Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/rYJH2PeiHHXxLQTAkjLTZEbE_y0.roa
File: rYJH2PeiHHXxLQTAkjLTZEbE_y0.roa (raw, json)
Hash identifier: LartQS3j8dO7N77crEJKibVuhJbgUjFmOjNkWf+OeYE=
Subject key identifier: AD:82:47:D8:F7:A2:1C:75:F1:2D:04:C0:92:32:D3:64:46:C4:FF:2D
Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Certificate serial: 018570C2C185303668B703805EB704AFE1CA
Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/rYJH2PeiHHXxLQTAkjLTZEbE_y0.roa
Signing time: Mon 02 Jan 2023 04:34:49 +0000
ROA not before: Mon 02 Jan 2023 04:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61428
IP address blocks: 185.6.84.0/22 maxlen: 24
2a03:dc0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:c1:85:30:36:68:b7:03:80:5e:b7:04:af:e1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d
Validity
Not Before: Jan 2 04:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad8247d8f7a21c75f12d04c09232d36446c4ff2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:b8:7c:ae:01:9f:8c:1b:a5:2d:20:0e:06:
cc:81:43:d7:08:71:42:fb:86:bc:b5:8a:f4:c2:5c:
a6:cc:67:91:c4:e1:cf:55:61:58:6e:0c:cb:be:1d:
c3:2e:de:1c:d8:46:96:37:14:ff:fc:34:32:0e:bb:
b5:c4:0c:f8:b0:65:5c:0d:85:86:ee:76:18:ec:9c:
e3:d8:64:ea:f1:40:a6:7d:f0:54:7e:ba:14:79:2e:
02:24:f0:72:09:a3:55:71:bd:32:c2:5a:fd:c9:7a:
b2:64:fa:1e:03:b5:3e:4b:88:c3:63:a2:60:bf:6c:
40:24:17:28:f6:bc:8e:b3:af:39:2d:76:aa:2f:6f:
a3:9d:d2:db:0e:c6:37:09:e5:05:1d:6a:2f:f0:2a:
5a:71:d5:8e:cc:64:53:d3:b8:30:6a:a6:80:a6:5f:
5c:5e:47:5e:28:70:95:a5:27:44:78:51:cc:fa:73:
b1:ea:c1:93:d2:19:80:a1:b1:54:dc:0c:52:fd:4e:
2d:0f:dc:a8:aa:e0:8a:86:4f:ec:e2:c8:03:e2:8e:
4d:0a:83:18:20:36:db:6b:5d:b6:d4:f2:98:83:2d:
9e:c3:16:18:b0:ed:4d:61:b3:b1:8e:83:4e:f6:01:
40:e8:f2:e6:c0:9c:38:27:30:07:b4:d6:b5:49:b6:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:82:47:D8:F7:A2:1C:75:F1:2D:04:C0:92:32:D3:64:46:C4:FF:2D
X509v3 Authority Key Identifier:
keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/rYJH2PeiHHXxLQTAkjLTZEbE_y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.84.0/22
IPv6:
2a03:dc0::/32
Signature Algorithm: sha256WithRSAEncryption
e5:65:27:21:0b:ef:3a:98:e4:ff:62:7f:7a:e2:61:ec:57:de:
f0:05:e2:e3:6e:e9:52:9e:1d:81:53:d4:bf:fa:6f:79:3c:d7:
fe:0d:06:4f:32:83:f7:81:2c:01:b9:c3:41:cb:16:d6:93:84:
cf:08:b8:49:1e:ae:52:ac:4f:8b:b4:4c:12:b9:ab:af:c9:4c:
51:41:42:73:07:e1:2b:e0:46:ad:e3:78:b1:a1:7f:43:2c:43:
ae:47:88:09:45:de:0d:6d:a4:26:d5:79:89:57:eb:46:39:2a:
5a:ef:52:1b:fa:12:51:8d:07:a0:38:71:79:e1:e9:69:81:ef:
12:c2:eb:6f:f5:00:c5:25:f7:b7:da:dc:7d:a2:54:2f:cd:25:
08:67:6d:bb:56:ac:ed:1c:bd:8b:8a:e6:bc:e1:23:f0:4d:30:
68:4b:85:b3:c0:cf:72:42:49:b3:22:7a:b9:d9:c0:c7:7c:1b:
42:c4:d8:da:d3:90:be:f1:ac:b7:59:56:74:c3:b1:b8:17:fa:
80:bd:44:27:19:33:e0:69:da:af:f4:b1:04:87:28:88:53:43:
d4:f3:d7:31:14:ed:19:35:02:d3:48:2e:0a:9d:b2:e7:63:9d:
02:90:2f:a1:45:97:d8:28:87:f6:fc:a6:9f:af:b6:c0:44:5c:
71:37:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:47 2025 by rpki-client