Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/RA4ZH0PE59eSKH2ZYTKxP29L4B4.roa
File: RA4ZH0PE59eSKH2ZYTKxP29L4B4.roa (raw, json)
Hash identifier: RZGP3sZbufJP18aqN/RBa48mclCIhE+z9QR1CK2oSRQ=
Subject key identifier: 44:0E:19:1F:43:C4:E7:D7:92:28:7D:99:61:32:B1:3F:6F:4B:E0:1E
Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial: 0915C81A
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/RA4ZH0PE59eSKH2ZYTKxP29L4B4.roa
Signing time: Thu 10 Feb 2022 10:07:42 +0000
ROA not before: Thu 10 Feb 2022 10:07:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41528
IP address blocks: 185.71.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152422426 (0x915c81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Validity
Not Before: Feb 10 10:07:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=440e191f43c4e7d792287d996132b13f6f4be01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:82:f9:4b:b5:c2:c3:af:00:b7:84:a0:29:
d9:ad:1c:bc:03:6f:35:a3:f5:65:2e:53:01:7b:25:
4b:ba:41:ad:fc:ae:73:2c:22:14:60:36:5e:ea:12:
bc:8b:b0:34:36:61:33:da:ba:cb:a6:97:17:6e:ed:
de:fd:18:4b:64:a7:c0:d5:d5:c1:7f:cb:ba:21:c5:
c5:76:ce:5a:6d:eb:04:7b:05:98:37:18:c5:fe:a0:
a5:a9:ac:4a:45:17:b3:4a:97:9e:77:50:0f:4e:18:
8d:d7:a5:e5:ea:69:72:50:b6:ea:77:0d:c3:28:26:
3c:26:42:3d:1c:72:6c:07:df:bf:e9:2c:9d:2d:06:
be:5e:c7:9f:d0:05:77:1b:b2:16:54:64:76:ad:96:
31:7c:89:cd:74:ee:02:7a:02:ae:6a:1e:c2:cf:82:
12:2c:0d:b3:f8:29:d1:2a:75:60:e9:79:02:b3:d6:
57:e2:46:c4:93:4f:bf:b3:8a:f7:6e:20:01:2c:3f:
fb:6e:b8:50:e5:3e:a1:35:77:2a:06:30:af:bc:fc:
9b:30:27:c1:3a:08:cc:0c:d7:ea:fc:16:20:38:c2:
41:14:38:b7:1b:00:23:0c:39:e1:8e:4f:f8:39:20:
9f:a7:be:55:12:48:2c:0e:32:b0:c2:ea:24:f5:85:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0E:19:1F:43:C4:E7:D7:92:28:7D:99:61:32:B1:3F:6F:4B:E0:1E
X509v3 Authority Key Identifier:
keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/RA4ZH0PE59eSKH2ZYTKxP29L4B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:46:da:73:c6:6a:69:bf:18:00:36:fd:6e:56:1b:0b:2d:50:
57:aa:ea:c9:57:98:67:59:6b:8c:95:8c:80:66:7d:7b:23:8c:
a5:2b:6a:82:d6:8b:7f:07:4f:bb:f1:d6:3f:81:74:8f:0a:a6:
1e:7e:c1:97:6e:f9:ec:2f:78:db:cf:da:06:db:10:bd:aa:20:
0f:a0:22:ba:20:29:1c:89:0b:51:f2:f9:0f:1c:97:cc:94:12:
93:e3:6f:3d:3e:6b:53:36:86:b1:fb:77:4d:4b:e2:7d:21:54:
e7:52:68:57:24:5d:b9:f6:53:05:36:3d:3c:33:1d:1c:31:c9:
17:f5:41:e4:8a:7f:a1:61:48:d7:1a:df:da:f0:56:62:83:2a:
84:36:41:15:75:bf:2c:5a:f8:ca:a7:1a:c2:d2:d8:ab:e1:c1:
5e:33:7c:bb:b7:55:4d:9e:b0:e2:1d:44:f0:b9:38:47:f0:6c:
93:eb:cc:80:6c:30:3d:e0:4d:91:a2:c5:9d:74:16:e4:b5:58:
ee:e4:af:bd:a6:06:73:90:05:7d:cd:f1:2d:b5:c6:d8:a6:b9:
4c:3b:96:d5:75:c4:30:e6:86:48:24:14:e3:96:04:10:58:2c:
08:06:2b:00:96:bb:a9:6b:15:e1:76:f5:0f:45:5f:0d:f2:19:
43:87:2b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org