Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ZHHafBrWKFvwnz7uWA0vxFRPclk.roa
File: ZHHafBrWKFvwnz7uWA0vxFRPclk.roa (raw, json)
Hash identifier: 4V1G1vm5ZtDTnKHhIEII510IgsY+2CmKdMF+VQokWA8=
Subject key identifier: 64:71:DA:7C:1A:D6:28:5B:F0:9F:3E:EE:58:0D:2F:C4:54:4F:72:59
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 0B1C6F7A
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ZHHafBrWKFvwnz7uWA0vxFRPclk.roa
Signing time: Fri 08 Apr 2022 10:28:26 +0000
ROA not before: Fri 08 Apr 2022 10:28:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 85.239.48.0/22 maxlen: 22
85.239.56.0/22 maxlen: 24
85.239.52.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186412922 (0xb1c6f7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Apr 8 10:28:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6471da7c1ad6285bf09f3eee580d2fc4544f7259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:4a:68:da:bb:0c:5a:8a:54:d8:57:50:2d:
af:4f:78:27:cd:0e:5b:08:36:70:3a:04:20:ef:a4:
7d:07:42:3c:8f:6f:55:29:ed:fb:be:4e:40:af:d7:
fb:2e:60:7f:a6:a0:1c:8c:88:84:72:22:05:83:bc:
84:28:dd:1f:4f:71:d4:53:e7:15:e9:b3:28:38:df:
00:b8:99:d1:e8:6a:93:9a:bd:2a:ae:61:4a:c7:a9:
d6:2a:16:88:14:49:11:e3:cb:f7:09:cc:20:02:83:
a2:cd:a9:ed:cd:f4:c4:65:83:f1:52:d5:d8:11:8d:
ed:f9:46:c5:99:1f:07:f2:ec:ce:e3:b0:03:69:bf:
f4:02:dd:f3:3f:92:af:39:9c:2f:67:5b:be:84:b6:
69:02:0b:3c:33:aa:5b:bc:d8:6f:3f:b6:fc:05:b5:
5b:0c:c1:4b:29:cb:d0:a2:6b:38:67:d7:63:ec:27:
29:8b:91:e8:17:fa:37:3f:b3:c7:14:02:c1:58:99:
eb:9b:9c:83:46:5c:7a:47:fc:34:e6:7d:26:c9:d2:
31:6c:22:69:b5:2c:0a:60:ed:f3:64:e0:7b:28:ff:
94:2e:4f:14:54:e1:c6:5a:2e:55:32:ca:6a:72:7c:
29:58:27:fa:41:84:bf:e3:55:58:87:5c:29:6d:d3:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:DA:7C:1A:D6:28:5B:F0:9F:3E:EE:58:0D:2F:C4:54:4F:72:59
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/ZHHafBrWKFvwnz7uWA0vxFRPclk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.48.0-85.239.59.255
Signature Algorithm: sha256WithRSAEncryption
a4:bf:f4:da:03:85:5a:b7:e0:39:dd:57:3c:53:02:fa:7d:17:
f9:36:19:e5:ff:06:11:5b:f7:60:b8:6a:4b:59:dc:9b:cd:b7:
57:77:c1:a4:eb:e0:8a:d2:9f:ae:fd:12:c7:fa:0d:bd:ff:7d:
90:25:7d:60:ed:55:f6:07:d1:59:c3:cd:f5:a1:a9:25:d0:b6:
17:5c:ce:61:2b:7a:b5:aa:9e:1d:04:bc:21:71:25:2e:78:e7:
0b:f4:05:5f:ce:29:4e:a2:4f:5b:c1:e4:9f:39:b9:89:7e:17:
9c:ea:f3:62:29:48:05:1d:e6:07:74:d1:b0:f6:ea:a7:27:9b:
5c:6c:dc:a3:95:11:37:6c:d0:d7:5b:13:c2:d2:e4:0f:3a:55:
9a:18:80:23:8c:aa:9e:58:bf:ec:d6:1b:4d:62:fc:1c:27:00:
0e:00:83:e8:86:fe:84:17:73:53:41:41:75:6c:8d:10:6b:84:
3f:0e:8a:89:19:ab:f5:22:cf:ed:49:7a:16:11:d0:e6:9e:f9:
8a:b1:21:e5:b1:14:5f:01:fc:06:a4:7f:fd:47:82:69:e8:b1:
36:c9:8c:75:f5:0a:81:8f:64:21:8f:81:9f:eb:f4:ec:06:99:
0a:5b:df:b0:de:80:43:6f:52:db:7f:cf:0a:e8:e9:75:b6:87:
e7:20:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org