Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Z3bccxZvgHRPehG4mwSqFRaPutw.roa
File: Z3bccxZvgHRPehG4mwSqFRaPutw.roa (raw, json)
Hash identifier: 3uEZCJYrG5y11gh96vdE70xi7S9lc1UgFn3r6+JnIFM=
Subject key identifier: 67:76:DC:73:16:6F:80:74:4F:7A:11:B8:9B:04:AA:15:16:8F:BA:DC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17CB5E56
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Z3bccxZvgHRPehG4mwSqFRaPutw.roa
Signing time: Sat 01 Jan 2022 04:54:28 +0000
ROA not before: Sat 01 Jan 2022 04:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133480
IP address blocks: 185.190.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399203926 (0x17cb5e56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6776dc73166f80744f7a11b89b04aa15168fbadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:18:07:38:56:99:5f:ac:be:e6:7e:26:c6:
42:88:a2:d6:15:3e:43:3a:9c:bc:af:f4:a0:94:55:
c2:dd:c4:99:3d:50:0b:0f:9a:f8:fb:7a:18:2f:57:
5d:5f:78:21:ba:5f:66:db:46:5a:c0:00:c1:3c:e7:
96:0d:6a:5b:38:85:5f:bc:d6:2a:b9:c6:78:3a:a0:
5c:54:d7:c6:5f:de:e4:5f:e5:61:f2:29:2e:e7:be:
17:4e:cf:c7:72:91:5d:9c:6b:12:9d:cc:85:5a:98:
27:62:71:70:18:6a:eb:4a:5e:87:b9:d0:56:67:18:
4a:67:67:5d:96:be:c9:d5:39:1c:18:9c:7b:49:78:
c5:74:a1:81:3c:de:48:90:5d:66:25:70:76:39:15:
10:14:fa:ea:bc:86:38:de:d3:69:fb:f8:fe:37:af:
96:36:ba:8b:60:a8:ba:3f:32:73:cb:ac:26:50:d6:
e5:02:9b:87:27:81:16:00:05:30:d3:57:7a:f2:8c:
77:fd:35:64:50:37:1b:94:53:f2:5f:e6:58:6f:d5:
e1:27:de:41:a7:44:f2:2f:d0:22:cc:63:9b:bf:33:
13:94:70:4c:e7:46:96:62:cd:ca:ee:20:14:2c:54:
c6:8c:d2:f8:5f:00:a1:1f:10:23:18:44:13:c9:fe:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:76:DC:73:16:6F:80:74:4F:7A:11:B8:9B:04:AA:15:16:8F:BA:DC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Z3bccxZvgHRPehG4mwSqFRaPutw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.83.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f5:63:59:46:71:16:45:03:67:63:6c:8a:d2:07:57:02:a8:
b3:ff:90:12:42:d3:5d:fb:03:a4:54:a0:05:c8:fc:a8:2a:30:
5a:d9:8d:1c:30:fb:50:a6:0d:4c:2e:01:42:cc:6f:0b:4c:6b:
14:42:6d:6a:b8:03:76:e4:f9:d6:a5:bd:3b:16:37:12:db:06:
7d:b2:af:91:57:00:06:ef:a2:1b:02:43:88:fa:f0:4f:38:c9:
c5:79:b0:d1:53:1e:1d:3e:61:1a:e5:fd:f7:cd:ea:12:06:25:
d3:a8:ec:4c:35:da:21:0c:0c:d2:bf:6c:56:a4:27:86:a5:e6:
5b:11:be:6e:ce:d7:36:59:24:f2:3c:63:5d:0e:49:81:87:68:
09:2b:6e:d6:c7:6f:77:6e:7a:ab:e7:d4:7e:26:76:12:3c:c1:
37:1e:eb:bc:f4:bb:99:a4:22:ac:0c:36:a7:5c:7d:2c:f4:f2:
f5:95:d9:0d:0b:ee:75:50:ca:b8:7b:79:0d:21:5e:ee:43:ec:
54:2d:fe:d5:d6:69:c2:ac:98:c4:1b:95:23:06:aa:89:62:f9:
7e:2a:a1:1d:92:4a:e7:7a:67:88:38:29:28:01:f0:f5:f4:87:
ca:4c:19:23:84:12:ff:7c:49:3c:6e:54:20:99:aa:18:63:b4:
9b:ae:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org