Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/zacBqqCMlZzyTgFDNtawxA2e6IM.roa
File: zacBqqCMlZzyTgFDNtawxA2e6IM.roa (raw, json)
Hash identifier: 0kG7euK3YeE0MKSpnNruXx9BRsn9BXGx7LnTqK56okk=
Subject key identifier: CD:A7:01:AA:A0:8C:95:9C:F2:4E:01:43:36:D6:B0:C4:0D:9E:E8:83
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 02567804
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/zacBqqCMlZzyTgFDNtawxA2e6IM.roa
Signing time: Sat 01 Jan 2022 06:02:33 +0000
ROA not before: Sat 01 Jan 2022 06:02:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61239
IP address blocks: 185.12.101.0/24 maxlen: 24
185.12.100.0/22 maxlen: 22
185.12.100.0/24 maxlen: 24
185.12.103.0/24 maxlen: 24
185.12.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39221252 (0x2567804)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Jan 1 06:02:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cda701aaa08c959cf24e014336d6b0c40d9ee883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:28:3e:93:70:82:b3:4e:c4:22:63:b1:aa:
b7:2b:40:74:86:39:83:53:36:1d:30:0f:77:a9:7f:
c0:a6:35:29:2e:10:d5:63:2c:0f:21:ab:36:25:ad:
f1:84:d0:49:96:46:d6:d0:5e:75:ba:d8:8b:56:1b:
72:32:13:c2:73:df:f6:37:2c:99:47:11:28:52:cc:
ce:dd:56:56:46:2b:22:ae:f2:ed:d5:e2:b4:c6:9c:
f5:3d:25:0e:7c:ff:8d:7f:bc:a0:4e:58:16:18:ce:
64:92:c0:47:0b:75:14:1c:22:f7:fc:e5:30:ce:f0:
00:0c:d9:d8:2e:f3:5c:44:52:27:ba:c9:f6:0a:00:
de:35:ec:22:54:35:f1:9e:ad:f0:7d:16:db:7d:d8:
8e:a9:4d:be:5f:9d:92:87:39:4f:24:53:9c:a7:89:
7d:83:3d:1d:a4:87:33:7a:ba:ab:b9:b0:fb:8d:43:
c7:59:ac:2b:5f:ec:bd:44:35:46:96:d5:98:2b:f1:
0d:b0:b4:15:75:3f:cb:86:63:66:a1:87:80:6f:d8:
76:24:41:f9:c5:96:ab:13:5a:ab:62:b7:74:0d:f0:
af:e0:5a:10:ba:46:78:0b:45:4f:f5:d5:fb:89:6b:
1a:fb:5b:7d:51:47:f6:20:36:b5:c4:b0:7b:c3:7a:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:01:AA:A0:8C:95:9C:F2:4E:01:43:36:D6:B0:C4:0D:9E:E8:83
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/zacBqqCMlZzyTgFDNtawxA2e6IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:75:73:78:86:f1:67:53:d8:d1:b7:91:86:ca:c4:9e:e4:b4:
68:f9:8d:cb:89:42:c5:72:40:d7:86:64:89:dd:19:24:51:04:
f9:54:54:2a:33:bd:47:51:82:77:7c:d3:14:e8:46:94:7a:cd:
db:c9:7d:8a:7d:11:99:d2:42:ae:64:a8:e5:31:9b:65:a4:3c:
e8:1d:98:2e:9e:a9:a3:b0:ee:e8:02:e4:7e:3a:24:3a:01:56:
3b:7c:17:21:bb:ca:f9:b6:88:87:d6:91:9f:34:ed:6a:02:c0:
87:0b:98:10:54:c2:d2:c1:e2:ca:fd:50:8a:9d:26:81:06:69:
9f:ea:b2:ae:79:12:54:ad:a5:b3:b7:94:81:70:a9:b7:b2:c5:
8e:7e:8b:c1:e9:48:56:65:0d:6e:1d:b5:1d:02:4c:0f:7f:c0:
dd:57:8e:a9:c5:da:88:1c:01:3b:45:ef:4d:82:29:24:88:22:
90:1d:e2:ad:2d:9e:23:a2:26:49:dc:fe:34:cf:06:6b:4d:45:
95:89:70:f7:a3:14:6d:81:cd:88:a3:de:24:70:ba:27:32:2c:
ac:47:15:0e:96:46:15:37:19:3c:f7:38:2b:2b:84:70:33:6b:
03:ff:ae:15:0b:48:7c:9c:74:8c:47:10:e9:98:6c:c6:d3:15:
5e:e8:2f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:37 2023 by rpki-client on console-fra.rpki-client.org