Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/Vg9ZfnrjEFfxh7aY23t3p-zep1Y.roa
File: Vg9ZfnrjEFfxh7aY23t3p-zep1Y.roa (raw, json)
Hash identifier: TtV+a9zitEpEFlCKnXdG0VY9VhoxQrEvGbTTqtTnZZU=
Subject key identifier: 56:0F:59:7E:7A:E3:10:57:F1:87:B6:98:DB:7B:77:A7:EC:DE:A7:56
Certificate issuer: /CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Certificate serial: 022197
Authority key identifier: 82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/Vg9ZfnrjEFfxh7aY23t3p-zep1Y.roa
Signing time: Mon 21 Mar 2022 16:02:33 +0000
ROA not before: Mon 21 Mar 2022 16:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206732
IP address blocks: 185.178.8.0/22 maxlen: 24
2a12:b140::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139671 (0x22197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8288903d90c01e2d5ce1878805ad4a92d28aedc9
Validity
Not Before: Mar 21 16:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=560f597e7ae31057f187b698db7b77a7ecdea756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:e6:70:ba:13:2a:3b:1b:f6:ca:e6:64:d4:
9a:e9:7d:35:00:bc:23:0c:05:e3:97:e9:39:e1:40:
31:8b:b1:2f:4f:f9:ed:5f:20:a2:7a:ab:30:a9:17:
71:dd:ad:12:44:dd:28:78:7b:14:13:cc:ff:01:9c:
d8:06:fe:33:f4:fe:33:72:d9:aa:9a:68:16:21:f9:
1e:61:bd:29:34:dc:d3:9e:b0:19:d3:93:e6:92:8c:
d4:db:06:4e:f7:d1:84:62:1b:6b:44:01:f6:3f:98:
44:68:25:a7:40:f0:f5:bc:69:1d:e4:50:56:68:79:
cb:64:d7:27:1c:a7:5c:a6:30:50:90:8b:d4:45:a3:
2b:1c:96:b8:fb:ca:da:0e:d6:36:fb:9b:43:f2:88:
d9:03:d8:b6:29:70:62:f4:70:1e:e4:99:59:d8:76:
1e:ee:c7:f4:bd:3d:c3:8f:16:13:9b:e7:17:0f:29:
97:ef:ed:82:9c:16:b2:70:dc:11:bd:e5:fd:38:d1:
eb:f8:4b:61:ab:a4:8e:13:1e:4c:29:21:8b:2d:49:
4c:21:a9:6e:2b:ca:14:a2:84:28:1a:b5:75:8d:65:
5f:88:bd:fb:59:8c:cd:6a:9c:e1:fe:98:de:7d:21:
49:95:b0:c6:40:33:a4:b9:ee:c6:ac:fe:b6:19:79:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:59:7E:7A:E3:10:57:F1:87:B6:98:DB:7B:77:A7:EC:DE:A7:56
X509v3 Authority Key Identifier:
keyid:82:88:90:3D:90:C0:1E:2D:5C:E1:87:88:05:AD:4A:92:D2:8A:ED:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/goiQPZDAHi1c4YeIBa1KktKK7ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/Vg9ZfnrjEFfxh7aY23t3p-zep1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/83f82d-1545-4074-8682-a1de58a3b35b/1/goiQPZDAHi1c4YeIBa1KktKK7ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.8.0/22
IPv6:
2a12:b140::/29
Signature Algorithm: sha256WithRSAEncryption
3b:b7:17:ac:8b:a5:2a:95:09:64:a8:13:81:7b:6c:de:83:95:
68:81:33:b0:f4:5a:13:56:66:e7:3c:2f:2d:c1:2b:d9:35:bb:
c3:e3:5d:fa:e5:a0:23:82:cd:45:10:a4:4e:af:ac:3a:5f:0a:
89:a4:ed:11:68:07:3b:27:0e:a0:04:e2:60:f0:b1:fc:c9:20:
3a:e0:7c:1c:59:1a:8a:20:63:7e:71:5f:de:2e:fa:38:dd:eb:
d7:c5:21:13:32:9e:8d:01:df:80:84:28:d3:3d:70:ee:a3:55:
2f:01:14:25:f8:2a:a6:92:d9:fc:c9:18:93:cb:49:ee:03:04:
1b:0a:67:b0:65:7f:8e:c8:e7:88:8e:09:b4:54:2a:a7:64:1a:
74:78:ab:f0:98:3e:d8:34:20:e9:79:31:1c:4b:60:5f:5f:21:
5a:ec:8b:99:89:ee:36:0d:80:e3:63:0a:ea:d4:8f:04:4c:ef:
85:ab:f5:34:cc:09:d8:3b:37:2d:2c:86:9a:95:32:72:e2:f1:
38:9a:46:a0:b7:48:c7:cd:bb:da:47:cd:c6:da:25:d7:35:30:
85:a8:a5:ff:bc:c0:26:39:80:31:ee:c2:62:e7:22:b3:b6:6f:
41:a5:34:bd:c9:35:a3:12:28:bd:39:b3:1d:5e:b8:08:9a:bd:
b4:ae:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:01 2024 by rpki-client on console-ams.rpki-client.org