Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/ZgTzwvAnfbRRCYStV-Nhs3Uusg4.roa
File: ZgTzwvAnfbRRCYStV-Nhs3Uusg4.roa (raw, json)
Hash identifier: X0DnUJ2qDSExQjNk0S7a9Yn/BnDuO17xZah/+2zZFBU=
Subject key identifier: 66:04:F3:C2:F0:27:7D:B4:51:09:84:AD:57:E3:61:B3:75:2E:B2:0E
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 0A6A5B33
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/ZgTzwvAnfbRRCYStV-Nhs3Uusg4.roa
Signing time: Sat 01 Jan 2022 04:53:17 +0000
ROA not before: Sat 01 Jan 2022 04:53:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202691
IP address blocks: 185.157.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174742323 (0xa6a5b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Jan 1 04:53:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6604f3c2f0277db4510984ad57e361b3752eb20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:de:91:75:9a:4d:95:ca:a1:06:eb:8f:f3:
7b:c1:87:18:89:f3:e5:7b:9d:dd:26:83:7c:68:03:
8f:42:72:37:fe:4b:bf:65:4e:f5:80:20:bc:26:3a:
11:3b:20:02:b3:26:f3:28:71:d8:3e:ce:79:cf:a8:
4f:b8:b1:8b:ab:a2:aa:d7:64:b7:31:1c:9e:32:55:
98:7e:0a:a1:b0:fc:aa:59:6a:08:d5:e8:af:ce:c8:
95:3c:6e:ae:58:02:36:f0:dc:b5:23:6f:9b:e7:80:
62:b3:83:e8:cd:bc:7c:fc:5a:90:57:54:58:c3:69:
2d:d8:af:7d:ce:cd:3a:65:8f:4a:f5:88:30:f6:0d:
03:1e:18:73:5a:2c:d6:89:93:eb:c6:49:61:d7:b7:
40:0a:ee:b3:35:af:97:24:25:2c:ed:db:0a:a9:99:
5e:ed:0a:e1:fe:f2:56:9c:57:85:f1:a7:04:30:96:
29:be:e7:73:1b:f2:d6:da:34:8a:16:35:2a:2a:47:
3d:67:64:a5:fc:5d:8b:8f:3a:04:fa:63:ad:d7:22:
ad:aa:5a:2d:ed:15:fa:62:99:0a:c2:82:f7:ea:5d:
0a:59:c0:f1:38:da:e3:bc:9f:ef:43:c4:3a:8d:51:
45:3e:8b:95:a6:0f:94:49:ca:dc:39:8d:83:53:a4:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:04:F3:C2:F0:27:7D:B4:51:09:84:AD:57:E3:61:B3:75:2E:B2:0E
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/ZgTzwvAnfbRRCYStV-Nhs3Uusg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:59:8b:8b:11:89:b4:5c:0f:13:70:82:71:3b:35:2b:b2:58:
a9:f7:f4:23:7f:ce:0a:fb:77:de:f4:58:7a:3b:12:68:d7:87:
8e:19:50:09:2e:f8:6a:33:a5:bc:3a:38:be:2a:0e:e2:01:b8:
80:3c:1b:22:29:8b:1a:4b:4e:2b:85:72:04:14:43:3f:15:22:
de:88:fd:e9:d7:a4:0e:f9:c6:1c:d1:56:13:42:76:a4:77:29:
a8:42:48:cb:3f:e2:20:8e:8b:89:9f:a8:3f:be:ee:f2:29:2a:
e9:36:08:37:e4:43:d6:d2:33:51:f6:fe:d0:46:14:86:2a:b3:
38:10:c3:7b:c7:6d:46:c7:a5:dd:6d:c1:a8:1a:e6:a8:bc:1d:
41:d5:de:c2:f2:58:c4:0c:24:64:72:43:aa:ec:3f:a0:96:e4:
d1:32:8d:85:00:b9:b2:a7:07:22:8d:d8:1d:4f:9e:46:63:0d:
c4:38:85:7c:62:8c:4d:bb:dd:ed:3f:ec:da:c1:da:75:74:5a:
6c:13:05:2a:ba:40:c9:5e:8b:b5:ec:81:64:e2:55:fd:cf:a1:
ac:fd:ba:56:5d:3b:ce:63:4e:95:e1:20:dd:cd:ec:a8:2b:53:
52:ef:b0:a1:3e:9b:a7:b2:55:42:89:f2:54:9d:5f:03:d6:7f:
a6:57:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:38 2024 by rpki-client on console-ams.rpki-client.org