Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZcwnRm63lmnLw8hxtHd2RQoMOdw.roa
File: ZcwnRm63lmnLw8hxtHd2RQoMOdw.roa (raw, json)
Hash identifier: A9HrlkRCRUD/lw+NvIqfsWflSglS3MXOWqMh9ShrRJY=
Subject key identifier: 65:CC:27:46:6E:B7:96:69:CB:C3:C8:71:B4:77:76:45:0A:0C:39:DC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 07294741
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZcwnRm63lmnLw8hxtHd2RQoMOdw.roa
Signing time: Thu 10 Mar 2022 16:55:27 +0000
ROA not before: Thu 10 Mar 2022 16:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 185.255.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120145729 (0x7294741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 10 16:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65cc27466eb79669cbc3c871b47776450a0c39dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:c4:5f:a4:67:3d:6e:b1:c6:5a:71:8c:ee:
ba:bb:c5:0f:16:aa:99:cb:74:f1:26:ac:37:08:27:
60:87:31:41:09:97:a6:88:9f:1c:5d:eb:43:2e:25:
ea:0a:90:c7:9c:02:64:06:aa:53:27:17:bf:f9:3b:
50:64:27:0e:ab:73:23:ae:e4:30:1e:5d:60:9f:c8:
32:f2:8c:6a:f6:97:a7:a3:bc:01:4c:1f:ef:fb:74:
7a:3c:c5:da:0b:6b:fe:7d:2f:68:20:f7:c1:73:ed:
62:ba:6d:0c:fb:6a:98:c7:28:bf:8c:4d:65:16:da:
f7:d3:d9:97:1f:e0:d5:a9:d0:b5:98:2a:e2:ba:c7:
9f:8c:b5:16:ce:fa:1f:30:54:f2:6c:72:8e:e0:af:
82:bb:2a:20:f2:56:4d:d1:f0:26:2a:80:b3:6e:ba:
27:5f:c6:92:bc:90:e9:5f:10:87:83:7a:77:52:94:
18:69:08:17:9f:bf:fe:6f:77:59:1f:17:fc:f7:3c:
f8:29:13:11:38:78:78:85:bf:3c:19:fa:96:d3:2a:
c5:21:27:84:1c:87:dc:14:b5:59:a2:dd:27:59:df:
ed:dc:e0:53:1a:f8:02:9d:33:69:8c:09:1f:db:f6:
67:e0:c6:5a:ad:1c:69:69:9f:6f:d0:4d:8e:aa:0b:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:27:46:6E:B7:96:69:CB:C3:C8:71:B4:77:76:45:0A:0C:39:DC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZcwnRm63lmnLw8hxtHd2RQoMOdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:3a:ba:4a:00:ae:0f:72:ab:80:a5:97:d0:2e:e1:96:bd:12:
a7:63:70:7f:e1:b7:c6:24:b5:31:fc:76:cf:98:01:4a:a1:d8:
cf:7b:17:6e:d3:51:e2:9f:72:f9:2b:12:08:9b:84:f5:a9:36:
12:1c:50:90:19:26:a9:0b:2c:59:31:97:65:34:b0:db:a9:76:
43:9a:bf:1f:60:a1:8e:db:ff:7f:b7:53:bc:71:5e:cd:dd:53:
2b:1a:9a:db:f4:06:83:8a:61:ec:b7:d1:a7:de:9d:7d:ab:5c:
05:4b:1b:98:a7:69:a3:db:fb:93:35:c1:97:17:90:49:a2:ca:
3f:88:82:12:b7:79:fa:90:10:07:d9:4d:c8:b0:65:73:05:34:
3c:cc:cb:ba:17:5b:ee:ce:8a:ac:ab:d0:d7:7c:6e:2e:01:47:
59:dd:f0:9c:1d:89:ae:d9:5e:d7:e3:d6:3e:2f:c9:2c:07:39:
14:49:fc:bd:79:a9:f1:51:00:5c:59:73:bf:ed:3e:4c:76:32:
b3:c5:cb:a5:39:b2:0d:6c:80:d6:06:27:46:99:98:9b:d6:ab:
e6:01:80:24:42:11:3a:44:c9:30:50:64:ab:5f:6b:6c:fd:a3:
88:35:8e:b2:fd:55:55:0d:d4:dc:b5:51:34:aa:b0:66:b3:73:
83:ea:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org