Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZxihpCLXT5THt96ALBD6W_waojI.roa
File: ZxihpCLXT5THt96ALBD6W_waojI.roa (raw, json)
Hash identifier: HzFEBvaBtvmxcP5t0BMN6lQq1CtUUMWrtwuU6yt80hs=
Subject key identifier: 67:18:A1:A4:22:D7:4F:94:C7:B7:DE:80:2C:10:FA:5B:FC:1A:A2:32
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 066292A0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZxihpCLXT5THt96ALBD6W_waojI.roa
Signing time: Mon 03 Jan 2022 13:08:48 +0000
ROA not before: Mon 03 Jan 2022 13:08:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212830
IP address blocks: 185.128.52.0/22 maxlen: 24
194.124.68.0/23 maxlen: 24
194.124.70.0/23 maxlen: 24
185.223.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107123360 (0x66292a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 3 13:08:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6718a1a422d74f94c7b7de802c10fa5bfc1aa232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:3c:bc:df:5b:ab:16:ff:52:31:05:a7:35:
55:8f:8c:19:ef:b2:d1:2c:df:cf:e4:07:86:f2:44:
83:22:7b:20:e5:9f:7b:f8:69:43:2a:65:6b:68:7b:
69:c6:43:3a:1b:16:66:d2:ba:d0:3a:8e:92:04:63:
97:44:14:7e:57:11:35:3f:35:28:67:8d:87:f5:61:
a2:16:ad:01:5f:54:6b:31:23:9c:b8:b5:22:52:69:
00:43:5f:7b:86:c4:7f:73:53:13:c0:51:69:83:f9:
71:3d:9a:a4:e6:55:dd:b2:7a:0a:8b:6c:d3:01:3a:
c5:4d:9f:af:7c:59:81:59:93:1a:0f:04:64:ff:e1:
60:31:f5:8d:40:a8:c2:ec:17:7c:14:df:2a:a2:24:
b8:91:89:fc:07:fd:fe:ff:b5:45:4c:3a:67:b0:37:
f7:f8:9b:d8:43:7b:0e:7f:56:a3:d2:f2:e0:39:8b:
ee:67:a4:3e:ce:69:96:7c:8e:d0:46:f0:88:74:e2:
82:3b:ee:24:cf:68:f4:91:3d:dc:1c:d5:2f:9d:81:
9b:eb:6a:06:3f:71:85:bd:05:cd:da:96:41:ea:54:
d0:48:07:c5:fe:68:60:4a:bd:8c:5a:87:c8:be:bd:
f7:e7:e4:1f:30:d2:4f:cf:48:d4:24:59:8a:f8:31:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:A1:A4:22:D7:4F:94:C7:B7:DE:80:2C:10:FA:5B:FC:1A:A2:32
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZxihpCLXT5THt96ALBD6W_waojI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.52.0/22
185.223.60.0/22
194.124.68.0/22
Signature Algorithm: sha256WithRSAEncryption
90:3c:a7:94:10:be:c2:1e:ae:5e:f1:c3:22:f0:1a:d3:fa:32:
98:3e:42:4e:14:49:f7:a0:2f:75:7b:0f:c3:cd:a0:51:61:d9:
fc:50:f1:b0:a4:55:c6:c0:99:ae:43:38:fd:7c:a9:fc:54:45:
55:ae:be:a6:32:c9:73:7d:4f:73:1c:63:1f:86:bf:ed:a6:ea:
2e:5d:12:bc:6f:f9:76:64:a9:40:d6:3b:9a:42:db:d8:55:37:
c7:84:07:48:65:f0:77:9e:d9:98:14:1f:7f:c6:95:b4:55:f1:
24:1d:62:b6:68:24:16:77:10:b8:57:bd:78:6d:58:65:f1:62:
ed:97:95:ab:43:86:e2:e9:49:72:56:5b:9c:52:47:0a:d1:4c:
23:5b:e1:dd:6c:6b:2e:a2:07:29:85:16:02:9b:ef:6a:ba:77:
9f:50:ce:7c:61:d9:d0:c6:fd:7e:c4:07:ad:e4:9c:22:bf:f3:
cc:63:75:02:cc:ad:72:61:c0:08:5e:81:62:b2:e4:ed:e5:b6:
27:b6:d6:67:e5:23:f3:f8:aa:1f:7a:ef:96:eb:97:2b:3d:52:
1e:b6:67:25:76:59:b9:be:bb:9a:56:94:4d:39:65:0f:10:7f:
d9:e0:4a:6b:c1:4b:b9:60:ce:08:98:d1:0c:a0:38:06:f5:92:
b3:f2:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org