ec:fa:ee:ab:e8:68:35:cd:e9:92:e0:af:
49:09:92:3d:2c:c8:14:30:6d:0c:6f:1a:cb:80:2e:89:c0:90:
5c:f3:cc:9d:48:2b:80:3e:62:d8:d2:4d:63:13:ff:cf:ec:04:
af:27:82:96:9c:e7:b4:16:a4:40:70:d4:c8:8e:51:57:ec:c4:
83:c1:72:c3:3e:2e:02:d3:49:e3:0c:cf:07:5f:1e:c9:c7:71:
3f:8f:9b:94:d3:b4:83:d4:d3:d5:24:6e:ec:28:da:91:a4:72:
68:aa:bf:d7:bf:2f:e1:78:43:32:92:b6:84:50:60:e6:6c:89:
c7:8e:98:47:f6:df:68:9f:1b:1d:4d:aa:32:87:26:3a:7c:e4:
96:a7:de:82:da:f7:d5:3e:f9:76:e7:c0:91:10:66:07:73:7b:
54:64:d2:07:b7:3b:2a:fc:56:39:ae:0f:79:56:ca:30:0b:24:
99:34:76:f7:c9:f2:ed:0c:b3:a5:b8:8c:48:97:e8:0f:90:ce:
62:45:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:49 2024 by rpki-client on console-fra.rpki-client.org