Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/z6e-Vx_oT4vhCwn7MEgR98HHPxg.roa
File: z6e-Vx_oT4vhCwn7MEgR98HHPxg.roa (raw, json)
Hash identifier: fTTeS31Yn+PLs3QJ8nQKqlaCPKllkbHVTYApV5iktak=
Subject key identifier: CF:A7:BE:57:1F:E8:4F:8B:E1:0B:09:FB:30:48:11:F7:C1:C7:3F:18
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 076B8C3F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/z6e-Vx_oT4vhCwn7MEgR98HHPxg.roa
Signing time: Tue 05 Apr 2022 08:02:03 +0000
ROA not before: Tue 05 Apr 2022 08:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212861
IP address blocks: 185.197.216.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124488767 (0x76b8c3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 5 08:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfa7be571fe84f8be10b09fb304811f7c1c73f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:ba:60:46:ad:d9:e3:3e:65:5e:06:b7:69:
de:ee:d7:c2:9b:cc:aa:fa:7b:58:50:89:af:14:b9:
62:7b:b8:08:a1:4e:d7:77:dd:c1:eb:51:03:cb:3d:
e4:be:32:59:69:f6:10:fd:25:a3:31:14:83:ba:3c:
70:b6:b1:49:dc:d3:dc:2d:fd:8a:50:c6:c5:c4:91:
c2:56:51:a5:5b:7c:14:90:5c:58:9b:e4:07:b2:8b:
81:f4:a3:2a:f5:96:11:32:81:e9:de:75:65:ec:46:
5d:55:d2:1a:14:f4:09:e2:e5:8c:49:ea:5e:57:14:
63:f6:4c:23:05:47:41:3f:82:f5:04:59:e5:2e:4d:
30:03:3e:4a:9f:11:da:e6:45:50:ab:0d:06:b9:57:
4f:fa:e4:19:d2:cc:ef:c0:0e:4d:97:2a:13:32:0b:
9f:d3:45:b8:8f:65:7c:50:3f:4a:26:b3:40:17:7f:
91:6a:c2:5c:52:b9:05:bd:e9:e2:1c:27:3d:06:56:
a1:50:29:fe:17:e6:80:31:2a:3b:29:ab:8e:df:ca:
15:6e:40:ec:7a:86:99:b7:64:33:dc:e5:08:bf:44:
03:a4:dc:c0:18:eb:70:63:49:41:1d:83:1a:89:ea:
dd:91:3f:af:94:37:33:b2:f3:4b:5b:62:60:96:44:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A7:BE:57:1F:E8:4F:8B:E1:0B:09:FB:30:48:11:F7:C1:C7:3F:18
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/z6e-Vx_oT4vhCwn7MEgR98HHPxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.216.0/22
Signature Algorithm: sha256WithRSAEncryption
54:01:2f:04:bf:09:49:f7:83:0c:1a:62:08:e8:03:e0:21:70:
bd:6d:af:cf:ed:bf:f5:00:b6:ce:65:19:ab:fb:b2:17:58:3b:
9f:ac:a4:b9:f8:ed:3d:96:cd:de:28:5f:ed:50:7d:5e:dc:17:
b7:ff:aa:07:dc:49:2a:e4:75:f3:1f:ed:95:1a:a0:a3:59:4a:
1a:7c:d8:92:49:15:99:af:8a:5f:1d:53:2a:56:78:9c:62:5e:
7e:57:01:4b:1a:e7:5f:dc:8a:55:15:7e:a3:ed:a2:67:60:16:
5b:55:05:15:60:0a:81:f3:30:b6:d6:25:09:fa:4b:bb:c6:c8:
21:fd:61:09:68:6b:0c:60:fe:1a:5b:4e:25:fa:01:78:41:04:
da:e3:c7:ca:57:10:ac:56:10:c5:7c:16:e9:9a:33:23:45:c0:
65:e0:46:11:cd:13:1d:a5:0d:23:37:19:bf:12:c2:5d:c0:9d:
8e:ca:20:e7:69:26:dd:4b:bf:c9:a9:58:5c:5a:ac:86:c5:69:
00:c4:23:b1:f2:b6:e5:de:8f:23:a1:21:fc:51:93:7b:3f:45:
99:a6:20:61:30:4d:79:dc:9b:88:7b:ba:4b:14:3f:7c:4b:e1:
08:7f:74:1d:f3:e4:1f:26:90:bb:46:9c:f8:ea:21:c0:58:b8:
d6:cb:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org