Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/ZqJGb7W44i09tvdZ5iAEvgen6eM.roa
File: ZqJGb7W44i09tvdZ5iAEvgen6eM.roa (raw, json)
Hash identifier: wqe97ZOkvQy7Kg6PgAV827Vl0rkRxivwl4tfG7nlOE0=
Subject key identifier: 66:A2:46:6F:B5:B8:E2:2D:3D:B6:F7:59:E6:20:04:BE:07:A7:E9:E3
Certificate issuer: /CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Certificate serial: 0183A3316E565B0ACD43A079638506C93D98
Authority key identifier: 1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/ZqJGb7W44i09tvdZ5iAEvgen6eM.roa
Signing time: Tue 04 Oct 2022 13:31:09 +0000
ROA not before: Tue 04 Oct 2022 13:31:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201895
IP address blocks: 185.60.160.0/24 maxlen: 24
185.60.163.0/24 maxlen: 24
185.60.162.0/24 maxlen: 24
185.60.161.0/24 maxlen: 24
2a02:73a0:50::/48 maxlen: 48
2a02:73a0:60::/48 maxlen: 48
2a02:73a0:70::/48 maxlen: 48
2a02:73a0:90::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:31:6e:56:5b:0a:cd:43:a0:79:63:85:06:c9:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe8ee87853406cd8d04ba8e39bf7a51ffb8a3bc
Validity
Not Before: Oct 4 13:31:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66a2466fb5b8e22d3db6f759e62004be07a7e9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cc:1b:6d:7c:98:d5:f2:34:d1:57:45:5f:a0:
f8:d0:71:16:32:22:68:83:e2:db:c2:e6:13:98:e6:
90:d0:ae:3e:0d:ac:95:6b:b9:3e:81:31:ef:f0:cf:
66:1c:d2:f9:e0:ef:63:ca:71:59:f0:7c:b1:c3:4b:
35:a9:d0:28:c1:31:b5:a6:20:d2:e5:97:42:72:6b:
8b:38:e8:19:62:db:ac:87:47:e0:d4:b3:24:9f:e0:
df:61:a1:03:31:25:8a:00:7d:80:4c:9d:ce:ea:01:
30:3d:13:5d:af:9a:a8:44:99:d9:c3:1d:46:74:81:
8e:13:0a:d8:81:66:be:8d:a7:b3:cc:34:dc:84:80:
53:c4:cd:41:4a:6d:c2:c6:e5:f2:9d:b0:22:94:e7:
e6:e1:31:c5:1f:5b:c0:e1:cd:53:a5:73:14:69:36:
38:ea:a4:09:ee:a8:35:ea:08:53:d2:ed:b6:30:d0:
2e:a0:c4:44:28:d8:46:d9:36:5d:8a:0b:10:41:e0:
59:37:13:a7:8f:30:64:fa:e5:94:cb:fa:1e:93:fa:
1f:84:bf:2c:27:22:b3:c7:86:aa:2f:d1:f1:bb:52:
6f:d6:96:cc:15:ba:ea:a4:09:8e:28:e0:e8:da:5a:
6b:d0:35:61:32:8b:c1:5c:ec:f7:7b:66:2e:61:87:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:46:6F:B5:B8:E2:2D:3D:B6:F7:59:E6:20:04:BE:07:A7:E9:E3
X509v3 Authority Key Identifier:
keyid:1F:E8:EE:87:85:34:06:CD:8D:04:BA:8E:39:BF:7A:51:FF:B8:A3:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-juh4U0Bs2NBLqOOb96Uf-4o7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/ZqJGb7W44i09tvdZ5iAEvgen6eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/00441d-80e4-4d18-9581-5c5eab8a9e3c/1/H-juh4U0Bs2NBLqOOb96Uf-4o7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.160.0/22
IPv6:
2a02:73a0:50::/48
2a02:73a0:60::/48
2a02:73a0:70::/48
2a02:73a0:90::/48
Signature Algorithm: sha256WithRSAEncryption
bb:b3:0e:b6:2b:49:e3:ab:11:dc:40:d9:79:4c:b6:e7:70:54:
bd:d1:38:25:95:5c:40:33:c0:bb:ec:3b:ce:4c:29:f9:2d:61:
be:b0:54:fc:0f:70:8c:86:e7:65:22:43:e5:f4:9f:95:22:b3:
76:d3:44:9b:5c:b1:5b:94:c5:25:36:b0:9b:29:86:97:46:e6:
cb:e0:33:56:b7:90:20:76:d4:6f:d6:75:96:cc:c6:e3:f1:88:
4a:cf:9c:8d:35:69:aa:f0:e4:2f:3e:f3:82:0a:5d:c8:b7:45:
b4:41:d3:13:06:68:12:74:63:36:83:d9:d7:e8:e7:7f:fd:91:
65:89:1c:02:05:a2:18:ed:88:f0:e2:5b:79:03:4a:8a:9c:cd:
62:87:7f:fb:70:85:61:7e:3b:52:0d:57:f7:dc:2a:3a:90:bb:
37:a1:5e:9f:d7:04:22:7c:aa:4c:f9:a3:35:e1:06:84:96:ef:
37:51:43:f3:ce:79:34:10:9b:02:5d:7e:8b:66:3e:25:66:75:
9c:32:fd:62:f9:25:1c:02:52:d5:2d:56:98:28:f5:6e:d4:09:
03:44:b4:d3:d2:4b:c3:ed:10:47:dd:0f:90:72:13:b6:03:51:
c4:13:77:f6:f4:3f:de:40:90:10:1c:37:c4:a7:70:2c:03:6b:
a2:ff:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-fra.rpki-client.org