Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/ZRttji3PLcxR0CDR2oWPpgllsp4.roa
File: ZRttji3PLcxR0CDR2oWPpgllsp4.roa (raw, json)
Hash identifier: hT+/wAyWhsNbeMp8L2KYndhhLw+xGqw6x8KeHLu9zkU=
Subject key identifier: 65:1B:6D:8E:2D:CF:2D:CC:51:D0:20:D1:DA:85:8F:A6:09:65:B2:9E
Certificate issuer: /CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Certificate serial: 01856B932708051179BF5CC60D0A492D5AB7
Authority key identifier: 80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/ZRttji3PLcxR0CDR2oWPpgllsp4.roa
Signing time: Sun 01 Jan 2023 04:24:43 +0000
ROA not before: Sun 01 Jan 2023 04:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136184
IP address blocks: 185.228.92.0/24 maxlen: 24
185.228.95.0/24 maxlen: 24
185.228.94.0/24 maxlen: 24
185.228.93.0/24 maxlen: 24
185.228.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:27:08:05:11:79:bf:5c:c6:0d:0a:49:2d:5a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d608a14118b1a8dcddebbb40f96ecd48f85c71
Validity
Not Before: Jan 1 04:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=651b6d8e2dcf2dcc51d020d1da858fa60965b29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:f7:f0:f2:a4:47:8c:45:01:e1:81:29:27:
84:6f:97:aa:01:f7:e6:fd:27:9f:1d:14:68:e5:00:
20:b2:61:bb:41:2f:a7:07:21:89:ea:96:05:29:40:
ae:a0:1e:16:b7:c4:0a:55:5e:64:ba:4e:48:fd:82:
da:84:84:db:92:cf:a1:aa:13:4e:dc:6a:f2:26:cc:
87:9c:94:8d:cf:54:7d:61:63:f5:3c:09:8b:93:cb:
f2:37:73:b8:dc:4d:28:60:07:26:0c:e6:5b:5a:19:
73:e9:1c:47:26:c0:a0:14:a4:c4:e7:20:3a:a2:12:
39:ab:91:94:e8:02:61:79:ac:2d:2c:c6:51:4e:ac:
e2:69:e2:0c:02:d1:5a:0f:3c:85:c8:ea:81:ba:9c:
0b:61:22:7b:73:81:6c:f3:4d:c8:07:ef:df:37:2b:
e6:d0:db:5e:ec:55:b3:89:cb:b0:80:75:f1:7c:80:
e6:07:de:90:6b:f5:a4:63:38:03:ce:d9:68:46:54:
1c:a5:7e:49:d9:40:57:3d:8e:dd:77:22:9c:37:b4:
e2:37:98:18:34:df:2a:89:00:74:a7:0e:c7:13:48:
54:f4:24:50:7b:3a:60:f7:14:db:33:fd:a2:86:ec:
18:c9:1a:ed:3f:1e:05:f6:6c:31:fa:99:a3:06:d2:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1B:6D:8E:2D:CF:2D:CC:51:D0:20:D1:DA:85:8F:A6:09:65:B2:9E
X509v3 Authority Key Identifier:
keyid:80:D6:08:A1:41:18:B1:A8:DC:DD:EB:BB:40:F9:6E:CD:48:F8:5C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNYIoUEYsajc3eu7QPluzUj4XHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/ZRttji3PLcxR0CDR2oWPpgllsp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/012130-8103-4c25-93ba-9928dd3f2f82/1/gNYIoUEYsajc3eu7QPluzUj4XHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.92.0/22
