Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/zr_UxWq8Zdb99LXWIMePSFjMZ0w.roa
File: zr_UxWq8Zdb99LXWIMePSFjMZ0w.roa (raw, json)
Hash identifier: ACwAmbnEJ4l9HifM9ThU4ujKVfRTNqReKPtLd/key2I=
Subject key identifier: CE:BF:D4:C5:6A:BC:65:D6:FD:F4:B5:D6:20:C7:8F:48:58:CC:67:4C
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 15575D2B
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/zr_UxWq8Zdb99LXWIMePSFjMZ0w.roa
Signing time: Sat 01 Jan 2022 15:06:37 +0000
ROA not before: Sat 01 Jan 2022 15:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200435
IP address blocks: 185.63.172.0/22 maxlen: 24
185.63.172.0/24 maxlen: 24
185.63.175.0/24 maxlen: 24
185.63.173.0/24 maxlen: 24
185.63.174.0/24 maxlen: 24
2a04:f600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358047019 (0x15575d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Jan 1 15:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cebfd4c56abc65d6fdf4b5d620c78f4858cc674c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:f6:6c:c8:7a:f3:ca:7c:12:71:ec:3d:c1:
fe:e2:26:ce:c6:dc:8a:ab:0f:4b:a6:e6:e3:d5:c5:
58:fa:38:16:12:70:b5:ad:e5:de:48:c1:87:32:e7:
be:4a:b1:d7:da:0d:4a:40:98:cb:70:58:e5:4d:0a:
bb:58:40:81:f7:ed:22:8f:20:04:52:bf:f7:e6:71:
b6:c4:55:42:27:48:0a:dd:89:c6:a1:84:b0:86:45:
63:e9:36:77:e1:84:43:4c:3a:89:47:32:06:cc:af:
c9:c0:f2:ba:ca:08:2e:9b:38:c7:3e:4d:c1:b9:f0:
ce:59:14:b7:be:2f:51:57:26:59:2b:45:a8:8a:94:
8e:a6:29:8b:89:90:23:53:cd:d7:f0:9a:26:be:75:
c7:bd:86:79:91:73:a8:dc:13:af:b7:01:42:d4:b4:
d3:33:28:ba:4c:0f:30:2c:e5:38:74:23:46:58:d6:
3f:d4:6b:cf:6a:65:d4:eb:31:82:63:8f:d4:3a:f7:
77:9b:29:02:63:b8:a3:ba:e1:f6:f2:d9:63:84:81:
89:d4:70:44:e5:92:63:af:67:44:35:73:81:42:37:
2c:f6:da:bf:d4:00:09:44:47:0f:48:3a:e5:7a:5c:
c8:d3:9b:6b:1c:d1:3d:5a:74:01:a9:76:0f:a9:25:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BF:D4:C5:6A:BC:65:D6:FD:F4:B5:D6:20:C7:8F:48:58:CC:67:4C
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/zr_UxWq8Zdb99LXWIMePSFjMZ0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.172.0/22
IPv6:
2a04:f600::/29
Signature Algorithm: sha256WithRSAEncryption
0f:20:ef:eb:b7:a3:7d:67:97:84:95:6e:30:08:ce:bb:8b:a6:
2a:2c:9d:d5:29:34:46:3e:c2:19:8f:13:71:10:7e:66:7c:4d:
57:29:38:09:73:45:f5:29:23:d9:4a:2b:d2:cd:c0:10:17:d4:
f9:a8:d9:27:06:38:a4:36:38:4a:39:b0:ab:13:ab:66:0a:a8:
ab:04:e0:6a:31:ba:61:c2:7c:bf:7b:ec:bd:14:45:a9:77:bf:
fd:ea:7e:61:e5:37:bd:e3:27:4e:cf:fb:72:ad:8f:5c:47:36:
26:96:a7:d9:18:00:c5:45:98:4a:d8:42:0c:84:a4:f9:25:7b:
bf:f4:a1:f0:0e:de:c1:6d:d7:12:45:0e:07:37:70:78:33:4b:
f8:1b:03:39:52:69:8e:67:07:64:40:5d:b0:1d:d5:54:5c:e1:
ec:6a:a7:43:54:cf:61:62:c9:4e:bd:99:6f:77:4e:48:65:1b:
06:1b:99:fa:13:d5:9e:d7:d6:70:24:73:96:fa:3b:56:04:8a:
da:cd:dd:9d:33:1f:da:fa:a3:8e:31:5c:36:67:04:a3:9d:ad:
44:1e:65:fe:a1:d7:62:d3:84:8c:b6:18:bb:5c:af:a9:23:26:
c3:5d:1e:c7:a7:e7:86:43:f9:4e:eb:fc:9c:62:93:ad:dd:f2:
d9:e2:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:44 2024 by rpki-client on console-fra.rpki-client.org