Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/zwRJIE0cOxRCcpA25oBlaxPSrEQ.roa
File: zwRJIE0cOxRCcpA25oBlaxPSrEQ.roa (raw, json)
Hash identifier: xD6siY6f6viKkH/z3M0Zeaj2P+TNBwjY9xdesJ6Y9Z8=
Subject key identifier: CF:04:49:20:4D:1C:3B:14:42:72:90:36:E6:80:65:6B:13:D2:AC:44
Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial: 15FBA77A
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/zwRJIE0cOxRCcpA25oBlaxPSrEQ.roa
Signing time: Sat 01 Jan 2022 14:02:16 +0000
ROA not before: Sat 01 Jan 2022 14:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.83.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368813946 (0x15fba77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Validity
Not Before: Jan 1 14:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf0449204d1c3b1442729036e680656b13d2ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:06:26:3a:85:a1:8a:8b:48:d4:f9:55:f3:
71:8e:43:b3:53:36:39:2c:c5:69:9e:b2:3e:f7:d1:
ca:1c:85:d3:90:b7:09:54:d8:11:cf:1d:c8:e7:d7:
00:a9:36:e3:7e:f5:31:4d:5a:67:8e:7b:74:05:84:
1e:7e:16:7a:21:a9:a8:68:f2:7f:1a:21:5c:68:50:
e1:e6:38:c0:0c:5a:95:12:d5:16:8e:94:15:79:92:
41:2f:a6:eb:1e:d0:23:b4:ac:db:ba:a0:5c:60:5b:
f0:29:01:cd:aa:c5:db:7a:77:81:fa:93:7b:d5:fa:
02:9b:fa:1c:f2:8d:f0:74:a5:24:7d:b2:86:8b:5d:
90:11:b6:5d:d2:b3:18:1c:46:af:21:c1:5e:56:ea:
cb:d9:ff:a6:71:45:c5:21:d6:11:f0:e9:bf:98:ef:
1d:cc:21:5c:af:5b:ce:b6:52:ae:e2:65:e1:b4:ff:
75:c5:ed:10:ca:70:c4:02:f6:b9:90:06:4e:d8:d2:
a8:a2:90:38:fa:aa:6e:17:52:12:5e:4f:b5:bd:34:
de:16:fc:f6:e6:27:54:43:fa:bb:37:6c:c6:cc:1a:
a2:d5:57:d4:89:2b:62:ed:04:74:7d:d0:7d:6c:40:
26:c7:fe:d2:b0:ce:82:03:4c:a6:91:eb:36:98:6d:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:49:20:4D:1C:3B:14:42:72:90:36:E6:80:65:6B:13:D2:AC:44
X509v3 Authority Key Identifier:
keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/zwRJIE0cOxRCcpA25oBlaxPSrEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.215.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1f:58:f1:9d:07:bb:7d:a1:ea:cc:3b:5a:be:b6:e6:71:e0:
fa:90:7f:f9:22:00:d4:b6:55:11:fb:c4:c7:47:0b:cd:21:19:
cb:67:c3:72:fe:a2:b0:05:9c:54:6d:87:0f:13:1a:6b:73:68:
d1:0b:7d:09:f6:5c:a5:e2:dc:5e:43:bd:47:d9:87:36:10:cd:
dd:44:02:8c:1c:7d:e9:b9:e0:ad:ba:86:b4:4c:fe:c2:c3:4d:
a9:be:73:3a:ff:8d:5a:6c:e8:6a:a2:6c:4c:26:b1:36:70:0e:
04:dc:1a:f5:ed:68:74:94:05:be:17:8a:3d:47:de:ad:18:bd:
42:51:2e:68:da:10:c5:84:a2:a3:d6:34:0f:87:5c:44:2a:36:
9c:f7:50:1f:c9:66:7c:b1:43:88:00:44:e3:86:b0:3e:07:bc:
3a:5e:5a:2d:0a:ab:f9:08:de:7e:b5:3d:e0:29:42:8a:e4:8a:
36:bc:84:3a:df:0c:10:72:f5:e0:26:87:5f:d0:d9:66:98:25:
07:39:42:1d:4c:08:1e:61:7d:44:4e:ed:cb:65:53:d2:7a:c8:
b9:c0:b3:ad:75:84:b2:bb:92:7d:b5:f0:7d:f8:7a:56:de:c4:
2d:f8:bd:89:62:cf:d7:df:e0:12:0d:d4:50:2f:8e:3f:f6:0c:
e7:bb:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:00 2024 by rpki-client on console-fra.rpki-client.org