Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/0_ZkWjQzSKCfk9sKEIGZAabVQlI.roa
File: 0_ZkWjQzSKCfk9sKEIGZAabVQlI.roa (raw, json)
Hash identifier: eobQrDDTo+5tfnuxB8AkyhNEoUUL4eUHM7vSLK/nWXk=
Subject key identifier: D3:F6:64:5A:34:33:48:A0:9F:93:DB:0A:10:81:99:01:A6:D5:42:52
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 0FD19AE0
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/0_ZkWjQzSKCfk9sKEIGZAabVQlI.roa
Signing time: Sat 01 Jan 2022 14:07:23 +0000
ROA not before: Sat 01 Jan 2022 14:07:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 17782
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265394912 (0xfd19ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Jan 1 14:07:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3f6645a343348a09f93db0a10819901a6d54252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0c:74:04:4e:d2:d6:bf:1c:7b:32:f9:17:1f:
ce:b9:7a:92:c7:32:91:0d:d7:a5:c2:22:8c:f2:21:
24:e2:84:39:8c:ac:ce:2b:6f:98:ee:6b:a2:80:27:
d8:45:12:71:f1:4d:b0:af:33:a4:f9:cd:70:5e:0f:
8c:58:31:c0:47:d8:5c:c5:05:f8:dd:eb:84:a2:57:
7f:f6:8d:53:04:8b:32:1b:cb:b9:c4:a0:fd:cd:f1:
5a:8b:ab:87:d6:40:ea:f3:df:d1:74:e5:05:36:5b:
4c:a9:67:f1:fe:ae:c5:14:8e:77:65:46:00:e2:07:
c8:98:00:38:fe:39:57:08:0b:64:12:95:92:bb:85:
9a:36:01:71:ba:4a:4f:4f:93:d4:11:00:77:15:c4:
50:f8:0a:a4:41:1e:3f:74:63:7b:c8:09:67:24:1f:
cf:7b:f5:3f:62:16:b3:59:3f:7d:2f:54:38:41:2d:
11:b6:f8:ed:6a:24:24:e3:e7:6c:8f:02:bf:8b:7f:
4f:b3:c5:e9:dd:88:b3:8c:d7:0f:61:35:8d:2d:2c:
ae:43:4f:86:9e:99:aa:49:ed:08:d1:bf:6c:09:2d:
46:45:0b:ea:4c:18:17:11:72:13:86:27:d0:7e:fd:
93:ef:25:46:d5:b4:24:5b:ba:75:02:ec:12:b7:8a:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:64:5A:34:33:48:A0:9F:93:DB:0A:10:81:99:01:A6:D5:42:52
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/0_ZkWjQzSKCfk9sKEIGZAabVQlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:cd:a4:82:76:3a:4a:00:7d:7b:75:9c:5c:08:f4:ea:bf:59:
39:d9:c3:67:6c:30:fd:f3:e1:82:e9:4a:38:04:b4:da:5f:d5:
bb:26:52:61:fe:50:c7:89:50:48:1a:9d:7b:57:4c:73:59:bd:
46:3a:65:08:11:10:a9:00:95:70:28:d1:77:0b:3d:d0:5d:1c:
38:61:b7:dd:17:b6:8a:26:55:de:7d:a9:d0:49:52:fe:43:a1:
f1:02:ab:4d:ae:4e:ef:be:f6:17:3e:58:69:8c:3b:76:6e:cd:
c1:46:3d:3d:54:61:43:1a:fd:91:f2:10:5b:73:82:06:5a:dd:
0e:60:a6:ae:23:1a:d0:d7:3a:a4:4a:71:f0:d0:7b:91:b5:c3:
43:f4:ec:1d:c5:ca:b4:41:26:7a:fa:d4:ac:d3:ed:81:7c:79:
2c:3e:37:3d:ea:cb:b7:26:f7:85:66:85:e7:58:96:48:c7:b7:
29:7f:aa:08:96:8c:3c:b1:a5:72:1d:ca:56:35:64:cb:30:02:
90:97:09:c2:d3:0b:43:e3:55:12:12:3d:f9:d8:d1:da:6b:8e:
20:00:ac:85:c4:a8:a1:f6:3a:b8:85:cc:6a:25:fa:31:2f:00:
d1:ad:66:61:50:53:5d:14:50:da:56:2c:16:14:46:e1:af:10:
72:50:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-fra.rpki-client.org