Signature Algorithm: sha256WithRSAEncryption
69:8a:90:93:35:f6:77:86:22:f0:d0:90:6b:a2:cd:34:36:c0:
a3:bf:1c:c0:94:28:68:10:3f:98:32:9b:bb:36:89:36:7a:9b:
46:67:ea:34:a4:d2:52:cb:8f:f8:2a:d3:dc:ca:5d:91:85:e6:
31:3b:84:e0:3a:07:02:29:0d:31:8a:d0:70:ff:fe:87:eb:c2:
ab:9f:3b:77:0b:65:4c:06:3c:f4:2a:1e:47:11:d5:67:e4:2c:
42:7b:27:41:d9:ab:3e:6a:63:31:d3:73:79:9d:14:fe:7e:17:
6d:cc:be:10:fc:d4:02:c1:8a:b8:70:e4:47:e3:1d:4f:30:3e:
0b:af:b8:b7:68:4a:0d:a6:6b:7a:2a:2f:c6:14:4a:41:97:3c:
16:12:fb:24:72:82:9c:e1:7b:e7:f8:f5:16:40:7a:4a:6a:31:
6a:86:29:34:e1:65:fe:e4:31:05:2a:4a:d4:ce:8c:9b:cf:07:
32:17:13:6a:02:44:64:5e:fa:bf:30:2a:70:c3:62:f0:c5:ab:
c4:8d:48:e4:69:b6:9b:62:25:b9:3b:cb:35:55:93:62:76:b6:
d4:f1:65:4a:69:22:ac:50:81:07:15:5e:88:e4:ea:81:bd:fd:
99:45:3c:be:2d:46:ec:7d:d2:cb:22:19:35:0f:30:3d:db:02:
93:db:c4:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrkycIBRF5v1zGDQpJLVq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZDYwOGExNDExOGIxYThkY2RkZWJiYjQwZjk2ZWNkNDhm
ODVjNzEwHhcNMjMwMTAxMDQyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTFiNmQ4ZTJkY2YyZGNjNTFkMDIwZDFkYTg1OGZhNjA5NjViMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PL38PKkR4xFAeGBKSeEb5eqAffm
/SefHRRo5QAgsmG7QS+nByGJ6pYFKUCuoB4Wt8QKVV5kuk5I/YLahITbks+hqhNO
3GryJsyHnJSNz1R9YWP1PAmLk8vyN3O43E0oYAcmDOZbWhlz6RxHJsCgFKTE5yA6
ohI5q5GU6AJheawtLMZRTqziaeIMAtFaDzyFyOqBupwLYSJ7c4Fs803IB+/fNyvm
0Nte7FWzicuwgHXxfIDmB96Qa/WkYzgDztloRlQcpX5J2UBXPY7ddyKcN7TiN5gY
NN8qiQB0pw7HE0hU9CRQezpg9xTbM/2ihuwYyRrtPx4F9mwx+pmjBtKX7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUbbY4tzy3MUdAg0dqFj6YJZbKeMB8GA1UdIwQY
MBaAFIDWCKFBGLGo3N3ru0D5bs1I+FxxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEt
OTkyOGRkM2YyZjgyLzEvWlJ0dGppM1BMY3hSMENEUjJvV1BwZ2xsc3A0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8wMTIxMzAtODEwMy00YzI1LTkzYmEtOTkyOGRkM2YyZjgy
LzEvZ05ZSW9VRVlzYWpjM2V1N1FQbHV6VWo0WEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueRcMA0G
CSqGSIb3DQEBCwUAA4IBAQBpipCTNfZ3hiLw0JBros00NsCjvxzAlChoED+YMpu7
Nok2eptGZ+o0pNJSy4/4KtPcyl2RheYxO4TgOgcCKQ0xitBw//6H68Krnzt3C2VM
Bjz0Kh5HEdVn5CxCeydB2as+amMx03N5nRT+fhdtzL4Q/NQCwYq4cORH4x1PMD4L
r7i3aEoNpmt6Ki/GFEpBlzwWEvskcoKc4Xvn+PUWQHpKajFqhik04WX+5DEFKkrU
zoybzwcyFxNqAkRkXvq/MCpww2LwxavEjUjkababYiW5O8s1VZNidrbU8WVKaSKs
UIEHFV6I5OqBvf2ZRTy+LUbsfdLLIhk1DzA92wKT28Rj
-----END CERTIFICATE-----
Generated at Wed Apr 9 08:19:12 2025 by rpki-client