Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Z_TTaSf15-T-6EMo9IfX0X2cFQk.roa
File: Z_TTaSf15-T-6EMo9IfX0X2cFQk.roa (raw, json)
Hash identifier: Ky2EwPWVeSk9rTMhW+UzLMhRN0gz3v/72WYJJuUygPo=
Subject key identifier: 67:F4:D3:69:27:F5:E7:E4:FE:E8:43:28:F4:87:D7:D1:7D:9C:15:09
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0183F0CEDBEDE03D54FC3B6ABDB4FA9D6419
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Z_TTaSf15-T-6EMo9IfX0X2cFQk.roa
Signing time: Wed 19 Oct 2022 15:13:51 +0000
ROA not before: Wed 19 Oct 2022 15:13:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 185.225.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f0:ce:db:ed:e0:3d:54:fc:3b:6a:bd:b4:fa:9d:64:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 19 15:13:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67f4d36927f5e7e4fee84328f487d7d17d9c1509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:17:5e:6c:d5:86:fb:ef:66:4a:47:4e:c5:
5b:83:04:4a:04:9f:0c:6a:6d:c5:1f:b7:3e:e9:28:
b0:3e:91:36:ea:0f:3a:5d:7e:d7:fe:4c:6e:47:81:
c8:bc:50:bc:82:10:01:d2:de:ee:32:97:3f:07:0f:
c7:46:35:b8:cc:37:1b:30:28:64:c1:06:2b:5c:8e:
05:00:ef:04:07:29:4a:50:be:4d:a5:5f:de:32:49:
db:e2:4f:a1:a8:ce:2c:57:1a:14:e2:5a:eb:d1:7e:
bb:71:e9:70:d7:5a:6b:31:13:11:ef:14:0c:93:82:
15:46:7e:7a:3f:8f:7c:0d:cd:7f:74:05:79:05:15:
8f:3c:f8:ac:ab:d9:e1:96:e8:d5:39:df:89:7e:3e:
90:ec:ac:bd:74:cf:73:0a:bd:96:2d:36:8d:ff:90:
92:dd:7d:f8:e5:98:77:e9:7c:3a:e3:02:22:bf:0e:
c0:0a:89:29:c2:a3:e0:88:85:1b:13:71:41:5b:83:
1b:51:ca:04:ac:97:a7:e6:0b:a4:24:91:da:ff:35:
25:db:66:31:58:10:26:ce:cb:39:b5:fb:cf:e1:bb:
96:bf:06:52:6c:61:01:ec:a5:f7:44:00:13:79:c0:
1b:0c:43:77:fb:1b:bf:6d:f2:54:bc:c6:de:09:ed:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:D3:69:27:F5:E7:E4:FE:E8:43:28:F4:87:D7:D1:7D:9C:15:09
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Z_TTaSf15-T-6EMo9IfX0X2cFQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.2.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c4:eb:bd:aa:b3:39:5d:f4:15:0e:28:ee:08:e3:51:bf:33:
ff:3d:6c:32:99:2f:46:24:8c:5c:a8:13:19:b1:fb:81:df:d2:
89:99:f2:c7:0a:e1:b9:93:2d:f7:92:dc:4c:e4:66:76:b5:61:
73:23:48:19:a1:67:33:9f:ce:e8:ad:d1:67:2c:31:37:58:39:
1c:d5:9e:9c:53:63:57:72:c8:fb:55:3f:29:09:0a:94:91:11:
5a:da:6b:95:3e:00:eb:bb:7a:cb:a7:1b:a6:92:2c:a8:23:47:
80:e2:53:a7:cc:fe:8d:b9:71:5f:6d:b4:b0:73:f1:4c:2a:0d:
69:57:25:03:4e:ee:b6:45:42:2a:94:8d:8b:d6:6f:35:72:d8:
73:fb:85:f2:ca:d7:f4:66:53:4c:a4:a7:d6:f0:16:94:2b:b2:
ae:7c:db:13:8d:75:3a:97:b0:24:78:ee:38:f9:dd:27:18:1a:
fb:ca:31:21:10:57:8f:f0:e8:fd:3f:77:f7:3a:13:2d:f9:f7:
c5:e8:6b:27:66:da:8e:b5:52:02:4b:38:47:7a:e3:c5:56:38:
bd:4f:84:e8:0f:0b:18:db:c4:de:ec:91:86:13:7b:c0:06:a0:
5e:16:f1:08:c2:88:dd:31:55:02:5e:3d:80:cf:40:89:fc:77:
aa:42:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org